Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File:                     aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier:          jU76J/RP455Umk7en3jceEp8olZ+piV4UDw5xLySiJs=
Subject key identifier:   34:1C:69:A9:5F:99:51:96:8B:13:90:D1:A6:B6:9A:E2:7D:28:18:5B
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer:       /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial:       01962FAB5D2A3844319E3C6CE0100A3534C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: KnUOYk5bdwDOyPRpWUFQ6FTo7gs.roa (hash: oV64n7K/Nu3TxpzkL+waUqCMMUTsVFeqTi3s1yY0Zn0=)
                          2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: rj4fkBxHuiTG+eXNU06hAUAU910H1hvYelRyU3Xnyk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5d:2a:38:44:31:9e:3c:6c:e0:10:0a:35:34:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=341c69a95f9951968b1390d1a6b69ae27d28185b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:fc:fc:95:07:64:f1:32:6f:c4:27:be:4f:
                    e9:5f:ff:4f:53:9e:e0:6a:a5:b6:7a:48:48:96:a0:
                    fc:54:c8:68:62:e3:a5:a7:53:4c:ea:5f:16:09:b7:
                    ea:d5:33:ce:e1:ac:25:39:f7:b0:4d:a3:2f:fa:b0:
                    76:67:f8:68:53:98:20:85:17:52:20:23:28:bf:9a:
                    1d:55:d4:5c:67:84:8e:52:94:aa:37:95:11:c0:8c:
                    0e:19:d5:ad:85:94:ad:00:d5:c1:20:a0:a6:c6:d8:
                    f4:5b:09:3a:32:54:b2:e1:f4:34:ae:ae:e3:dc:b9:
                    37:d2:c7:f1:d9:b1:85:0b:e8:a7:53:78:f2:f4:d0:
                    8e:34:28:46:62:5e:ae:a6:4b:30:14:37:da:ae:f2:
                    7e:bb:7a:4f:87:d1:e0:bc:3c:97:dc:90:f0:bf:a3:
                    f7:59:c7:a0:6e:c7:e2:82:f8:9c:85:27:5b:aa:56:
                    25:f7:7d:7a:fc:42:61:68:0a:de:67:e4:76:5b:30:
                    21:e5:fd:50:67:3c:97:b5:12:9d:8f:88:23:6e:9d:
                    bf:83:28:3f:43:f2:99:50:8d:b6:8c:11:64:ef:3d:
                    1d:d8:39:1a:fa:fd:ed:d2:b4:01:f3:71:23:8d:72:
                    a7:bf:30:43:8b:a8:63:5e:32:f3:3d:03:09:aa:40:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1C:69:A9:5F:99:51:96:8B:13:90:D1:A6:B6:9A:E2:7D:28:18:5B
            X509v3 Authority Key Identifier:
                keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:60:6c:cf:13:4b:b8:21:f7:af:93:14:36:85:0a:c8:ea:40:
         45:a0:f6:d8:55:6a:ab:74:7e:1c:af:b6:ee:b3:c2:85:e7:08:
         fd:fc:e9:51:b1:d6:65:67:11:05:b3:55:9d:69:f7:17:78:82:
         e7:dd:aa:c2:4d:92:e4:57:f3:1b:4a:19:25:bf:a2:b5:0f:7b:
         b1:dd:b5:6d:e2:34:5b:3b:38:6d:6c:ca:9e:86:d6:94:a1:40:
         28:2a:46:be:8c:1d:f7:e6:a3:04:c5:a3:89:2f:ab:3e:d5:5c:
         79:51:ac:c5:c5:81:8e:67:76:9e:34:51:ff:aa:0d:c0:dd:12:
         5d:45:42:c5:14:2f:ea:80:d5:a0:4a:3e:0f:b7:d8:fe:c5:ad:
         6b:fc:45:05:62:f2:35:50:68:5c:a2:65:9b:63:3a:a6:5d:29:
         75:a9:eb:b4:ba:f7:bd:12:89:9d:6a:00:28:07:d0:68:9e:e2:
         74:8e:ab:1d:0a:5e:d6:bd:06:30:09:16:f1:97:27:e8:7c:be:
         e4:6e:24:59:57:05:61:9f:73:3e:c3:69:29:69:19:65:78:13:
         db:1a:a7:d6:16:58:e8:58:28:b5:76:1a:97:c4:67:4a:29:a1:
         74:a5:17:b0:59:6b:6b:63:5b:7d:47:0a:2f:0f:dc:f6:50:91:
         b1:84:86:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----