Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File:                     ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier:          zDi38fnp7kZzEzEJy9yCYs6QTVWCSPyaSVqVWOmK5OE=
Subject key identifier:   F2:D9:C3:BC:F1:10:22:B3:44:62:42:E5:F1:12:B4:E1:CB:E7:AC:EC
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer:       /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial:       01962F0745B51A843472CA8DD7CBDCC9037E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number:          0DC2
Signing time:             Sun 13 Apr 2025 12:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:07 +0000
Files and hashes:         1: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: Z+YCAi/gglzOZI+XEi5QFSb6p4FGxO0afsAg9Ld4ijw=)
                          2: EQou6BPzQKkpgjTIlX9cVjZvh18.roa (hash: 7YXYr+7MlXL1fllsaO5BCAQjfwm1sEvIt5Fslo91iWM=)
                          3: Qetcf0dQacmnDzzLj6Br0uoMaiI.roa (hash: kfWLgyOV8y1YMkD0xHciwqgNJz90NpBbtolieL+YMGs=)
                          4: v6HTtOPpswbVJ_lSlYV-_O_3MwA.roa (hash: TUy20gRu1AXwcpH6OpFA+n1Rp3szdF8pZ4NPkSVx+cY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:45:b5:1a:84:34:72:ca:8d:d7:cb:dc:c9:03:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
        Validity
            Not Before: Apr 13 12:02:07 2025 GMT
            Not After : Apr 14 12:02:07 2025 GMT
        Subject: CN=f2d9c3bcf11022b3446242e5f112b4e1cbe7acec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:07:34:f9:f3:f3:fb:da:73:83:86:12:a7:
                    c9:93:85:77:87:67:e4:18:37:1a:bb:55:34:6b:88:
                    4e:4d:f5:17:74:98:c9:6b:53:5b:0f:b3:ab:06:a5:
                    f7:b2:f2:56:17:e7:f7:f8:6e:b4:5d:05:4d:23:a3:
                    a9:0f:c9:0b:9d:bb:a4:38:f7:be:de:37:68:49:9e:
                    fe:ea:83:39:a0:36:3e:3e:b4:a6:ae:87:12:a8:e2:
                    b1:10:c5:98:c1:da:8a:d4:f7:d9:40:2e:0d:3a:23:
                    12:49:99:c6:1b:41:19:6e:8d:a7:be:49:60:0d:69:
                    d7:eb:cc:65:a6:52:f3:68:13:03:1c:9c:23:15:41:
                    35:de:63:8b:73:dd:b4:65:1c:53:18:45:65:30:6e:
                    8e:fe:89:dd:b0:9f:aa:e9:84:12:1b:e5:78:62:5c:
                    ee:15:8a:49:fc:2c:64:ee:f6:8d:17:4d:db:2f:44:
                    24:3a:c7:f8:0f:bc:28:5b:cc:ab:34:f4:2c:86:db:
                    0a:c7:bc:48:32:7c:32:14:df:60:fb:a0:99:1b:75:
                    71:b1:5d:e9:d9:49:59:fe:64:6e:ec:cd:31:06:af:
                    5f:97:00:83:cf:cf:1c:4b:70:6f:bd:d0:3e:a0:96:
                    37:7c:ef:c0:f6:a6:c3:a7:0f:0e:e1:38:c0:46:7e:
                    b8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D9:C3:BC:F1:10:22:B3:44:62:42:E5:F1:12:B4:E1:CB:E7:AC:EC
            X509v3 Authority Key Identifier:
                keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b0:80:2c:3c:2f:7d:fb:6f:92:2a:e8:0f:60:df:00:4b:ee:
         f8:7f:05:5d:38:3f:10:18:50:3c:39:7e:2f:87:a0:58:14:fd:
         3e:fa:43:85:de:de:68:b7:c7:44:f7:44:4b:ea:b5:3d:59:c1:
         1b:92:cc:2c:b3:d0:1f:82:1a:89:55:9f:c2:57:52:59:93:ea:
         2b:62:2e:75:d2:4f:b6:70:2c:00:92:91:3f:28:47:5f:7e:02:
         26:ac:8d:aa:b3:2e:2e:a3:61:d0:6e:04:de:5a:24:55:bf:a6:
         b8:a7:23:2e:78:99:d7:a3:93:cf:ce:30:d3:cb:ae:78:38:08:
         71:55:37:d7:b5:ff:ef:fb:e9:78:62:aa:9d:34:3e:6c:38:84:
         64:19:6d:16:c4:45:97:be:ec:93:b1:5e:f7:b4:20:ad:63:e8:
         38:9d:93:f6:5f:5a:f7:ee:71:5b:15:69:e1:c9:4a:c5:e5:65:
         cb:f4:4e:a4:ad:31:6b:ab:c7:20:39:8b:78:69:41:b0:2d:ce:
         27:6a:d1:fd:dc:14:ca:24:ee:09:fe:2b:d3:b9:5e:9b:7d:91:
         27:ae:3f:4a:46:45:ad:e1:69:1d:fa:e1:80:8d:1b:06:26:70:
         6e:96:32:2a:25:f2:50:83:fa:7b:98:d1:6f:c4:51:0a:4d:0d:
         be:fc:9d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----