Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File:                     ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier:          4MuOF6xTIYWn6aQJFQeQMzDeAUDUNsZiZyv1R/wvhlU=
Subject key identifier:   AF:EB:75:C4:4B:8C:5D:85:25:6D:EA:5D:BC:16:52:14:C7:4B:52:B6
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer:       /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial:       01962F74A59AB0632EE689F12EBB0EAF1736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number:          13DC
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
                          2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
                          3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: sJanLB0UlYGAGYR7gcsaALfgKwrhcIc/juBmZFuBADE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a5:9a:b0:63:2e:e6:89:f1:2e:bb:0e:af:17:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=afeb75c44b8c5d85256dea5dbc165214c74b52b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:a9:3b:cf:e4:ab:5e:a6:4c:3d:f3:ce:62:
                    3a:0b:52:27:1d:b1:d0:a5:01:c4:5a:a4:5a:90:f7:
                    f1:86:be:84:48:c7:f0:17:39:3c:61:a1:74:0e:04:
                    95:de:10:03:cb:2a:e1:ae:47:a0:c0:f8:bc:50:43:
                    b7:95:8b:3c:4c:7f:ff:f0:da:f9:c0:9e:9c:42:ce:
                    a0:3e:51:e7:f7:91:05:c8:29:81:92:e3:2d:74:ce:
                    4b:8e:9a:ea:c5:b9:06:03:e5:90:a5:ad:41:b1:f2:
                    86:8d:ba:6f:88:a4:d3:15:54:67:70:09:7f:3f:2b:
                    3b:1e:84:21:7d:ed:e9:d0:9e:0a:6e:61:fd:61:9e:
                    a6:46:4d:69:b2:7e:c9:f3:ff:bb:36:50:92:87:f1:
                    05:e0:09:d7:18:bf:81:58:20:0f:9c:ea:44:8f:42:
                    ba:11:ae:47:63:8f:4a:ae:88:17:c4:39:17:ec:1b:
                    6b:36:d9:7e:51:62:a9:7a:26:01:d9:a8:65:cf:2b:
                    c6:31:ee:74:8a:19:e3:2c:92:aa:49:96:04:30:0a:
                    92:5c:1b:6e:98:77:51:4f:66:57:89:8b:66:81:6c:
                    05:13:91:56:1e:d7:f0:e4:7b:80:65:c5:3e:25:bf:
                    c4:e1:1f:94:7a:c1:f9:07:87:c8:56:48:cd:12:15:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:EB:75:C4:4B:8C:5D:85:25:6D:EA:5D:BC:16:52:14:C7:4B:52:B6
            X509v3 Authority Key Identifier:
                keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:19:c8:ca:a2:63:0f:db:76:91:28:42:96:a9:c6:b9:f2:
         48:a9:00:a3:ab:34:38:a1:96:5a:e1:07:09:f3:cf:96:60:ec:
         f1:ae:05:3d:eb:54:a4:f5:b8:34:a4:f6:9a:52:2e:89:ac:cc:
         3a:34:63:0d:31:da:00:8f:0e:35:17:72:57:fc:ee:98:83:ac:
         d8:31:ab:e9:2a:50:c1:9d:58:db:50:0b:61:c2:37:b7:de:e6:
         f7:a7:69:b7:c6:77:c3:83:40:31:91:70:2e:7f:2a:20:e0:ee:
         65:bc:9c:61:c3:3c:44:9c:67:f8:1c:09:19:d0:ec:73:02:15:
         5e:ce:c4:fb:0c:10:b4:6c:9d:b9:fa:01:07:ac:b3:21:c3:c6:
         08:c9:a3:2a:86:6b:cf:7b:e5:5d:df:06:b2:20:a2:6c:75:5b:
         75:54:4b:03:09:35:e8:e7:07:8e:de:11:26:c8:45:4f:3d:69:
         70:b9:d7:66:4a:f6:38:1e:9d:ef:5b:b3:b9:ea:73:a6:7b:a2:
         b1:5c:13:75:f5:58:be:6d:97:4c:41:95:4a:22:6f:d2:6e:0b:
         f3:9f:fc:fb:58:c9:ac:cb:46:d1:a0:cb:2e:79:67:59:f1:07:
         64:f8:03:94:d4:d6:90:6b:be:1b:48:f2:1b:2b:8b:2a:e3:b7:
         05:cd:e8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----