Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File:                     aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier:          KlY57EoWWytAZh0ZgtaMqHSfQOdEjpTMlz0tzp8tygY=
Subject key identifier:   17:32:5C:83:7B:BB:DA:01:04:D7:6B:9A:CC:0E:F3:75:EA:31:2F:38
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer:       /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial:       01962E61D64CF761E84A1B9AFF7B3A9C6C76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number:          088D
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: ZT9B9tNXRU8FWuertgPw13h16Xk.roa (hash: 6Xo+gMjKVgARvSeIM+HakBpfnwiy5S2ZtZ1dnsf1HiU=)
                          2: ZVB7yIgz9pbPQTBVpsrwqV3ZnEg.roa (hash: dwMw2ItUKiHNfMn5bYBAvjaKKEHGXJR9EQ9x+7hM0I8=)
                          3: aRuOOCtx1PMNdVvt2nHGmKDJs3M.roa (hash: 8bEOeURzXGquWtq1D4IuWCkHSIndbbhR7t89VUeuAh4=)
                          4: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: TRoxrqor+T8SO3lJJXcwSj44oWp73AultcJO7WCF1P0=)
                          5: zrAv2jNHtLlSlJsjxQ_ry6_XRDo.roa (hash: xntvWCwvdBtpyZsW2377VZBl7bSJB3okyecwJktY+Gg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d6:4c:f7:61:e8:4a:1b:9a:ff:7b:3a:9c:6c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=17325c837bbbda0104d76b9acc0ef375ea312f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:64:76:2e:b0:68:cc:14:c0:3e:a2:c0:03:
                    b3:99:22:7d:58:c8:a3:fb:5a:f3:c0:98:80:25:91:
                    7b:0f:51:ab:d2:b7:d9:87:bf:0e:d5:0a:e3:75:a5:
                    b0:d8:d3:6f:f7:c8:de:82:88:a8:6b:24:a1:1e:78:
                    60:1a:b8:10:62:90:fe:93:a3:25:26:ff:1d:95:79:
                    ab:dd:37:a1:2d:3b:ee:30:05:dd:e9:a3:33:0f:49:
                    2a:94:2a:e6:36:4e:67:f3:6b:32:cc:a8:8b:23:ca:
                    71:26:8e:b8:53:d1:d1:db:43:35:30:e4:45:9b:52:
                    f0:84:f7:5d:9d:2c:76:73:37:cb:9c:e0:10:29:5e:
                    19:d4:d2:e3:1c:79:92:2e:4b:15:a0:1f:f2:f7:66:
                    07:00:77:9b:af:9c:0c:7d:8d:95:56:db:ac:fb:60:
                    a6:38:fa:bd:60:b5:93:06:63:b0:9e:d2:f4:ce:8c:
                    e1:f8:81:5f:d2:82:15:4f:75:b5:2e:8e:62:59:75:
                    99:b3:36:f5:71:f3:c0:b8:0f:cd:58:37:cb:16:e5:
                    b2:9a:5a:9c:a2:32:3a:f2:9c:99:78:84:64:2f:39:
                    06:d4:1c:be:53:2e:58:f5:ef:8b:02:d5:ce:d4:60:
                    a7:03:b0:eb:dd:b1:01:cc:29:44:e0:4b:6f:84:84:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:32:5C:83:7B:BB:DA:01:04:D7:6B:9A:CC:0E:F3:75:EA:31:2F:38
            X509v3 Authority Key Identifier:
                keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0d:cf:e9:c5:05:24:ff:db:07:b5:94:4d:64:5c:b8:c7:e4:
         03:fa:d0:f5:14:a3:cd:61:ef:d8:6f:2e:44:c8:40:e5:2d:97:
         09:cc:83:b0:1a:1e:6d:52:0c:9b:ee:7f:7d:e3:d6:f1:fe:25:
         05:17:c6:d0:47:56:a3:07:fa:d1:06:ea:dc:07:ea:b6:de:22:
         ea:8a:a2:ea:b3:b1:13:f4:93:8b:6d:6c:4a:31:d0:c5:bd:17:
         c0:ad:a3:24:6f:5d:84:15:b4:a2:ff:c4:ca:ce:31:6d:fe:76:
         74:de:c4:f1:a6:45:4e:6c:82:64:75:d0:cd:c5:a8:98:54:02:
         e3:63:32:97:95:9d:23:db:99:34:6e:83:74:16:37:c6:6a:fa:
         d4:83:e3:8c:fe:31:2d:63:d9:86:0b:ce:e2:77:fa:f7:36:a3:
         a3:03:77:22:e4:01:78:20:e2:23:87:94:b0:90:b4:8a:5d:31:
         64:ae:70:7e:59:b0:93:52:b9:b9:6e:16:b6:a3:b7:cb:f7:c1:
         1c:78:57:2d:a9:29:03:f8:c3:57:66:f9:07:84:05:86:34:74:
         ef:15:69:ad:44:57:fb:cf:59:32:7e:18:ef:56:5a:f2:79:91:
         26:5f:e6:41:da:13:8c:66:cc:4e:ff:c5:20:63:0d:17:af:0a:
         cf:23:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----