Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File:                     akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier:          rHXY6GtZkVEX6V7R9IMFF7LCiDFAj0Ox+mEloSiqGMM=
Subject key identifier:   D5:81:77:CC:35:E0:B1:7E:FA:2C:2B:49:C4:79:32:B4:2C:EE:A4:AD
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer:       /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial:       01962F746DCE204B841223E20059EAC343EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa (hash: 92er4aRrLmBNUO87OrAGD3iytTTvnMtEKh+SACuDLjI=)
                          2: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: vkDcjMvZ1+BLywuwjGaaNTiGj/gn1x9DIzu8K5PKpDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6d:ce:20:4b:84:12:23:e2:00:59:ea:c3:43:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=d58177cc35e0b17efa2c2b49c47932b42ceea4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5f:90:d3:a0:91:b9:ad:19:e4:99:bf:30:a0:
                    77:eb:40:20:ca:66:b4:f9:b7:e5:28:54:06:6c:dd:
                    db:94:0e:4c:78:95:c6:d6:b6:00:d7:cb:27:c4:e4:
                    9c:cc:56:4e:be:6f:53:c3:67:8a:5e:d5:f7:56:4b:
                    89:79:78:c9:a5:c8:f9:69:df:6a:4e:4e:89:a8:72:
                    8b:e8:74:07:48:f6:ff:ff:5d:8d:1e:53:6a:51:f1:
                    6e:1a:5b:ad:62:c1:cd:80:9e:da:c9:cc:d0:a8:82:
                    67:a8:81:b8:a2:f3:6f:9c:3e:2c:ee:5d:02:e7:b2:
                    80:3d:00:29:3d:3a:e4:55:e9:4b:5b:c7:43:90:44:
                    76:21:10:33:4a:76:e2:f4:d4:96:4d:6b:3d:1e:aa:
                    d6:10:7a:ba:71:d2:38:b8:e7:2f:de:a7:46:57:d9:
                    b2:28:9c:ef:87:1e:5f:03:a4:fe:0c:0b:c6:3c:8b:
                    c7:5e:c9:f1:af:de:44:3c:c0:5e:a0:ec:bc:e3:eb:
                    08:9c:31:79:d1:a5:00:a3:ca:e7:3f:7a:74:09:10:
                    0b:ef:f2:2b:26:cf:d2:96:93:1a:ae:46:67:d5:74:
                    24:02:d5:88:37:0a:1b:18:53:6e:95:f5:91:d9:28:
                    e3:10:78:52:16:6e:03:6d:3a:c2:54:a7:c8:df:93:
                    9b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:81:77:CC:35:E0:B1:7E:FA:2C:2B:49:C4:79:32:B4:2C:EE:A4:AD
            X509v3 Authority Key Identifier:
                keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ce:ad:a0:e8:fb:bb:4a:d7:9d:71:1b:96:66:23:36:a3:e2:
         e8:6e:9a:74:e0:51:98:40:cd:32:45:77:7a:61:54:51:f2:c9:
         a2:f5:ee:e6:53:7b:1d:9a:02:bf:78:63:f5:0d:58:08:3a:1f:
         7c:3e:69:00:71:3e:5b:e2:f7:04:85:e3:b4:cb:12:f8:71:dd:
         9a:f9:1c:f0:09:75:be:fc:6e:d7:5f:1a:dc:a0:3f:43:28:80:
         08:38:fc:1c:34:ce:e3:d9:23:cc:32:87:9a:3c:71:91:c8:b3:
         74:9d:aa:6a:ad:03:1b:21:de:e5:51:e4:5c:a8:4b:d0:09:64:
         f6:79:af:9d:b9:f9:6b:82:23:f2:41:46:62:e3:9b:c6:52:27:
         5d:8d:52:2c:3d:d2:84:24:2c:7f:ac:26:1b:8e:4d:20:df:d5:
         36:96:a7:c6:10:71:07:8f:b2:06:e9:98:cb:02:31:f3:c7:b1:
         f8:b2:79:e6:6d:42:07:0f:52:71:16:d8:81:c2:ea:aa:3c:d3:
         57:5c:d6:18:b3:cf:8b:81:ff:28:50:89:d9:97:1a:b7:f3:0c:
         e7:72:1b:51:2e:89:64:39:23:44:a8:8a:28:2b:a3:7c:f5:71:
         5e:99:0e:53:cf:25:b1:b1:40:06:96:f7:c9:34:07:01:61:4b:
         a6:d3:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----