Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
File:                     DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json)
Hash identifier:          5Owlb/GvI/tss+HM0DHWzxpYOm9s2StrXM2HVmGjy/Y=
Subject key identifier:   AC:A3:EE:A6:21:8D:2A:FA:A2:8D:24:7D:DC:5C:E9:D4:81:2B:B6:B7
Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
Certificate issuer:       /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Certificate serial:       01962F3D494D0EA4AC0D9127050BC04A3681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
Manifest number:          B1
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: aIWLpICyyTu4R03Edqn3oV/JDZzrzKPKxkklta1mvew=)
                          2: KVIjbEYwlYHNE7SjeBSZ9snwsuM.roa (hash: jHpTUbyUDvIBB9d7GvdlvIiOW08/ogM82drw/TrRWfg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:49:4d:0e:a4:ac:0d:91:27:05:0b:c0:4a:36:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=aca3eea6218d2afaa28d247ddc5ce9d4812bb6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:f8:97:3e:2e:c0:4c:18:12:e3:86:60:84:
                    16:c7:08:e6:d9:7f:e5:95:7b:53:53:e5:13:49:7f:
                    1a:3c:e4:42:95:e4:f1:b8:bc:69:01:31:cd:55:6d:
                    54:82:47:68:f1:3d:82:5f:5b:16:2b:27:05:b8:b5:
                    20:0f:9d:4d:3f:74:c1:a2:d9:f6:0e:d6:48:bc:d8:
                    10:e4:df:ad:eb:05:f6:5b:bc:60:d7:be:56:1b:78:
                    9e:5f:ad:5f:b7:23:ef:43:b6:c2:33:00:0a:c1:5f:
                    5a:eb:14:0a:24:07:fd:fa:f4:04:2d:d9:b7:a4:75:
                    23:b5:0f:e0:25:32:29:7c:4f:4d:d2:d2:c1:06:0f:
                    12:ac:fc:22:f1:ae:50:7a:4f:0e:c6:7d:b5:87:9c:
                    54:6e:c7:87:2b:fe:da:ed:a7:ce:17:ed:25:56:a0:
                    2a:20:ff:d2:1b:4e:ee:66:3e:e0:8d:e7:cc:9b:44:
                    46:03:1e:0f:cb:f7:31:28:59:55:38:18:93:21:24:
                    05:a0:87:4b:66:3f:1f:c4:ed:0f:a8:64:f1:7c:02:
                    07:2b:cf:6e:f0:a3:06:ad:d2:67:6a:79:bc:0d:e6:
                    5a:69:46:22:98:cb:26:27:15:67:df:95:70:95:ef:
                    7a:23:ba:bf:3e:d2:0e:69:5d:9b:42:33:21:33:0e:
                    1b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A3:EE:A6:21:8D:2A:FA:A2:8D:24:7D:DC:5C:E9:D4:81:2B:B6:B7
            X509v3 Authority Key Identifier:
                keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:03:d5:98:b4:ac:62:1e:b9:8c:b6:75:d7:32:c0:a7:d7:6b:
         60:0f:d0:6a:17:44:a7:15:4b:34:86:8d:d9:73:38:ea:2a:ad:
         91:97:7f:15:48:22:f4:75:62:38:86:a7:cd:dc:59:03:a5:53:
         57:0e:3b:d8:bb:f5:0e:58:53:ec:da:63:b0:2b:b3:00:7c:6d:
         59:72:76:72:a8:18:a6:17:6d:97:e5:be:74:0c:5e:13:5a:80:
         9c:d0:13:62:15:95:5b:bb:ea:fd:78:e2:d4:db:70:e0:a6:de:
         e7:f8:b8:2b:ea:4e:76:16:ed:8e:40:70:89:de:59:b0:9a:d5:
         a1:74:d3:f7:28:37:ec:5e:6d:dc:ac:18:8e:95:81:04:6b:2b:
         2e:cb:52:fc:d2:ed:41:4e:d9:08:fe:4d:5e:0b:49:ce:dc:c9:
         93:dc:71:6b:6a:7d:0a:9d:62:68:38:16:40:3d:1d:e3:4e:c0:
         e1:5f:e4:f3:12:b2:50:44:0f:44:1c:8a:7f:9f:6e:cf:13:bc:
         4f:17:ac:ff:f2:25:37:37:73:e9:50:66:4c:3a:91:cb:a6:94:
         cf:69:40:62:b9:c2:5f:d2:55:c9:59:2a:dd:15:7d:a8:dd:32:
         6d:86:65:49:cc:87:68:17:16:1c:0f:9b:09:fe:48:a4:61:da:
         61:d9:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----