Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File:                     AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier:          sYMqcl+fxjZ0POFuiVqT5e0LTSeiGbILJxZsBRkykEY=
Subject key identifier:   8C:BA:D8:EB:D7:F8:73:14:5F:24:32:FC:E5:37:87:40:72:7D:60:D1
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer:       /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial:       01962F0659E4D9ED592F53AC1CA5A1199D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number:          2F
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=)
                          2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: pBoB8RULr06XEVnW2U4SEHi79nGsT/fYvyxdtsi2Y7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:59:e4:d9:ed:59:2f:53:ac:1c:a5:a1:19:9d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=8cbad8ebd7f873145f2432fce5378740727d60d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:42:bc:6c:4f:58:4f:c5:19:84:bb:ad:0e:
                    94:3a:6f:f5:1f:8f:58:5f:1b:97:79:e7:4d:35:bd:
                    52:14:66:98:8c:32:13:a4:2d:c3:38:e2:ae:b0:66:
                    28:d6:b3:6e:d0:cd:b5:11:50:43:fa:9d:43:42:b1:
                    9d:8e:d4:88:e7:00:65:ea:0f:90:53:c6:75:3a:9d:
                    37:1c:c6:31:e6:76:75:34:b7:96:2c:aa:41:74:9c:
                    1e:56:5d:48:83:6e:52:9c:39:40:c4:cb:f9:f3:32:
                    f3:b7:25:be:0e:46:ec:94:25:1f:1d:f4:ff:df:23:
                    a0:0e:04:27:b0:dc:a9:81:2a:38:ef:67:9b:dd:73:
                    d2:f9:ba:16:3e:ac:fe:16:44:f8:08:97:a0:20:10:
                    fc:b9:50:e9:94:9f:58:d5:cd:5d:f0:18:22:ca:3b:
                    f5:4d:e4:c7:77:06:10:f2:7d:0e:d6:c0:85:01:0f:
                    ae:21:a6:c3:50:bd:cb:3d:da:3d:61:be:8e:43:76:
                    2c:73:ae:8c:91:ea:20:8c:f9:ce:d7:e3:2f:dd:e8:
                    da:b7:d7:5b:7e:e9:97:a4:6d:bd:0c:62:71:46:21:
                    3e:4f:5c:5b:fb:58:fd:e6:5c:da:10:04:70:b6:ac:
                    93:68:fb:72:b0:7f:25:3f:b2:72:54:ac:3d:6b:a4:
                    8d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BA:D8:EB:D7:F8:73:14:5F:24:32:FC:E5:37:87:40:72:7D:60:D1
            X509v3 Authority Key Identifier:
                keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:3e:45:a9:f3:27:73:9d:6f:d7:36:a4:6e:ec:ea:6f:63:2c:
         dc:98:a8:df:52:42:b5:a3:c0:29:67:80:68:2a:48:b8:36:be:
         ce:45:5c:98:6c:c5:f3:c2:c5:ea:dd:ac:ee:15:72:b9:d5:bb:
         8a:84:9a:da:ad:a6:18:cf:97:89:ac:81:ff:f8:32:9d:d4:8d:
         c4:96:a7:1b:10:e0:4e:fe:0e:11:b9:c3:58:42:bb:cd:a0:00:
         c1:4a:bc:07:9b:f0:bb:df:5d:aa:53:05:6d:5a:aa:1b:55:d5:
         f2:10:e5:3e:9d:fc:3f:93:f9:f2:20:51:c3:8e:36:19:d9:68:
         30:da:39:25:50:29:62:d3:d2:66:ac:ac:79:f4:c9:7a:48:3d:
         80:24:67:50:bf:f1:69:78:eb:67:7d:ed:ad:4f:3e:0d:2a:e5:
         53:d6:4f:a2:13:07:db:2d:6a:60:ed:aa:f1:c6:b9:88:61:2a:
         54:1b:80:a4:74:05:e7:ba:93:a4:66:10:89:3b:82:ff:c4:a7:
         ff:0d:2e:4e:53:76:a4:ef:86:28:18:2c:3a:3b:3f:cf:08:29:
         7a:0c:79:39:a1:73:68:33:d1:68:7d:f1:59:73:e5:d6:8b:f9:
         47:2b:95:ec:74:46:7c:2e:13:c6:3b:4a:a3:da:d4:62:e6:e7:
         23:5b:2b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----