Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File:                     aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier:          Viv+9K+1GxUuj6DkoUV+k90mw8PnRtcL/JDqKx8Y618=
Subject key identifier:   49:80:5C:64:56:FE:F8:DE:94:D2:87:C7:64:70:97:7E:E5:5D:B8:B0
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer:       /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial:       01962FAB5F0A46F3C31E372A44A2E6FC8FF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
                          2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
                          3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: 9M4O28oh1KMl0nnBqhmFbj3xyza98aIaSf4g6IwIREQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5f:0a:46:f3:c3:1e:37:2a:44:a2:e6:fc:8f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=49805c6456fef8de94d287c76470977ee55db8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:36:0e:ce:6d:99:cd:e9:8e:d0:b8:e7:06:
                    2b:c5:db:b8:d7:e3:e1:17:58:0c:14:b2:22:b9:cf:
                    50:68:6d:2a:0f:05:24:89:ad:e4:2e:74:5c:db:84:
                    67:4e:ef:87:bc:8f:83:c4:63:31:b3:79:5c:53:0e:
                    fd:4e:03:cf:ca:41:ff:1f:bd:5a:de:0d:e6:f4:96:
                    c1:56:88:26:6f:47:a1:c6:25:e3:f9:ad:91:fb:ff:
                    97:7f:bc:d6:25:3f:4a:79:9d:84:87:f8:0c:0a:41:
                    b5:e8:8d:14:89:fe:1b:9b:c5:bd:69:3a:3c:10:dc:
                    b7:6b:20:94:88:b3:53:6b:eb:48:80:9c:3d:ca:57:
                    8f:f9:96:d8:c7:77:cc:d6:e4:89:4c:5a:c5:3a:76:
                    07:60:75:ae:f9:f6:57:2e:f6:0b:f6:54:3e:07:1e:
                    92:ee:e7:84:59:84:8f:f0:f9:12:63:d2:5c:3d:4b:
                    ba:19:9a:ba:17:19:64:40:47:5e:9f:a1:f6:75:7e:
                    4d:51:ea:17:6f:19:09:4b:03:fc:ea:15:05:91:2d:
                    79:ab:56:0c:40:6f:cc:28:ae:40:a2:43:32:b3:c4:
                    79:d0:c5:26:cd:fb:9d:0f:f4:51:fe:9a:1b:6f:72:
                    26:9b:78:06:94:1d:85:8f:73:9f:3b:7c:e9:44:09:
                    e5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:80:5C:64:56:FE:F8:DE:94:D2:87:C7:64:70:97:7E:E5:5D:B8:B0
            X509v3 Authority Key Identifier:
                keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4f:b0:4d:78:19:59:e7:a8:ad:c1:26:68:16:ea:63:fd:4e:
         84:3b:40:b4:cb:e8:f3:2b:bb:3b:39:aa:d1:7a:39:cd:7f:89:
         a0:80:b7:92:ec:35:69:c3:83:96:d4:34:5d:a1:ba:4f:2c:84:
         f6:4d:8c:91:ad:e3:97:52:56:f6:71:24:48:cd:d8:e0:97:28:
         6e:c9:10:cd:8a:65:4a:e9:6c:20:97:4b:43:63:20:f6:ec:c2:
         a4:31:94:be:a9:e8:00:15:43:1c:14:9f:b9:92:0a:e7:4a:0d:
         12:36:09:ec:1d:6d:27:7d:ff:48:d6:14:41:1d:2c:e5:fe:7d:
         86:ed:27:a2:55:10:66:0d:45:5d:23:7c:c0:f2:d9:13:bb:f5:
         63:92:23:90:ab:c7:fc:0c:3a:47:d8:c5:60:6b:55:c0:64:64:
         00:c7:e5:20:ae:25:d2:c4:f6:7f:b5:17:cf:90:aa:c5:e7:15:
         e1:59:78:63:db:6c:8b:75:89:dc:26:45:68:17:26:9c:37:ed:
         5a:c2:99:6a:e0:08:e8:ca:fe:4f:b0:b0:a0:4d:39:c7:72:57:
         24:b6:83:a7:85:de:9d:48:89:1b:a7:09:60:64:5b:33:21:b5:
         74:0b:78:8a:44:97:94:c8:0a:1d:9f:e2:76:fe:62:b6:ce:a1:
         0f:b8:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----