Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File:                     AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier:          DGtnpxOUAZ1xtk5MR2C7SWm2RXwbzmaZcERsgPIE7nU=
Subject key identifier:   35:03:BF:43:BC:1C:F3:DB:D2:04:DE:EF:6B:8E:7F:07:3B:F5:62:75
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer:       /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial:       01962DF3F2C724A27BC81B58CB899D9109CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number:          0D51
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: ck/tJJdl4LtEHn2r6o0gqcUNEsuDqzC29SA8fZJbj8w=)
                          2: rcMK08AznTNl69yZpwkwANSHMTs.roa (hash: WjK6cVczVGVfAOrWdWkI76D5GTBKIyYggYnNHyTSPTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f2:c7:24:a2:7b:c8:1b:58:cb:89:9d:91:09:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=3503bf43bc1cf3dbd204deef6b8e7f073bf56275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:f8:ec:83:a4:af:08:31:6d:3f:ba:f4:04:
                    43:48:3c:cd:b5:1b:d7:82:c0:8a:99:ac:f9:c8:a1:
                    f2:06:d6:ff:bb:ae:a3:9c:a7:48:c0:f2:bc:b2:88:
                    e4:c4:07:e5:74:16:b0:1f:8d:2a:87:8f:51:65:5e:
                    0d:58:6a:67:fa:83:fb:bf:79:a1:bb:0f:5e:9f:b9:
                    3d:19:96:a2:9f:d2:28:eb:39:79:61:d2:57:21:57:
                    3c:a2:f3:6f:f8:05:33:67:07:81:99:18:ea:d7:7c:
                    99:81:cc:d4:c4:71:84:b1:db:3c:8f:3a:6a:69:db:
                    5a:ba:ed:57:a5:d8:b4:48:8b:e2:26:1d:0d:63:82:
                    e9:a1:27:f0:d1:d0:c2:e2:17:1d:2c:e4:46:06:86:
                    3a:5d:2c:98:62:6a:a9:87:de:85:ad:e0:86:5e:a6:
                    05:5b:46:7f:6f:70:e0:c3:20:a3:53:95:18:2a:a7:
                    b1:81:56:6d:c6:e3:a6:93:33:63:1c:4f:b6:f4:39:
                    7e:84:8c:02:9b:30:60:6b:d4:70:24:8b:fb:e2:30:
                    30:be:e3:7b:28:76:c4:fa:50:62:71:31:5b:1d:13:
                    13:bf:d4:21:0a:a1:b0:a2:89:16:75:45:08:3c:ef:
                    ef:69:36:ff:a0:41:6e:0e:1c:fc:3b:20:b9:0e:f8:
                    24:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:03:BF:43:BC:1C:F3:DB:D2:04:DE:EF:6B:8E:7F:07:3B:F5:62:75
            X509v3 Authority Key Identifier:
                keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:07:af:11:bb:09:16:7d:3d:3d:99:84:73:87:96:12:11:8c:
         66:64:fb:77:b2:4e:92:75:05:b9:92:4c:1c:89:f1:89:9a:6b:
         58:5f:dd:3b:92:bb:a3:a6:6b:5b:65:53:49:3e:4e:36:f6:65:
         c8:df:0a:34:d8:d3:32:d2:a2:ba:8d:8c:50:10:ee:08:c8:79:
         72:e9:a2:00:2b:21:1c:9e:88:85:74:ad:93:61:7d:b6:f4:a0:
         dd:88:0b:d7:ce:e4:2d:b3:f2:7c:7f:23:23:4e:68:02:3d:8b:
         3a:72:ea:d2:d6:00:32:4a:28:aa:1d:03:0f:3c:86:12:e8:c6:
         1a:61:ca:68:6f:3e:10:dd:6c:db:29:d0:1f:c3:87:ee:d3:19:
         05:87:72:db:85:66:b3:cc:08:ce:8b:9d:ae:43:1a:be:18:f7:
         f5:84:28:92:2f:9b:f3:18:e7:77:e9:6d:6f:58:b0:8c:b3:02:
         20:53:e2:7d:ae:84:79:3b:b9:a5:d3:29:fd:96:35:2e:37:2f:
         7b:5c:4d:82:3a:19:40:f7:3a:6f:31:32:ed:9b:3f:f6:22:a0:
         0e:cb:4f:dc:ed:32:84:9b:29:26:80:a1:c3:aa:e1:4a:82:93:
         a2:8d:71:2f:01:6b:71:c2:24:4e:8e:65:fa:fb:d0:23:8d:30:
         e1:ed:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----