Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
File:                     paimkAmtLokJhr3XbGM8GzHwbzo.mft (raw, json)
Hash identifier:          4AhOvlNVlKx81D/orNVo7gcYg3TlentdJQVqFgbDJYc=
Subject key identifier:   B2:04:2C:9C:B5:3F:F1:84:16:41:B3:C2:E3:41:93:C6:B2:3B:24:F3
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Certificate issuer:       /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial:       01962E2AC3F26D53A0147F469DC7ED7DD2AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft
Manifest number:          05D2
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: 6FOwPkcLo51Q3D-jQMVy5DzuCjo.roa (hash: ZMfa+VC1JK7r5J2BdtywNHEZxOWql9OfKZrNLteanPw=)
                          2: paimkAmtLokJhr3XbGM8GzHwbzo.crl (hash: dsL0cdXUkbiQ0pdKXNNx1eG4sJDaOc6yy0XzWkFAm4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c3:f2:6d:53:a0:14:7f:46:9d:c7:ed:7d:d2:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=b2042c9cb53ff1841641b3c2e34193c6b23b24f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b3:10:4e:cc:59:56:56:18:2c:ea:87:aa:7b:
                    69:f0:d8:b7:f8:89:7e:4f:59:59:d6:94:04:19:c3:
                    69:4a:39:30:ac:0c:46:41:21:f7:a1:61:4d:aa:aa:
                    f0:f0:e9:22:36:67:44:5d:4b:f8:16:7a:fb:a3:56:
                    2c:d1:1a:66:bd:a6:d9:c0:46:77:ad:de:8d:4b:4c:
                    9b:ed:a1:60:33:9d:69:a5:1a:dc:bb:6b:70:74:f6:
                    31:0a:19:04:5b:f9:4e:9e:b8:55:c9:92:34:73:64:
                    ad:90:46:b5:3d:b2:d6:4e:cf:48:e5:0f:cc:da:2b:
                    60:82:2f:22:48:27:af:a8:8a:b2:81:f2:6f:f9:96:
                    39:f1:a2:a6:f8:37:31:06:af:d7:9d:96:2f:9a:67:
                    3c:2f:9a:7f:d3:50:f0:82:c4:6a:5e:00:ad:3f:30:
                    c5:5a:d9:58:c2:fe:13:91:5b:f6:30:1b:c4:3a:6c:
                    b7:e1:54:3a:4a:2a:8c:ad:ac:6d:71:a9:97:4e:09:
                    69:ff:26:3c:b1:4d:80:00:78:7b:21:b4:a3:16:b1:
                    b0:43:ab:07:a2:b7:bd:70:38:b8:bb:f6:1b:1c:87:
                    7c:db:71:68:62:14:27:9b:1f:d4:c5:4a:fc:cb:87:
                    8f:a3:d6:bc:0e:44:5d:e8:d2:12:ef:a5:89:0e:e9:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:04:2C:9C:B5:3F:F1:84:16:41:B3:C2:E3:41:93:C6:B2:3B:24:F3
            X509v3 Authority Key Identifier:
                keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:ec:25:74:47:53:52:c1:f8:6f:fa:38:85:c3:6d:3a:a6:
         8b:0b:a1:05:3a:91:86:4d:bb:5a:7c:aa:f8:7c:34:df:da:67:
         43:3d:34:81:68:4b:c8:ee:cb:a6:d3:a8:75:aa:36:0f:56:e6:
         ad:0a:42:aa:0f:3b:a0:cf:14:8a:dc:97:ce:41:77:d7:fa:f9:
         1c:86:a5:12:9b:e5:d5:7e:1d:0b:bb:a0:06:1b:52:b4:02:08:
         7f:e2:86:9e:42:84:e0:54:6e:0e:3f:86:ee:dd:70:76:0d:fb:
         3c:5c:9f:6e:f1:c0:01:00:ca:81:4c:a5:3b:a7:9c:17:35:26:
         10:d9:5a:fb:79:f0:46:a8:7d:f1:9e:bd:c7:ef:0a:41:21:3c:
         99:ac:cd:a6:b8:f7:23:2a:29:b0:08:54:45:a2:91:5e:66:11:
         92:77:f8:db:29:c2:af:93:a8:fe:0c:77:75:57:b8:de:ad:30:
         bd:e4:8e:fe:bb:18:4c:98:d1:97:b9:5f:65:1d:bc:9d:d0:70:
         99:bd:c6:09:c1:88:7c:b3:13:14:c4:d2:aa:a8:98:a1:55:9e:
         4d:23:71:58:17:35:ce:3b:db:f6:80:0f:d7:67:88:67:79:36:
         5c:65:48:b8:fb:f3:26:80:96:ed:9c:79:3a:8c:cc:5e:7c:3e:
         5f:fa:fb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----