Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
File:                     AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft (raw, json)
Hash identifier:          deaUnZYjjoTrH42fsfPPWWDJwYQdwIGiYY+w8aQGDrs=
Subject key identifier:   D6:CA:8C:1F:9A:E4:45:94:C3:CD:CA:23:F2:AC:04:65:60:89:EA:9A
Authority key identifier: 01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C
Certificate issuer:       /CN=0170a169b6cd411022279e9ff997f134ff54ab1c
Certificate serial:       01962E2AF8E84945777BCC557A617DECDEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft
Manifest number:          1505
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: 6VwRzGeN7Aw-2-kYrAIearsgeJI.roa (hash: 1RBt0EOiw+gmhCcV4qD8Gl3QveqKsX3A4AQ+JvudWRY=)
                          2: AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl (hash: BRxBjbEfSvvC4tpsFmysc6AQDiKPuclGQhPjC8KIVik=)
                          3: JCW68n0UPKZzTNycehy0nOKt_SQ.roa (hash: xagTy4CETOR7QjlY2gwlZcZ/87Osop33VWrjyllfqWE=)
                          4: L28NpBoao3Pa3xUMhUeIlTWycwI.roa (hash: JJ0Hw6tLmgmw+4N0PuUc739/Jd0W5Amgk51pa7BbiAk=)
                          5: VVRY07iRTEEycoKIAJjRSdP3o6g.roa (hash: QFJZLz+BqIPUbLAJZm4UbjmkbfUJbRCSYAqaN0ZNqjE=)
                          6: e423f_-NPWho20AuEAOYRpyN6jM.roa (hash: tXv/VSvWDPTQ0prFPO2ksP8QPbj+CoxENFkaBtfDf3U=)
                          7: nPAKjAAoFG29o9HUftfFBEfMFCA.roa (hash: GUJpwCvRmlnfqQiht/UJ9wNSb1SaXrQjJ5l7dujYT70=)
                          8: pOqffGGCQYYN_siJmYMpXmSRmg0.roa (hash: Acfh5YPvoqcizngQKdjsqWY7Hx9vwBTM5cRSt1VSioY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f8:e8:49:45:77:7b:cc:55:7a:61:7d:ec:de:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0170a169b6cd411022279e9ff997f134ff54ab1c
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=d6ca8c1f9ae44594c3cdca23f2ac04656089ea9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:d3:3a:54:de:92:38:9d:f4:01:35:3b:d0:
                    ed:9c:2a:48:2c:15:72:46:50:22:f6:6c:03:b0:77:
                    b6:46:69:92:d1:c4:40:92:3c:67:de:e7:0e:65:83:
                    98:60:b4:a3:0d:70:2c:fa:49:5e:f3:f7:61:43:bf:
                    a9:50:4f:b3:51:5a:c9:24:68:14:32:b3:7e:79:7f:
                    38:18:cc:e0:a3:54:37:8c:5d:fd:2c:0f:3f:d8:f2:
                    b6:6f:8d:00:e6:fa:dd:22:3b:98:67:76:dd:27:3d:
                    0e:ad:fb:2a:48:f3:d1:c4:43:de:d5:30:7f:c6:53:
                    aa:f8:49:1b:3a:88:56:78:ff:f5:94:a0:ca:07:54:
                    4e:78:92:40:4e:42:28:8b:4c:a5:5d:70:af:79:8d:
                    49:f9:98:a6:e7:57:c8:7c:86:5b:76:b0:25:aa:72:
                    38:40:e0:e1:da:24:95:60:09:9e:26:f8:0b:02:f6:
                    9d:16:e2:a0:a1:ef:d6:7f:74:a4:84:10:39:b3:c2:
                    a0:f0:58:18:d8:52:eb:05:e5:07:16:67:cc:0c:ba:
                    f7:b9:f4:a6:e1:77:03:2f:ca:83:01:1c:d0:8c:8c:
                    7f:f6:a1:a7:bd:ca:72:69:aa:7d:00:ee:2e:ab:73:
                    e4:b4:15:3e:e4:5a:ee:8e:f2:b9:64:0f:4d:d6:c2:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CA:8C:1F:9A:E4:45:94:C3:CD:CA:23:F2:AC:04:65:60:89:EA:9A
            X509v3 Authority Key Identifier:
                keyid:01:70:A1:69:B6:CD:41:10:22:27:9E:9F:F9:97:F1:34:FF:54:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXChabbNQRAiJ56f-ZfxNP9Uqxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1e777f-986b-4e34-8d81-7d4bb2380487/1/AXChabbNQRAiJ56f-ZfxNP9Uqxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:70:ea:59:d6:e0:1a:54:68:8c:95:66:75:f9:57:25:86:9e:
         6e:bf:01:d8:05:15:2d:b9:81:d1:07:ad:50:36:a3:19:0a:c0:
         fe:8d:27:55:78:d0:90:85:89:55:55:15:04:e6:1b:53:8e:7b:
         29:5d:6e:e0:1d:1e:eb:2c:cc:3d:3d:a6:26:37:b4:71:44:c4:
         9e:61:fa:6b:04:44:3c:ee:63:b6:49:b8:3d:60:af:07:f9:ad:
         72:82:d4:ed:89:c8:62:e3:01:24:b8:bc:04:5f:2d:f4:00:92:
         b9:5f:68:63:34:7e:f6:8b:23:c4:b3:cf:48:82:cd:1d:d9:b1:
         10:f3:ff:24:f8:47:50:68:df:51:6c:7a:75:90:b5:7c:80:8d:
         13:c4:fb:fc:70:37:50:85:9f:46:46:06:7a:2f:16:c4:9b:5e:
         6e:7f:b1:8b:9b:04:b6:03:57:34:24:1c:db:a9:4c:80:a0:34:
         e7:40:1a:a0:80:ae:da:40:07:cb:1a:cb:c6:b4:08:1e:2a:7e:
         e2:17:3f:c7:5b:b8:5d:e5:15:33:f5:25:c7:3a:1b:61:39:19:
         0c:d1:4e:00:9d:25:79:ad:4b:76:58:66:fa:18:f0:9d:a3:84:
         e8:49:33:69:65:75:9d:f1:04:f8:5e:ac:62:17:fd:89:00:a6:
         3c:46:b2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----