Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
File:                     aiElvfZalVLVuOF6s2FaoQuAWXY.mft (raw, json)
Hash identifier:          +CjG4xqkrx8TPPwkJBtj231ID7v4cRFEEDU9q+fFyAc=
Subject key identifier:   F4:AA:31:C7:1D:AC:50:47:5D:39:08:0D:E1:BC:CD:16:C7:36:D2:81
Authority key identifier: 6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76
Certificate issuer:       /CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
Certificate serial:       01962FAB2B5143B7064F2CF3AFF21A21D22E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft
Manifest number:          EC
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: aiElvfZalVLVuOF6s2FaoQuAWXY.crl (hash: Z2beLn5bzt4Whp9gpc3GpaKTT8JoyNR6rFelmiw8Q9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2b:51:43:b7:06:4f:2c:f3:af:f2:1a:21:d2:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a2125bdf65a9552d5b8e17ab3615aa10b805976
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=f4aa31c71dac50475d39080de1bccd16c736d281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:3c:90:e3:57:4e:13:9e:29:14:75:06:98:
                    01:8a:76:00:56:cc:ef:1b:e7:ba:72:2c:47:a5:04:
                    d0:cb:60:05:f7:76:d9:af:59:86:73:c5:69:39:eb:
                    96:35:83:58:82:d6:30:aa:0d:16:d7:75:ca:f6:5f:
                    f4:25:7a:3c:13:0b:8b:3a:4a:30:f9:b6:6a:b1:85:
                    ec:41:6e:90:7d:ef:11:3c:b7:aa:16:2d:86:6f:a1:
                    b5:0e:26:04:b6:1c:d3:6d:47:39:e7:ee:ff:81:21:
                    f2:a5:2a:12:ca:f3:07:15:fb:0f:6e:bb:d7:52:9b:
                    42:5e:8e:86:14:50:5b:ae:c1:a1:36:e4:6b:0a:23:
                    06:41:31:ef:99:c6:49:c1:15:8f:fd:21:8a:18:61:
                    2b:a1:65:b0:c2:4f:23:9b:94:17:04:77:9c:2f:69:
                    e2:eb:77:c2:e0:05:2d:96:00:f9:92:4e:35:fa:e7:
                    26:09:56:f6:93:17:64:fb:34:95:7b:97:93:0d:06:
                    67:12:75:38:e8:49:dc:4d:48:3c:2b:e4:85:07:e2:
                    9f:a5:92:e9:08:da:ef:48:0b:ff:e0:84:9a:d0:bf:
                    af:8a:03:c6:4f:cf:33:0c:1a:0b:c0:a4:fe:94:77:
                    e0:24:44:5e:7f:77:b2:ed:43:ff:4d:62:18:67:c8:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AA:31:C7:1D:AC:50:47:5D:39:08:0D:E1:BC:CD:16:C7:36:D2:81
            X509v3 Authority Key Identifier:
                keyid:6A:21:25:BD:F6:5A:95:52:D5:B8:E1:7A:B3:61:5A:A1:0B:80:59:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiElvfZalVLVuOF6s2FaoQuAWXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f5b68e-e093-46d5-8d0d-63ed22cabc92/1/aiElvfZalVLVuOF6s2FaoQuAWXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:6a:cc:3a:a1:c2:ae:cc:05:73:b8:1f:d8:a5:a6:c0:b4:
         f3:04:d0:46:00:29:0b:ca:8e:6e:0d:2c:5c:b5:e6:8a:d2:55:
         aa:22:79:82:19:72:ef:ce:0d:5c:9e:15:5a:93:f7:c9:ff:cb:
         0b:c4:32:70:8e:c5:05:5f:06:0e:88:a5:ec:c1:c2:67:f8:86:
         52:e6:d9:7e:c4:44:f2:63:44:ff:d2:0a:3d:73:c5:04:de:96:
         5b:ed:a9:58:ba:8e:dc:fe:76:87:98:b3:a1:b0:17:ef:b8:60:
         96:51:d4:8c:8b:e4:4c:6b:2b:1f:75:40:2f:1f:70:e5:53:8f:
         18:15:f7:91:5e:04:e8:72:0f:66:17:90:14:80:1a:e5:53:52:
         1f:c8:96:34:b1:56:82:59:53:78:f3:dd:8d:8d:4c:f9:1b:0f:
         a7:f4:6a:2a:80:2c:3d:ff:c1:7c:ae:49:bb:35:e7:4e:57:75:
         92:0c:5c:be:61:7b:5a:d2:1c:12:65:53:d0:04:85:0e:c3:31:
         15:88:18:0c:13:fe:53:31:05:5b:69:8a:1c:3b:e1:c8:86:95:
         a2:da:ec:59:ce:8e:21:7f:8e:6d:e9:ea:f7:c6:0b:47:75:59:
         e3:55:1d:c9:5b:44:a9:f3:4f:05:12:3c:b8:d5:a8:8d:fe:16:
         4a:61:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----