Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
File:                     r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft (raw, json)
Hash identifier:          B22Gl6aFzjPmTua1CIjGrEjk9zPVzQZkuQ+6WbhossQ=
Subject key identifier:   DD:E2:7D:FA:6E:EE:0B:06:B0:D9:1C:67:82:9F:B4:52:BB:9A:F0:00
Authority key identifier: AF:AA:A5:37:AA:66:73:61:12:9F:76:38:94:FC:8B:FC:BF:DE:A9:6F
Certificate issuer:       /CN=afaaa537aa667361129f763894fc8bfcbfdea96f
Certificate serial:       01962E9926D1417A31BFB08DD4A00001A0F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft
Manifest number:          0621
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: KSdUtfJ37XAaJBcShHmQ5uaPNaM.roa (hash: VsY/uDTyeEAnbIF/MEQHUfpM957cF5t4aRsKUs0MUOM=)
                          2: r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl (hash: RKeYykVNlIFSNpZzlYrFy2FPsa3Z4uFPln+B6jHQOD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:26:d1:41:7a:31:bf:b0:8d:d4:a0:00:01:a0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afaaa537aa667361129f763894fc8bfcbfdea96f
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=dde27dfa6eee0b06b0d91c67829fb452bb9af000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6e:c1:92:36:fa:96:ca:d4:52:5b:c8:94:75:
                    78:3e:ed:83:4f:cc:44:53:09:ef:fa:4f:4b:91:34:
                    a9:0f:bf:4e:e1:4c:9e:b1:16:c2:62:f3:49:5d:c9:
                    6e:98:89:58:75:66:7f:96:df:db:94:56:05:56:1b:
                    d0:8d:76:9f:7a:c3:cd:b5:12:ce:08:a7:91:ee:58:
                    6f:e7:8b:ac:35:c4:f3:cc:dc:ad:a7:63:de:52:54:
                    21:58:92:e2:4d:37:14:58:c8:6a:e9:6c:d3:f8:69:
                    13:1a:3a:ba:e3:d6:e0:6c:a2:30:58:2c:c4:07:3f:
                    38:fc:10:9d:2d:77:25:5d:4a:6d:3a:d4:5b:84:3a:
                    4d:df:06:e3:c6:da:ed:04:af:b2:7c:a6:f0:88:71:
                    3c:54:ca:f1:d4:d4:15:e3:43:80:59:ca:e5:c1:dd:
                    53:33:2f:ce:f9:63:3f:fb:fb:e8:ac:7c:9e:c1:6b:
                    89:d9:dd:00:53:da:68:ab:7a:6c:53:66:2a:77:6c:
                    9c:70:58:c4:e3:34:18:4e:c6:8e:14:aa:7d:6d:7e:
                    47:80:b6:37:2c:58:35:89:39:60:d0:b2:c6:72:5d:
                    ae:85:d8:2a:62:40:3e:03:02:03:07:c6:90:56:96:
                    3f:48:1b:ca:fc:9a:e0:f0:56:44:9f:78:a9:d0:6e:
                    ae:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E2:7D:FA:6E:EE:0B:06:B0:D9:1C:67:82:9F:B4:52:BB:9A:F0:00
            X509v3 Authority Key Identifier:
                keyid:AF:AA:A5:37:AA:66:73:61:12:9F:76:38:94:FC:8B:FC:BF:DE:A9:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09f968-781d-4d78-99f5-e8b0a9520660/1/r6qlN6pmc2ESn3Y4lPyL_L_eqW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:34:db:1c:9a:80:76:98:2f:3c:24:25:81:28:97:31:18:4c:
         44:0f:60:0e:9b:2f:19:be:6d:f1:af:92:34:d8:90:35:3b:e0:
         5d:f8:f7:9d:59:02:b5:0c:c3:1e:8b:d7:80:6a:e9:03:6e:82:
         bc:ef:ee:01:2b:12:3c:a9:15:85:32:03:bf:6c:e1:d0:31:e0:
         1b:9c:a3:ee:9d:a7:59:c5:15:2c:d4:0d:b7:74:8c:bb:2e:5d:
         0d:2a:69:7a:ba:2f:2c:97:7e:1f:2b:1b:f7:4a:87:3d:03:cd:
         60:5a:06:f0:84:a3:91:8a:c0:1c:73:16:e4:67:5a:ed:ca:86:
         a2:52:a8:6c:9a:57:2f:96:20:ec:59:6a:f4:07:93:71:97:cc:
         d1:a2:60:6d:df:69:f5:bd:c2:05:cd:e9:31:9f:78:0f:a2:bc:
         71:7a:79:18:ea:1f:b8:e6:32:02:7f:f7:7f:0b:5e:15:16:37:
         a9:99:c0:a6:5b:d4:a6:e6:2f:df:ed:9d:2a:11:62:49:2b:a4:
         18:97:56:19:93:cb:f3:50:3b:d3:17:b0:1c:cb:b2:52:b2:52:
         39:93:3b:db:72:15:30:c8:ef:4c:ce:1a:1e:6e:d5:7e:e2:7b:
         3e:6f:db:8a:97:68:16:01:51:8e:e6:b3:1b:79:e6:7b:09:62:
         8f:2e:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----