Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
File:                     AoNhMH79nzq-_mm9FN4OG9YLbmo.mft (raw, json)
Hash identifier:          uV846+Cv8uUb19JpyKeZS0g+prZHDjurg2HSb8H53+k=
Subject key identifier:   F9:F9:20:43:D9:7E:25:E4:E9:F5:C5:3C:36:4D:E7:03:26:E1:F6:A7
Authority key identifier: 02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A
Certificate issuer:       /CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
Certificate serial:       01962ECF8EB184C117B8FAD672DF87F4CE46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 2Zm15nya-qIgvvpfAijKMsgEkJ4.roa (hash: R6UtE66nKKM8V86y41wgOOrSUcLC3hcokGTEuECcZNA=)
                          2: AoNhMH79nzq-_mm9FN4OG9YLbmo.crl (hash: hXrhbsk/7x4l+z5dteaNzgWGWMz9EN9CQY4uiPpFoHM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8e:b1:84:c1:17:b8:fa:d6:72:df:87:f4:ce:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=028361307efd9f3abefe69bd14de0e1bd60b6e6a
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=f9f92043d97e25e4e9f5c53c364de70326e1f6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:d5:78:20:56:c7:a0:27:3d:f5:42:0c:3b:
                    3d:d3:0d:07:a5:20:8e:0d:d8:d7:93:e8:0f:cd:aa:
                    f7:45:8f:c3:ba:14:ea:b3:15:af:1a:25:a4:76:a8:
                    16:cc:90:1a:ef:2c:8c:6e:6c:79:d5:be:4b:df:3e:
                    e6:4d:f2:2d:3d:eb:29:a7:71:95:25:25:5d:00:25:
                    bb:57:84:87:8a:77:25:fe:1c:93:d5:f2:11:52:08:
                    70:59:e8:c5:b8:8f:cf:ec:54:3f:16:41:93:ff:b6:
                    cb:e5:fb:82:0b:29:15:32:28:70:73:f8:0b:4f:af:
                    40:6a:e0:8c:9b:9f:3a:0a:db:52:42:78:80:9b:85:
                    c1:da:bd:b7:38:0d:76:65:b6:a6:c1:14:2d:57:f1:
                    61:04:c5:5e:a1:40:5a:92:d7:e8:71:7d:b3:15:e4:
                    68:f9:45:21:97:d3:ea:a6:1e:0a:ff:f7:38:b5:a8:
                    d8:58:8d:d8:ff:ee:04:ba:23:16:f4:bb:35:bc:3f:
                    22:94:69:b1:1b:e5:76:61:9c:26:5f:03:55:af:21:
                    20:1d:12:a9:5f:13:50:0e:a9:6c:49:f6:36:49:96:
                    01:ce:60:49:aa:1c:05:8c:bd:03:12:25:19:9f:b5:
                    4f:fd:0f:09:2a:b8:85:30:ff:4b:de:3f:c3:8b:90:
                    99:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F9:20:43:D9:7E:25:E4:E9:F5:C5:3C:36:4D:E7:03:26:E1:F6:A7
            X509v3 Authority Key Identifier:
                keyid:02:83:61:30:7E:FD:9F:3A:BE:FE:69:BD:14:DE:0E:1B:D6:0B:6E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoNhMH79nzq-_mm9FN4OG9YLbmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e8101a-240f-4e32-a097-27c273a60788/1/AoNhMH79nzq-_mm9FN4OG9YLbmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b7:eb:bb:3b:a7:3e:94:7c:73:df:bf:ac:75:97:0e:f8:00:
         72:88:a4:82:c7:21:83:97:ea:10:f1:2c:fb:9b:f6:00:a8:40:
         05:b8:3b:4d:64:12:25:42:50:f5:70:3a:01:7b:0c:ce:2d:3f:
         3c:06:b3:c8:46:a9:41:b0:b0:40:c2:62:51:ed:8c:4c:ea:d5:
         22:35:9c:ea:90:fb:7e:96:2a:1a:cf:1c:7e:53:02:58:5d:c7:
         0c:c1:2d:5d:78:21:eb:3e:0e:2a:75:51:48:c0:75:fe:b1:30:
         4d:5a:f5:70:d0:63:06:55:dd:3c:ff:f2:15:aa:fd:a9:40:cc:
         b8:aa:d9:c0:de:c5:db:e9:b4:dd:32:56:46:37:60:7a:b4:1e:
         e7:58:c9:a9:b7:76:02:15:80:65:dd:8a:37:a6:42:cc:58:79:
         76:ea:2e:c0:a5:d9:ac:d8:6b:09:f1:00:ee:cb:2d:9f:73:d1:
         ba:00:b7:57:c4:11:38:4e:c2:e2:6f:57:16:29:30:02:2b:77:
         6c:d8:d2:24:7e:1a:35:cb:01:ee:0a:1c:4c:67:cb:41:f7:ca:
         5a:0c:c3:20:04:a7:f5:17:4b:d0:0a:cf:f9:72:9f:f1:be:33:
         14:19:16:93:c5:d0:69:1b:b1:1f:a8:8a:59:9b:87:53:52:3e:
         c1:81:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----