Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
File:                     pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft (raw, json)
Hash identifier:          7cv0dBEaxp0h9224PMP1rREqYCfIkBPRxQhMuCAm6MQ=
Subject key identifier:   99:E5:AC:49:09:0D:69:68:35:9D:D7:8C:15:66:4D:45:2D:19:55:F1
Authority key identifier: A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0
Certificate issuer:       /CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
Certificate serial:       01962DF40AADEE43E754FB6F82933FFD7DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft
Manifest number:          0A6C
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: E8EItKN2__9iKd7VUUHBehRVQCo.roa (hash: mIn23TrAWNsxopm3nGDSwuz19rtPaaB79Dzo0Qrhuqk=)
                          2: pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl (hash: CfY4ica5LR9BmJqXNPrGPtZX2wit6X3i/Fq5m3xxjyg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0a:ad:ee:43:e7:54:fb:6f:82:93:3f:fd:7d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a408fc9246042751110d2ec5065d0c47d1d43cd0
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=99e5ac49090d6968359dd78c15664d452d1955f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:fc:a6:17:e1:2e:c8:c3:7d:21:12:86:d2:
                    aa:b2:e6:fd:29:9a:78:10:74:e3:97:f8:a1:2e:54:
                    14:1f:91:cb:65:f2:f8:62:8b:79:28:f3:61:f9:a7:
                    66:98:53:a6:47:b3:03:96:bd:ae:be:4f:79:24:4e:
                    2a:65:8a:02:ee:7e:6f:a3:0b:37:32:a8:54:71:d5:
                    e0:b7:31:7a:69:47:67:c4:92:52:31:84:09:1f:7f:
                    ae:df:b3:de:6b:f1:00:48:84:7f:03:3e:f8:16:91:
                    82:39:1f:cb:67:99:38:0e:06:6b:1b:5b:27:e1:50:
                    e3:f6:e0:17:94:d1:e1:d3:ff:29:a0:71:fb:47:66:
                    a1:fa:f4:53:70:f3:d0:53:54:16:52:b7:e2:b8:d5:
                    ad:f5:19:ad:e5:4f:6b:d0:44:7d:66:2a:f4:b5:a9:
                    19:e0:93:cd:9b:23:35:0e:3b:1a:e6:e2:37:79:23:
                    7f:3e:4e:0d:90:eb:9f:c3:df:be:44:05:24:55:46:
                    44:ad:8c:5a:99:b4:5c:eb:c1:94:0a:ee:44:2c:bd:
                    04:48:96:86:b3:0b:9d:c6:82:d7:8a:a7:0c:f8:69:
                    85:e4:5d:53:a4:70:d3:6c:87:0c:ae:e2:49:6a:39:
                    fe:8c:64:c9:88:f5:f5:e4:0a:38:72:54:01:00:bc:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E5:AC:49:09:0D:69:68:35:9D:D7:8C:15:66:4D:45:2D:19:55:F1
            X509v3 Authority Key Identifier:
                keyid:A4:08:FC:92:46:04:27:51:11:0D:2E:C5:06:5D:0C:47:D1:D4:3C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a597c5-3ec4-4b46-8c7b-d92248aabe2d/1/pAj8kkYEJ1ERDS7FBl0MR9HUPNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ee:8f:f0:0c:d0:a4:ba:fc:5f:ee:1f:61:df:2b:dc:8e:ff:
         7e:74:b5:ab:5c:83:d5:05:d8:0a:4f:32:64:f7:76:41:c6:ff:
         58:15:47:2d:e0:85:04:74:24:ff:2d:00:cb:4a:5f:b4:7f:ff:
         5a:87:04:85:70:a2:a0:c6:ab:f2:c8:eb:cf:33:a2:38:4e:11:
         8c:6e:00:65:44:58:89:83:96:da:54:39:2d:01:6b:d3:78:3c:
         1d:97:de:25:00:1f:f1:0f:8a:96:30:dd:36:4b:6b:4f:82:82:
         f2:96:c5:6b:d5:41:40:c9:75:2f:fb:11:8a:f6:09:7b:47:e3:
         39:4e:d8:9b:93:75:6f:b2:f9:d0:d7:3a:30:8c:4b:b5:3f:54:
         21:31:b7:c8:d4:bc:1b:12:65:a0:0a:4a:c1:2e:01:a1:7f:31:
         0a:29:fb:06:b9:3e:5c:3e:68:42:6d:4c:01:50:e6:18:1c:71:
         a5:20:7e:71:e5:f7:31:e5:09:f8:a7:8d:5d:e6:86:8f:e9:42:
         73:70:c5:51:f9:5b:f1:d3:6f:bb:86:4e:cd:a3:ea:19:01:d5:
         5a:c1:0e:6e:b9:e8:bf:b6:68:e8:0e:52:f3:d7:21:28:b9:1c:
         01:d3:27:32:4b:85:0f:06:40:36:03:5c:6d:b9:33:26:0c:69:
         fe:82:82:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----