Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File:                     AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier:          kZT3iRHFt/bXrLG7PYWcyOVI1spqYRgpD9qK65KjqQc=
Subject key identifier:   6B:4F:CD:BE:A5:1C:BF:9E:40:81:19:F4:6F:63:56:64:8F:B8:9E:CD
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer:       /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial:       01962ECFD7D345BCACADFDD57EF3DAABAF65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number:          064D
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: URxPMimO8JNGupEclmVfC8ipyOlD2loFjjVkOS9KTec=)
                          2: F0fLEPNHCyvyIlmIFcsqkPyplGA.roa (hash: km4WfLRxUHxr5HonrrBoTZPZXAmt4eVnZ393OPRJNmw=)
                          3: I52JmxS8ms2LXewaNvexpBIItdM.roa (hash: wE72dqwKEdun5Ic36ck9eG0u4nkqju4VoFB4cJuV7v0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d7:d3:45:bc:ac:ad:fd:d5:7e:f3:da:ab:af:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=6b4fcdbea51cbf9e408119f46f6356648fb89ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:45:2a:86:7a:4b:a4:b8:41:da:3c:45:28:
                    3e:69:2c:fa:11:32:5d:2a:75:71:4d:36:95:9f:02:
                    5b:2f:2d:09:2a:78:d9:ef:8d:6d:23:2e:7e:b0:12:
                    5f:28:12:81:06:13:ab:cf:be:01:0e:6c:ee:7f:46:
                    30:b0:4d:46:74:e4:81:de:3e:78:d5:ea:10:98:86:
                    b4:51:ab:96:ba:d1:c1:b4:61:d4:8e:3b:8c:21:71:
                    78:4c:58:e9:f2:ea:26:e5:9e:22:f8:ef:da:5e:95:
                    6c:b1:02:14:57:fa:ff:6b:05:35:2c:7a:bb:b0:59:
                    2f:0a:63:ec:52:22:ec:a6:8e:10:80:23:c3:8d:b7:
                    ef:b8:63:88:dc:cc:4b:8f:e4:9c:9b:35:46:d6:65:
                    a0:54:29:9c:6b:a7:81:87:a4:59:86:6e:2c:03:d7:
                    7d:44:28:d3:fd:82:c6:7c:59:bf:33:6e:03:4b:f3:
                    fe:13:44:c8:78:33:59:69:fb:c8:d0:79:3f:1b:dd:
                    66:34:ce:f0:1c:5c:cc:b9:98:14:b5:36:e9:da:6c:
                    78:34:07:4c:98:0a:51:cc:c9:1a:36:05:28:68:26:
                    ca:58:60:18:35:c4:d0:81:b4:8b:02:57:01:60:d5:
                    e5:75:96:43:08:0f:3d:f1:49:a7:6d:30:0f:d1:52:
                    fa:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:CD:BE:A5:1C:BF:9E:40:81:19:F4:6F:63:56:64:8F:B8:9E:CD
            X509v3 Authority Key Identifier:
                keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:dc:1f:39:22:28:bb:c0:80:4d:fc:da:cd:8a:ee:cd:f1:2e:
         b9:5c:81:18:20:69:82:d8:4c:02:6b:fb:5c:fb:c5:37:db:5d:
         e4:47:bb:95:d2:e6:e3:91:ad:f9:2a:41:96:39:8d:5c:25:8d:
         82:ed:c8:36:cc:d7:31:27:41:e3:87:00:22:31:ea:38:ef:62:
         42:41:ba:35:5d:84:ef:6f:86:3d:89:89:9b:11:b3:de:74:67:
         cd:25:a8:fc:f4:2b:1d:46:13:b9:77:17:b1:7f:53:0d:3f:81:
         9e:36:61:c7:5f:e6:c9:cb:90:58:a2:76:12:8a:a3:e8:41:ec:
         15:84:f8:47:a6:3b:62:b4:d1:2e:5e:d5:d5:b0:59:55:f1:30:
         31:4d:ca:9c:41:84:16:64:52:78:f7:93:df:05:eb:71:07:2d:
         1b:08:64:c9:eb:4b:d1:b4:98:8a:fe:e1:5d:f4:17:06:db:89:
         7c:5d:0b:78:b1:ee:08:93:c2:e4:76:6a:90:11:a2:91:64:00:
         d8:0d:d5:e5:88:91:ee:3b:a3:85:17:09:f1:6f:34:6d:96:1b:
         76:a6:96:1c:33:5b:88:10:f0:50:a6:9f:83:77:14:a1:14:6d:
         65:db:62:1f:4f:e2:4a:e1:77:7b:2a:98:06:87:ce:22:3c:32:
         d0:cf:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----