Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
File:                     avqwkWjnzGa2Y8YWLVyNRUllzOI.mft (raw, json)
Hash identifier:          X//3LOX4ZMv3li6Po2iH9Ii97u4ogzuD6p1mqYqJtjk=
Subject key identifier:   CD:8E:9E:2C:F4:20:8B:E1:9F:9A:F1:5D:95:ED:C4:D5:83:67:8E:E0
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Certificate issuer:       /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial:       01962F74C6C4624077D3B365730CEDB4F276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: avqwkWjnzGa2Y8YWLVyNRUllzOI.crl (hash: WiL1KDcXsQMfpPFKP7BVC3WDcpKzrKs366KY6rf6NQE=)
                          2: wXxaxOe5K6VZxO15ijoJArRrzpw.roa (hash: 0cJ6cl/TPUcycuQT5NeDc9VFGfM9ahmi8hzebiujzPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c6:c4:62:40:77:d3:b3:65:73:0c:ed:b4:f2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=cd8e9e2cf4208be19f9af15d95edc4d583678ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:16:a8:a5:6d:9e:25:cf:9c:b3:46:2e:5c:b1:
                    b1:3c:d2:ed:b6:69:fc:f3:e5:ad:a0:30:e0:29:9b:
                    f9:f0:26:42:4a:40:78:2d:64:e9:4a:b3:c2:30:99:
                    6a:28:63:8c:ea:aa:35:2d:bb:4b:14:d1:e2:c0:96:
                    88:b0:40:3d:03:20:9a:c2:e9:85:63:32:05:68:72:
                    b9:91:33:22:32:90:d7:18:ee:f6:aa:a2:c9:5a:c7:
                    3e:aa:2b:15:e2:06:70:8b:6c:43:81:81:f3:94:22:
                    b9:d9:7d:84:2a:6f:18:c4:a2:27:d0:f5:76:02:13:
                    ea:6a:1f:03:57:c6:51:ad:3c:bb:6b:9a:d2:54:56:
                    ea:9c:2c:38:16:3c:64:42:0e:c1:f5:cf:aa:04:05:
                    1f:9a:44:da:5e:8d:ea:7b:e5:31:67:9d:d9:3f:92:
                    5a:75:af:d2:5a:67:8e:0d:82:7d:3c:fd:00:55:65:
                    bb:16:b6:e2:86:b5:8e:85:6f:b0:68:59:fc:a6:4d:
                    1f:93:05:fd:19:9f:57:93:c8:26:e5:fa:fa:bc:93:
                    26:db:d3:e3:cc:3e:2e:37:67:88:1d:5d:b5:81:53:
                    38:ab:68:08:cd:e4:6e:11:5c:aa:3e:6f:28:b0:b2:
                    28:41:1b:74:61:4f:a5:00:eb:d3:50:b6:27:75:28:
                    de:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8E:9E:2C:F4:20:8B:E1:9F:9A:F1:5D:95:ED:C4:D5:83:67:8E:E0
            X509v3 Authority Key Identifier:
                keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:61:a2:57:4c:d3:e2:f6:7d:96:81:b6:44:29:50:66:6d:91:
         3e:21:ee:70:55:f7:20:b9:ce:04:5a:70:77:96:84:80:aa:99:
         78:b4:05:86:61:29:a7:7b:82:22:3a:b4:3a:7e:28:6a:68:cc:
         83:e9:78:5f:16:b6:20:f0:ad:58:74:b9:d2:83:13:6f:43:38:
         b3:4b:e9:9c:17:e3:01:fe:5d:9b:b8:c0:f7:d9:c5:e7:3f:7f:
         56:19:c5:0e:cb:28:09:72:81:cf:c8:42:b3:89:d0:e7:5c:f6:
         f5:ad:1d:ec:0c:58:cc:ee:55:13:bb:88:af:82:26:82:c0:c8:
         7a:98:af:0f:36:d3:e1:54:94:21:b3:c6:ca:7f:94:47:56:3f:
         34:c5:00:0e:f7:5b:f1:e6:f2:4f:88:6c:82:22:8c:c8:7a:4e:
         74:7a:04:af:39:28:c7:90:ff:ee:50:f3:e6:02:0f:6e:c4:39:
         5c:da:3c:7c:03:62:5a:f8:86:59:89:6e:24:5c:f8:f6:90:fd:
         d2:4a:d4:76:b4:8a:83:bc:84:f5:e9:cb:6a:2f:e0:a7:93:81:
         88:9e:07:03:0e:7c:e9:c1:35:b9:53:83:0e:79:aa:23:0e:d6:
         26:47:e9:70:ed:ef:3d:03:6f:dd:13:23:ac:3e:8f:53:b4:73:
         d5:2d:7c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----