Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File:                     g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier:          og/g3t2RrevcrO8duBGco+IXiAV3rtegTndKuhyTQBs=
Subject key identifier:   3F:10:D4:3E:F6:D7:CE:8B:6F:FC:77:31:78:86:B9:D5:F0:EE:A8:71
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer:       /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial:       01962DF3EAB947E5D6D08BAE775F973AF5C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number:          0E84
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: PNY0bopVkefbLxgLSsZnVYV7eHU.roa (hash: kYhkbg5jATuw8BE/PYkSTUN7eKPVKmi+NIGEx/Z0W7M=)
                          2: _DwTrJ6Rj1PQPQ3EZ7Z_NHmoK80.roa (hash: WIzgi3FHup1BX82atvYWveM/B2LQRKi9b5BQedkaQlM=)
                          3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: mS2vug0vcWAl8l6pceNX3mvwqvvxDPmKCFVyBpkqPBo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ea:b9:47:e5:d6:d0:8b:ae:77:5f:97:3a:f5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=3f10d43ef6d7ce8b6ffc77317886b9d5f0eea871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:a5:fe:97:f7:d8:15:94:e1:0d:03:af:80:
                    df:93:a3:1d:e9:82:11:3e:0e:d7:3c:31:47:bd:86:
                    cd:41:e1:67:b0:8b:4f:83:80:aa:77:00:91:8c:eb:
                    88:4c:6c:cc:be:54:cc:e1:44:a7:d4:78:70:4f:aa:
                    85:19:8e:a2:2e:e3:46:73:2d:ae:c1:c0:5b:45:70:
                    dd:5f:dd:b2:41:2a:fb:1d:5f:9e:d7:c3:78:3a:e1:
                    e9:29:0c:75:c2:df:2f:0d:a4:52:2f:36:58:95:79:
                    c3:d3:65:bc:6b:de:7f:f9:cf:7c:ef:32:0c:0b:bc:
                    fb:e1:21:bb:c0:d6:d2:84:46:a5:60:60:1e:79:6d:
                    04:d1:30:27:bd:15:40:2c:4a:bd:77:e9:3f:bb:72:
                    b9:9f:82:41:62:b6:42:28:64:e8:22:9f:5d:f0:c6:
                    0c:ef:a6:cc:f6:cc:80:da:6a:71:6d:b4:77:4c:fb:
                    02:8e:d7:ee:84:1e:69:73:4f:3c:09:a6:86:1b:e2:
                    ad:96:e7:85:6d:c4:3a:1b:df:7f:a7:e5:0d:48:22:
                    42:72:7b:8b:be:71:59:02:a6:47:dd:d5:d1:98:15:
                    2c:3e:71:d4:f2:55:c9:cf:10:d4:70:11:08:53:1c:
                    d6:db:e2:71:1b:20:f3:ac:a6:2c:6b:58:97:51:c6:
                    e8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:10:D4:3E:F6:D7:CE:8B:6F:FC:77:31:78:86:B9:D5:F0:EE:A8:71
            X509v3 Authority Key Identifier:
                keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:45:75:d4:d4:9a:0f:d3:12:e8:f8:4b:66:e2:7e:c1:62:52:
         71:d6:fc:45:02:a5:99:96:19:d0:6d:4f:cf:15:9a:ac:00:25:
         5a:c6:bb:d7:13:fa:97:38:35:1b:f2:f2:f8:b6:d8:78:c0:77:
         4d:4a:12:9f:a1:1d:7e:03:1b:86:e5:6c:c3:ac:79:8c:90:a7:
         98:70:71:40:1a:ab:13:85:10:d2:ba:98:65:fa:99:19:da:94:
         45:2c:02:80:67:2c:13:1b:84:7b:5c:c0:eb:ee:fe:75:9b:ed:
         96:bd:a9:d9:41:7c:be:f8:28:d8:39:d1:a6:3f:19:63:7e:0c:
         f1:18:c0:7a:86:86:4f:7c:8b:3b:10:2f:7f:e3:82:7d:0f:49:
         e1:e2:1f:77:79:6b:0d:14:5f:9c:57:31:8a:ba:29:3a:2a:0f:
         a4:61:d0:03:14:00:39:7d:fb:f1:3d:0b:a4:09:b6:58:05:ba:
         82:b9:73:ce:f4:5c:7f:20:30:9d:0b:60:a8:10:ea:7b:4d:66:
         fa:93:d0:48:0c:72:df:c9:cb:ce:c7:57:01:71:f9:c5:e6:d7:
         14:20:79:81:98:20:1a:6f:37:a2:3d:51:fa:87:c3:26:4f:26:
         4b:86:ba:e1:4b:20:90:6a:e3:b5:50:4d:34:e3:cb:48:1b:9c:
         fd:6b:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----