Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
File:                     r0E_0q2eJchLwLWeYIpkNmPmu2g.mft (raw, json)
Hash identifier:          NWsA7xp2bxc0kJ1FhSlQFBDxFRjt2o8vigG3qgXyX0E=
Subject key identifier:   2A:59:68:CD:2B:74:5F:38:89:D9:B0:39:C2:AF:BD:DF:1F:35:E3:1F
Authority key identifier: AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68
Certificate issuer:       /CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
Certificate serial:       01962DF42EC04F67097520BD524E4D4538F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft
Manifest number:          05F2
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: ZRG74paviVX-XS90B8J_nR1og6Y.roa (hash: RiJuDSGI6phByjHDly7Ub5V9tWyhmJNeE34595qod9o=)
                          2: r0E_0q2eJchLwLWeYIpkNmPmu2g.crl (hash: bThRpRLhcGUHZvmVl9ue60eeYzQPnd5WuAKV4TKdr6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2e:c0:4f:67:09:75:20:bd:52:4e:4d:45:38:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af413fd2ad9e25c84bc0b59e608a643663e6bb68
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=2a5968cd2b745f3889d9b039c2afbddf1f35e31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0c:fe:fb:04:e4:59:f1:5d:81:f8:98:07:d2:
                    9f:03:97:e8:c7:cb:e4:5c:bb:86:8d:96:04:e2:2e:
                    15:fe:37:9d:0e:7b:11:d2:8e:93:16:9a:d3:67:94:
                    b8:d1:60:e1:01:6d:37:db:12:e4:c7:b1:09:21:5e:
                    0b:d6:ab:f9:b7:84:7b:49:6d:c3:4d:5e:d6:cd:a8:
                    f6:03:12:a0:e2:d9:b5:50:72:ae:b3:38:36:96:de:
                    45:4b:03:e7:79:71:52:d2:50:63:36:ca:c8:d4:cb:
                    cb:f2:85:92:28:6f:ea:d6:57:01:f8:0b:60:ac:29:
                    de:48:23:77:09:33:bb:c9:dd:b7:c3:ed:a3:e8:1c:
                    85:fe:c2:45:4d:42:3d:2e:a1:fb:68:f1:91:dd:5e:
                    21:ee:8b:90:7a:83:e9:77:83:f4:cf:68:1a:1b:2e:
                    09:8d:15:2f:2f:a6:8d:98:29:e3:83:6f:15:db:f3:
                    c0:25:c8:7a:1f:6e:cb:10:d3:21:63:f1:cf:6b:bb:
                    b0:27:89:78:7e:43:a6:72:bd:e8:b2:94:f4:65:73:
                    54:ed:1f:f6:ba:74:f8:ad:64:e7:0e:63:63:df:87:
                    55:a2:00:31:ff:e4:a9:fb:0d:34:0d:81:22:c8:8e:
                    d6:6a:6c:7f:8f:0d:80:78:6a:df:f9:12:5d:94:84:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:68:CD:2B:74:5F:38:89:D9:B0:39:C2:AF:BD:DF:1F:35:E3:1F
            X509v3 Authority Key Identifier:
                keyid:AF:41:3F:D2:AD:9E:25:C8:4B:C0:B5:9E:60:8A:64:36:63:E6:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0E_0q2eJchLwLWeYIpkNmPmu2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9af615-2c4e-4caf-b5af-ebbe1f477f68/1/r0E_0q2eJchLwLWeYIpkNmPmu2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8b:b0:97:94:80:78:75:cf:5c:c0:c9:6d:78:e9:4f:1e:4c:
         2a:2a:72:62:99:42:54:4f:c3:53:da:64:0a:b0:2e:fb:53:b0:
         c7:fd:8f:00:a4:22:2a:fe:d1:71:30:3d:34:30:c3:16:c1:19:
         4a:b8:3e:60:e6:70:38:72:1a:c0:d7:9e:c6:46:cf:7e:60:3b:
         64:53:49:64:4e:5d:db:bf:3e:77:aa:4b:9a:ea:10:c8:63:6d:
         b9:20:02:58:f6:51:3d:69:95:4a:de:49:f5:3f:37:e1:59:61:
         d9:36:9e:d4:5d:b2:39:bb:ee:9c:7e:3b:49:c0:4d:96:19:93:
         05:95:da:3a:6c:d1:fd:0d:29:ff:82:70:cd:ac:18:10:fd:79:
         c7:e2:fc:0a:d4:a2:3f:be:33:6a:a4:48:7e:5a:12:28:45:5d:
         20:4f:bb:6f:cb:96:bc:e4:d5:7b:a0:24:e1:4e:d8:94:35:4a:
         64:a0:b8:6a:db:04:2c:91:90:5e:a7:20:3c:fd:48:b6:66:00:
         55:60:8a:55:98:35:87:f5:91:9e:f3:1c:0f:4d:aa:ff:02:73:
         24:0e:23:86:16:ab:6b:f6:20:64:a1:68:7e:47:20:dc:c2:76:
         c3:a4:fd:6c:3f:5f:d2:0c:44:9e:1e:ed:46:d1:ca:ba:12:cb:
         ca:e1:66:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----