Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
File:                     AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json)
Hash identifier:          TK0tzvc6msAMx8vV5wQkI7BnaIv1n8tuHq3z9MPa0sI=
Subject key identifier:   03:03:F8:D6:0C:8C:84:2F:94:1C:D4:9E:95:19:68:9F:75:31:E9:A7
Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5
Certificate issuer:       /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
Certificate serial:       01962DF3ACED94CADEE2ADB78CC5A2F7C5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft
Manifest number:          0A55
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: Z/zN7ZQBg+7lyLY0Tzer31QecTrWFBt85+6zZsiWMIE=)
                          2: Zu7qmPE7Yu9qaSBN9WsSyKAeY2Y.roa (hash: 6EpeKHcevQPaPF9U/VGXI0S4HRJnkl5xIMQ3xA5Np4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ac:ed:94:ca:de:e2:ad:b7:8c:c5:a2:f7:c5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=0303f8d60c8c842f941cd49e9519689f7531e9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:f0:06:00:50:0c:57:d3:e4:21:79:ec:e7:23:
                    8e:a0:4f:3d:1a:dc:7f:f6:a1:0e:3e:92:03:e8:8f:
                    3b:ca:51:84:1f:4f:b7:7d:ff:75:ab:82:a5:3f:f2:
                    f7:23:3f:63:8b:b7:66:e0:dd:22:8c:da:32:4d:ca:
                    85:85:c7:6f:ef:45:87:3b:6e:a7:08:40:99:17:6c:
                    75:09:c8:5d:b4:d1:bb:d5:87:b5:b8:d3:41:88:47:
                    64:c1:36:ca:d3:2a:65:c2:13:8b:94:03:25:82:d7:
                    80:d9:7d:b8:b7:e5:12:28:06:8f:cc:2b:9c:ed:62:
                    94:0f:b9:be:5c:c0:13:01:ff:ad:0e:58:02:50:d1:
                    17:23:57:a7:db:9e:19:21:1e:f6:e5:bc:61:2e:e5:
                    5e:9e:2a:2a:2e:d9:fa:c6:2c:26:25:08:3f:67:b7:
                    73:f8:10:97:01:18:69:ed:68:a6:72:db:9c:f2:c0:
                    be:ea:8f:9a:93:bf:64:f1:34:be:19:fd:fd:c9:93:
                    b1:d6:2f:c5:1f:1f:e1:29:16:7f:18:cb:38:56:55:
                    ce:9b:c3:21:81:76:60:f6:da:1c:f5:e6:eb:78:10:
                    a8:19:3e:1c:6e:33:0c:91:68:be:ac:b3:24:14:89:
                    1d:b2:44:04:7f:ae:56:03:88:3b:14:3c:f0:6c:1e:
                    52:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:03:F8:D6:0C:8C:84:2F:94:1C:D4:9E:95:19:68:9F:75:31:E9:A7
            X509v3 Authority Key Identifier:
                keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d5:07:ac:c9:30:6d:0a:1b:54:01:eb:09:04:ae:36:a3:20:
         e0:d7:ef:3c:f5:32:fd:3f:56:7e:31:79:33:06:86:5b:ee:a8:
         b5:e1:8c:a6:0d:96:42:a9:22:9e:8a:32:29:7e:80:47:c2:85:
         74:07:a5:c0:8e:f4:19:0b:20:c8:b5:4f:79:eb:c5:0f:ae:ab:
         46:3a:f7:27:99:5a:87:fb:df:25:a8:ef:27:58:72:56:52:52:
         8e:35:a4:f9:4a:6e:4b:19:12:27:20:54:f8:21:06:7d:bf:ac:
         8e:cb:6b:a4:ca:17:9b:ff:9c:ee:39:98:60:26:a3:29:52:bf:
         f7:13:52:b5:4a:64:4e:e2:90:cf:08:b1:9e:6c:0c:49:50:48:
         df:bf:cd:54:bc:9a:6d:01:9d:68:17:d9:2e:c5:31:50:2b:69:
         a0:8a:40:2e:db:44:90:0e:b0:36:f7:75:e9:66:df:23:0a:3f:
         8b:ec:a2:a3:86:66:43:46:9e:0f:53:ee:90:27:9c:aa:c5:e2:
         75:20:11:98:ea:cc:91:ed:66:f1:2a:b2:4a:42:fe:6a:b5:06:
         fc:12:3a:5b:c8:99:78:02:a0:94:b1:29:08:79:ed:36:bd:f5:
         f2:ca:9e:f2:dc:e8:dd:9c:12:c6:56:7f:54:ba:95:da:a6:c9:
         03:e2:e3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----