Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File:                     abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier:          VJIxyXaZyVGQfLggWgK/uJdPTHOmyngQi9XX/338xH0=
Subject key identifier:   1A:54:0E:CB:62:4E:79:AA:E6:17:F5:76:F0:3A:4C:C4:FE:EB:5D:28
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer:       /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial:       01962ECF8996A85391B6314AB8CE32AA526D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number:          0922
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: A0vsL2z_xaeExEMFhErE3dgWYuI.roa (hash: GFluxTgPqxFYWQe8ASr2AzVuLwmCDibJdLSINZzoxsw=)
                          2: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: MuLxmDhJ2zH78i3a8eHtW9Vm61Tolak6t8w87Jblo+M=)
                          3: i86Qnss2Hx--RBAsZcussull0WM.roa (hash: ZSa0NJzxbSdhBzuGRMo0rW/M52VwcaybfD76Q9/vKd4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:89:96:a8:53:91:b6:31:4a:b8:ce:32:aa:52:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=1a540ecb624e79aae617f576f03a4cc4feeb5d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:1f:80:e1:65:3e:69:1f:5a:f7:58:0f:e1:
                    8a:13:73:4e:3f:d0:60:dd:9a:d4:ca:d1:3e:f0:59:
                    6a:9d:b4:78:13:dc:be:93:67:4b:8a:96:4d:cc:12:
                    a6:e5:9a:3a:e3:9a:03:00:53:e9:a5:4d:ea:7f:2a:
                    b2:1e:7d:32:8e:33:ef:55:a1:fa:e8:6f:60:e8:83:
                    b9:05:5e:d2:63:dd:52:96:21:29:2f:20:6b:db:5d:
                    85:0f:5a:1d:e6:9c:b5:6b:2e:40:e5:36:f3:83:ea:
                    1c:64:32:4f:7a:5b:c3:6b:8b:e1:a8:11:18:4a:d3:
                    b4:db:3d:3c:67:e8:ee:93:d3:dc:93:25:26:52:06:
                    c7:2e:8b:ab:f4:03:6e:a2:92:56:28:d5:58:74:98:
                    df:5f:1c:54:b5:42:ac:e5:17:a2:17:78:ee:5e:8c:
                    1f:f6:c7:4b:d3:e8:c3:51:98:2f:0f:85:2d:cd:1c:
                    16:7e:db:41:f3:10:78:6d:75:14:3d:fc:38:17:c1:
                    5c:c5:62:27:1c:c3:16:52:99:d7:49:3f:ce:5d:86:
                    c9:4b:c8:5d:c2:45:f3:1f:ea:fe:76:2d:2b:e9:15:
                    43:33:d7:ab:18:1d:35:a1:b4:91:ce:15:4e:cb:76:
                    43:03:7c:dc:e0:91:15:0f:ad:ff:f4:da:9b:b0:65:
                    d2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:54:0E:CB:62:4E:79:AA:E6:17:F5:76:F0:3A:4C:C4:FE:EB:5D:28
            X509v3 Authority Key Identifier:
                keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3e:37:f3:f0:8e:97:39:67:db:71:17:e9:dc:1a:b3:3f:6d:
         65:a9:94:5d:24:37:f2:11:ca:33:61:1f:f1:fc:9f:ce:89:f9:
         5e:eb:03:00:e7:63:16:cf:21:9f:b2:d5:2b:59:ff:3e:0c:a5:
         26:b0:fd:79:80:10:21:0a:ca:d7:a4:1e:42:51:7f:5b:f7:a9:
         d3:d0:8f:19:48:f3:de:b5:f9:f4:c7:96:c4:e2:ca:c9:ad:2b:
         34:6b:74:ef:72:18:0f:eb:74:4b:5d:40:ca:61:de:86:e0:aa:
         ba:16:12:a6:10:e0:6a:40:b8:3e:17:1b:a1:da:5a:95:e7:36:
         ea:58:7c:61:54:ad:fd:08:95:c8:b1:20:c9:e9:6a:1d:ce:d3:
         73:00:04:f6:ca:86:3f:8d:31:6b:2d:c7:f5:ce:49:a2:90:e9:
         9e:45:05:76:81:8c:b8:6a:9d:79:0c:84:37:9a:2c:35:2a:bc:
         27:d6:19:38:1a:30:78:d2:8d:9a:b6:44:26:0c:61:0b:fc:ac:
         e8:2b:6c:4e:3d:a7:18:aa:14:bd:1e:84:bf:2c:cc:df:75:fb:
         dd:6a:4c:d7:c4:60:c6:27:31:bf:ee:46:cb:2c:0e:c5:3f:45:
         cc:03:71:c1:10:bb:bd:1e:5a:84:ed:40:54:00:c1:30:8d:42:
         fb:0d:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----