Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
File:                     aGOaIXWXlv46HZGfm1c362jXCOQ.mft (raw, json)
Hash identifier:          DA0gY5phbaA17G0EK1cjNaoSGL6g+qOQAoymiB/lA+M=
Subject key identifier:   B4:4F:DB:06:E9:91:B7:AC:AA:5B:FF:A9:CE:9D:9D:55:16:A6:D3:DB
Authority key identifier: 68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4
Certificate issuer:       /CN=68639a21759796fe3a1d919f9b5737eb68d708e4
Certificate serial:       01962F7430EAAF175A6DF2784E873F7321CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft
Manifest number:          1234
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: HaUn7tg_GQoLwUeKln7B89E1Zus.roa (hash: UBP04zlDEuw8zGqO58s8vILU4LoszVd4p1cFKyVRANw=)
                          2: Vaj_SKghwhMr5GkrNo3CpxB4bEs.roa (hash: 2ufypWC+H0u1FT85vML3Y3XXLbc7QafpFQUC4EhAO8E=)
                          3: aGOaIXWXlv46HZGfm1c362jXCOQ.crl (hash: 2JaNJ4IerS55stBNfGs1xZW59vXmdtlvOqa8qlh6nBo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:30:ea:af:17:5a:6d:f2:78:4e:87:3f:73:21:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68639a21759796fe3a1d919f9b5737eb68d708e4
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=b44fdb06e991b7acaa5bffa9ce9d9d5516a6d3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:e6:79:27:a3:95:7d:62:00:28:8a:e3:c6:
                    85:fa:9a:94:da:e7:5b:57:89:ee:5c:6e:22:e3:7a:
                    16:c5:9c:fb:c4:12:40:46:3a:76:3c:da:2c:e6:72:
                    87:4b:39:59:29:67:fc:bc:d1:03:f6:b1:39:5d:70:
                    b1:f8:a7:f5:cc:fc:1f:79:85:c9:54:47:9b:58:18:
                    88:e8:39:9f:35:d1:a6:38:5a:6f:53:aa:59:83:5f:
                    0e:e0:11:e2:87:90:32:3d:03:1a:21:37:62:d2:08:
                    15:69:94:eb:86:8a:f1:4c:1f:a8:40:2d:15:2d:e9:
                    3f:19:ef:74:e9:a0:7c:4f:f9:cb:36:93:bb:94:c3:
                    63:d5:b2:15:5b:bb:03:c1:d6:4d:34:54:00:76:60:
                    b4:58:a1:71:f9:17:c5:c5:8e:34:b2:54:55:ca:45:
                    a7:b7:81:a7:e8:43:2e:d4:02:4f:b5:ec:e4:be:e3:
                    81:c3:7f:13:9b:8f:73:54:10:b2:a9:cc:80:59:fc:
                    99:b5:3c:c2:1a:e3:46:04:b1:c9:b1:67:e5:73:05:
                    1b:8f:1f:8e:19:bd:1f:4d:94:2a:2e:7f:b6:cd:d1:
                    2e:38:6d:e9:c9:a8:ee:93:0f:f9:56:1c:47:27:88:
                    90:c6:7f:f2:b2:aa:58:57:35:d2:1a:bb:d2:c1:5c:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4F:DB:06:E9:91:B7:AC:AA:5B:FF:A9:CE:9D:9D:55:16:A6:D3:DB
            X509v3 Authority Key Identifier:
                keyid:68:63:9A:21:75:97:96:FE:3A:1D:91:9F:9B:57:37:EB:68:D7:08:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGOaIXWXlv46HZGfm1c362jXCOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e56811-9801-4595-87e7-13d168d59b11/1/aGOaIXWXlv46HZGfm1c362jXCOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:2a:aa:ab:87:78:c1:e7:df:e8:dc:d0:a0:1e:6e:4f:a0:05:
         8c:2a:90:d4:9e:2c:6a:bb:31:49:ea:7c:52:12:73:f3:34:13:
         f5:25:64:b2:b0:15:b6:1c:7a:61:73:56:75:e6:8b:7b:69:85:
         fe:76:bf:6a:40:96:97:fa:d2:0d:40:e4:98:37:90:af:40:40:
         cc:f1:f6:bc:b7:42:39:c9:dd:15:ba:03:70:97:69:16:40:7b:
         2f:05:56:65:3c:f2:26:cf:1f:96:21:2a:ed:64:7e:f7:0d:38:
         10:52:dd:17:34:5a:14:a6:1a:52:ee:72:a8:c0:a7:47:35:f1:
         dc:0b:02:4e:d2:ad:6b:2d:50:91:c7:3b:fb:a6:b2:12:88:62:
         c5:f3:57:e9:1a:4c:ea:22:30:35:90:9a:03:d4:4b:2f:18:31:
         72:29:8e:c4:91:62:d3:cf:d2:64:6e:e6:e6:69:49:9a:5a:f7:
         d7:0c:99:76:77:2e:e8:07:76:58:ef:d5:00:7a:b0:50:b6:83:
         2a:fb:e3:a6:37:7b:35:92:8b:9a:a7:ca:e1:ca:2b:cb:39:b0:
         6e:90:9c:a5:9a:62:45:08:b7:49:18:9a:e1:1f:64:4e:c4:b7:
         bb:4e:2c:1f:da:00:f0:ab:6c:42:e7:9a:4e:3a:49:d7:49:97:
         7c:5b:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----