Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File:                     AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier:          PXb4/Xcw0hFm3gkGzhH4iICKhDmnO8JON+k8DHL5BM0=
Subject key identifier:   3D:8A:46:16:0D:18:31:35:00:A9:5C:E9:43:C9:02:83:19:D9:DA:5E
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer:       /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial:       01962E98BA67512B0FE7A2C869FE4AC446AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: 0ya4sfz42L60TJ0bcAyUqtENC28.roa (hash: 8fugK/0QqnnO0V3k6nBzfLlx/GUIRpJ1ovogrf7zS2I=)
                          2: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: 3Ov8ZHutvlhgJC+O1/g97go365iun88Ts/EfAzYFZxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ba:67:51:2b:0f:e7:a2:c8:69:fe:4a:c4:46:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=3d8a46160d18313500a95ce943c9028319d9da5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:8f:bf:99:8a:de:f3:ad:97:74:7a:e4:0f:
                    a8:18:ac:e8:52:4b:88:c6:15:a3:0a:0a:20:f6:1b:
                    6c:44:72:8e:79:11:cc:8c:f6:80:8a:1f:ec:40:3b:
                    14:e4:63:21:a9:31:ae:cc:fa:5f:6f:e5:29:8b:9b:
                    1d:e4:95:c5:8f:bb:a8:8b:ed:8d:7d:7a:4e:05:0e:
                    d7:8d:88:54:49:d5:14:fd:37:bb:ba:2a:43:ce:ff:
                    e5:7b:f6:ea:af:86:f1:77:4c:65:38:0e:06:66:5b:
                    a8:9a:c0:2c:a6:61:92:f5:b8:71:b0:b0:a2:61:35:
                    49:ea:82:61:9e:ce:f3:fd:d6:7a:1e:02:e7:a4:4f:
                    2f:e7:9e:66:e9:91:4a:0a:5b:61:3c:47:1d:7b:eb:
                    06:21:53:ba:d1:1b:08:ee:ac:ed:ea:2b:54:f5:63:
                    59:10:94:5e:b4:62:10:81:19:4b:f8:9a:30:79:53:
                    6c:f4:3d:d3:79:e1:c7:ec:6d:bb:e6:2b:d1:12:4f:
                    83:8a:b7:cf:22:48:8e:6c:b9:f4:3e:11:a2:25:8d:
                    dd:b5:f2:8d:0e:3f:25:ad:d3:cd:a4:a4:d2:a7:b0:
                    f4:98:26:85:38:73:f1:d8:52:a1:3a:79:ee:fe:31:
                    20:c0:7a:40:98:96:97:b7:fd:b1:bb:82:82:ea:8f:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8A:46:16:0D:18:31:35:00:A9:5C:E9:43:C9:02:83:19:D9:DA:5E
            X509v3 Authority Key Identifier:
                keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:47:c6:40:91:1b:ef:7b:aa:6f:e9:56:4f:ff:fb:e5:df:
         4f:0e:da:34:d6:40:d7:6e:f4:01:6e:50:5c:5d:a4:46:be:c8:
         14:61:0f:eb:1d:d0:a8:7f:28:c3:73:71:44:c7:b3:e4:17:26:
         77:1e:87:fa:fc:b4:4f:ac:f7:ae:bc:a9:cf:fb:4a:f8:04:40:
         2e:b9:92:62:44:13:6a:38:26:b1:f0:84:90:4a:e1:07:8c:be:
         c7:1f:c3:97:00:68:d1:df:7a:74:5c:24:f9:83:37:fb:36:b3:
         4e:c1:01:8d:fb:5e:78:30:5d:07:0e:bd:47:26:4a:16:e4:2f:
         c0:27:6c:af:bc:a8:15:65:ad:dc:97:c3:2a:93:80:7a:d0:37:
         e2:85:8f:15:0d:fc:b2:ed:65:52:7a:ab:21:81:67:d0:df:ad:
         e1:36:59:af:ff:b9:e0:e1:e5:18:05:ed:e9:12:38:36:b8:26:
         4e:cd:dc:95:99:bc:89:c8:91:06:6a:aa:01:8f:02:d6:a2:81:
         66:8e:1c:ab:fe:83:4e:b3:91:37:2b:f7:47:ac:3b:4f:cb:be:
         ce:7f:5e:12:3e:9c:e5:0c:a1:c7:44:0c:27:5f:2f:fb:3a:3f:
         6d:2f:23:64:63:fa:b7:25:e9:83:e1:c4:a5:a8:67:72:af:0a:
         b5:bf:44:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----