Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
File:                     af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft (raw, json)
Hash identifier:          umBEbff104P+ch2iTicrv56Ymay+pw6PZByb9pStgxQ=
Subject key identifier:   6C:46:AE:37:27:21:DE:37:66:17:5A:27:E8:E8:59:F2:8B:D0:2D:3A
Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
Certificate issuer:       /CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Certificate serial:       01962ECF94C892094E44C2B486515B9DC869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: Ceo-HVPoWV3_2SxJvVUz90MzCXU.roa (hash: hrbJxLsRN5MK/3GlRfITM4zehXoSXHDnVzwmbM92S3A=)
                          2: af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl (hash: +hcfOR/PDlsFe/j81yKYdpHMX3V4jn1MqGzEGA9UtMU=)
                          3: u-uD5eJkyZwHdvCGzRD30UcsPdQ.roa (hash: 972IpaBLO7W9fM3TeJorAGTATEI6lVsjC4rz1G6aPgA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:94:c8:92:09:4e:44:c2:b4:86:51:5b:9d:c8:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=6c46ae372721de3766175a27e8e859f28bd02d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:25:4a:0c:c7:9f:8d:45:56:79:bf:16:a7:
                    b7:87:29:59:30:61:06:c1:9d:f9:01:de:b1:e1:ae:
                    e4:26:01:3a:e4:25:95:10:d6:df:7e:7f:2a:78:23:
                    56:1f:94:32:ad:3d:d2:d3:66:e2:33:da:e6:1c:fa:
                    02:33:89:25:76:56:7a:8b:7b:4c:9b:d5:2c:2d:27:
                    03:a6:8f:bc:ee:7c:29:fe:08:58:79:0f:ae:ee:51:
                    3a:fa:74:e5:78:b2:5d:5e:07:8a:e2:58:a8:11:48:
                    8e:18:ff:a5:66:c6:81:8e:ad:f8:35:13:e7:9b:3e:
                    d2:d7:0c:03:df:50:cd:65:4f:a5:78:5c:09:6d:03:
                    ac:2d:7c:8f:79:5b:0a:8a:5c:a9:49:19:07:3f:8d:
                    6a:7b:21:cb:93:e3:fe:df:3c:df:50:f2:87:b5:ab:
                    4b:80:e1:39:2f:36:99:9c:81:5a:d4:ac:ab:1d:d2:
                    e5:da:99:1b:bd:84:11:4d:1d:c0:5d:db:0b:9d:a4:
                    ae:e1:e9:6d:87:da:8c:da:04:bd:0d:12:5f:59:f4:
                    e2:49:16:63:63:a9:32:65:35:ed:35:13:89:1e:b2:
                    ec:96:36:d9:dd:2b:c9:ff:67:70:4b:b9:b7:5f:57:
                    8e:8e:b8:b3:d5:60:a5:54:af:ce:38:df:e2:d4:5e:
                    a5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:46:AE:37:27:21:DE:37:66:17:5A:27:E8:E8:59:F2:8B:D0:2D:3A
            X509v3 Authority Key Identifier:
                keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3a:b4:31:ae:fa:1a:77:e9:71:2f:66:a3:b4:ea:fb:09:a3:
         59:92:00:60:22:81:23:5e:55:d2:1d:44:95:98:d8:78:3e:d7:
         a9:81:81:fc:a0:13:3b:47:12:75:4e:35:22:f4:e8:5c:d6:86:
         49:0a:82:46:a2:28:51:ec:3a:c6:af:04:d9:04:fb:d1:27:51:
         27:12:5a:84:f3:b8:b4:29:16:a4:5e:60:5c:9b:68:db:8a:36:
         47:e3:58:81:22:9c:df:83:da:bf:fc:9f:52:42:70:a7:2a:3e:
         8e:15:08:a7:b6:3c:2b:c0:a5:40:0d:3d:57:23:bb:08:b8:4b:
         a8:67:57:de:dc:9b:b8:11:8b:4a:02:d2:76:8f:05:74:08:b1:
         fe:ae:db:5a:e2:b3:3a:98:70:79:b3:6f:45:68:9d:9b:00:65:
         35:93:4c:cd:9b:a0:85:92:d9:8c:66:94:24:da:0b:ea:7a:ec:
         53:e1:5e:64:6d:8e:85:13:13:4b:d8:00:a9:21:26:51:f1:7b:
         40:0b:1f:c2:4c:4d:b0:9f:6b:77:b2:0a:4d:a0:f0:fc:b7:21:
         89:08:30:fa:63:84:63:33:9b:45:d0:d2:b3:5f:ef:a9:6a:b3:
         86:c0:77:34:99:e0:62:68:e5:71:a4:92:da:31:c3:40:a4:4e:
         86:24:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----