Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          OHq5yrCsZpqS+eUGUSe0JrD1mfWPR4XAfTfPkOEanZM=
Subject key identifier:   F7:41:93:B7:F9:F5:C2:C9:D6:30:16:C3:FD:35:75:FD:F9:EF:86:47
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       01962F06962553344055334BFFAC89C3B626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0A89
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 1-oXSUr0wwWM6bUdeuL56OFYZDI0.roa (hash: ncbwn+oJ9xxudk0G2RRlfn6p7YnDM2Topv72cCblM78=)
                          2: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: jnhEWLBcu3L3TokEzUBL/j5OEGoMA2m5Wt0DXnwa3+w=)
                          3: cEY4_oxa006P5RDwnA1ZzqFve_U.roa (hash: aljeYfMZh5A8r1hZ1ho6VGSZLpMMc/WsIq8gaCshO9A=)
                          4: nTupOLnysHIU3jc5GcaguEHrGzQ.roa (hash: 7rA+K1p/TVuAVfQm4S6Vm6UJX0egR9dZCIKwnWvWs6k=)
                          5: nnxeUU87S1Fex4eT1VyslsBsqEs.roa (hash: reRLOJZlJItgnmYvk5ziSo/wJ6dbsJIWZ7vz95Z6+9Q=)
                          6: o2wn3mbItTBjc_bcacCib0Z56J0.roa (hash: 4MU1GeOc8ffLN6ba0fSqewF7b8KH+w7vt1UXghMCELk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:96:25:53:34:40:55:33:4b:ff:ac:89:c3:b6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=f74193b7f9f5c2c9d63016c3fd3575fdf9ef8647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:47:d2:1d:a5:52:cd:2e:bf:df:b2:70:9f:
                    14:60:a7:83:52:7c:f9:8b:a3:b3:e5:a1:b4:ee:9c:
                    94:9d:43:81:49:c1:0a:db:d6:1e:c2:52:e2:22:c2:
                    cd:f1:d7:26:97:31:3d:df:58:90:0c:82:79:6d:fc:
                    5f:0a:e2:cc:f5:45:c1:75:d1:38:d9:ee:95:57:36:
                    23:6e:fa:33:e6:e1:51:57:3a:02:3b:e0:21:6c:01:
                    6c:6a:95:dd:4d:6e:ae:57:62:e8:cf:9c:e8:cd:bd:
                    73:bc:18:9c:06:92:ce:a3:b1:a0:cb:d4:a6:62:70:
                    e0:58:3e:49:5e:9f:9d:93:e0:bd:fb:a1:6e:d4:8d:
                    ee:91:8e:59:ff:31:98:8c:ef:9a:b7:f9:a9:f1:d2:
                    1c:37:3f:1a:a9:fa:36:26:87:cb:cd:91:8b:25:2f:
                    90:e9:9a:8f:fc:c3:42:38:18:66:b3:be:5d:b4:8e:
                    c8:ac:eb:e6:cc:fb:73:c5:7e:53:23:64:29:42:b2:
                    68:85:8b:d2:e3:79:ea:10:a3:2f:c0:d8:e6:b6:ba:
                    d8:3d:af:05:4b:f2:c0:08:f2:d9:1c:50:b9:92:73:
                    37:55:c2:93:62:80:fd:1b:5a:54:ca:2e:45:13:fb:
                    fb:85:90:f8:90:ac:31:35:f5:ea:1f:ea:d4:3f:a9:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:41:93:B7:F9:F5:C2:C9:D6:30:16:C3:FD:35:75:FD:F9:EF:86:47
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3d:b8:18:0e:e4:f8:c5:e5:f8:2e:47:e6:cf:58:f0:5e:cb:
         10:b1:90:59:27:34:66:bd:77:0f:46:eb:8c:51:0a:ff:a3:1e:
         de:a7:84:f5:5b:a6:af:0c:cf:7f:c6:43:10:47:18:bd:df:17:
         00:3f:b6:87:11:ab:3c:c6:b0:14:bb:71:84:4a:2e:99:ea:6b:
         ef:66:ed:a5:27:ed:a6:73:81:2a:09:33:21:b4:30:54:be:dd:
         60:87:07:5c:ed:c0:f8:0e:87:c7:b5:b1:8a:ec:5e:10:40:fc:
         a4:b9:59:7b:ae:ea:a5:3f:47:2c:ee:f5:53:78:f5:c1:cf:45:
         5e:04:d0:ab:12:3e:52:c5:24:12:9c:ba:6c:56:99:05:d9:1d:
         39:da:e2:3e:71:a2:5d:a5:b1:76:b1:b2:63:4b:25:9a:e0:75:
         4d:36:03:51:60:48:e9:f3:55:cb:d4:00:04:72:9c:4a:74:7b:
         1d:cd:16:a9:c3:57:2f:76:37:29:8f:bb:ef:92:f4:9e:37:99:
         3e:5b:69:3a:eb:c8:df:f9:b0:a8:79:11:a0:39:51:92:87:61:
         f3:d2:22:93:65:e0:45:8d:cc:50:36:18:e4:cb:95:bc:c2:be:
         2a:af:7d:90:c2:90:33:a9:0a:ba:ea:8e:83:04:98:61:ea:4e:
         1b:76:be:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----