Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          b6ZhC9QrKQ49eNY8+BumFMnDdikOaOsIJPWOubPl5po=
Subject key identifier:   13:56:9B:13:FB:C2:94:53:FA:B2:5A:DA:88:04:4F:1A:57:C3:0D:A5
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       01962F74DB955E17906582927E303BE9D9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          07A7
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: 8830yksUtOARQk3UFlh-4PNgBiA.roa (hash: EmMvReS/jq/SYrfMRIBrAHCck7YrsLYqaTcJWkpKgFg=)
                          2: EFk_WP_A_QvGCbPv627jqVmsHfg.roa (hash: k68DoPvpgB6wKb8qFWWLmBs9+urZUeVvssLhdMSBf6k=)
                          3: Qoyp_KSFKsVEEg02fUYTNo7SRXs.roa (hash: mLCh1eZnjR+MrenmFjvdAR50ujw/VIYVRd5MKC5x8OQ=)
                          4: ZE3Pd2Bv3QzdWxKRnPV6C_9jTsQ.roa (hash: ULlmWYQOwziva5U7xH3+US8Vy16wr3u3qWj4qpwczMo=)
                          5: c3zA2IV4VwS8jnesB0LpZBsDyEU.roa (hash: hofK+2Uxhr/bTuv6Zx9VkqisU5DNhllbJwm0jIPd9ao=)
                          6: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: rkkr6CGoypPhC2A1HJUpZdOPE8uZ8aWULJroLRcBVHw=)
                          7: xufGdiw8vu26zsmML7UeTUou5hA.roa (hash: FPD/rr/c4+/3+ME4ysyP2eNMHG6cFBZQMwG4yZOWY+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:db:95:5e:17:90:65:82:92:7e:30:3b:e9:d9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=13569b13fbc29453fab25ada88044f1a57c30da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:1c:8f:86:04:0f:93:a2:e5:7c:c3:53:b1:
                    da:70:45:42:a7:af:3a:4c:51:19:cc:28:4f:8f:9a:
                    04:62:de:25:3b:44:12:98:5f:ec:73:d1:51:51:f7:
                    61:9c:98:49:a4:09:1f:94:81:ce:dd:dc:36:ea:82:
                    52:94:60:0a:9f:8f:f4:77:ed:04:a5:18:ad:da:29:
                    2c:55:96:5e:52:c5:53:7b:a6:cd:53:8f:0a:23:4d:
                    6d:e0:cb:ff:ee:56:67:4e:34:de:0f:60:ca:9f:10:
                    96:19:83:9e:6b:77:38:8e:23:ad:4e:e3:15:05:70:
                    71:fa:97:2a:44:92:b8:9e:6d:93:dd:06:91:0d:da:
                    e9:14:02:b0:a1:3e:14:75:f7:4e:e1:7a:68:70:36:
                    c6:c5:ee:30:8f:be:ae:9a:d2:6d:db:cb:92:34:97:
                    1b:38:28:d7:af:77:0d:db:48:d1:30:f4:67:a2:a4:
                    22:c7:e3:ec:56:c3:3e:55:8e:1a:cb:47:05:9f:2a:
                    f4:aa:02:ba:45:d9:9b:28:77:60:b3:98:c9:dc:65:
                    97:e7:0c:e1:31:5a:53:81:35:c5:29:45:69:37:b0:
                    1d:af:6e:56:f6:33:32:48:c8:b2:74:ef:fd:8d:3a:
                    48:27:d0:65:46:62:6e:26:d6:b9:56:5f:38:5c:99:
                    ba:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:56:9B:13:FB:C2:94:53:FA:B2:5A:DA:88:04:4F:1A:57:C3:0D:A5
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:67:20:d5:0c:d6:8d:15:5e:c0:2b:28:71:9e:0f:5a:ff:73:
         42:95:0d:eb:f3:68:e7:1c:b8:48:a3:69:55:da:fb:a0:43:59:
         c5:3c:1c:c4:71:c8:6a:43:2c:ac:81:20:43:8b:ec:19:72:7e:
         f2:e9:02:86:2c:6f:e4:be:37:52:87:24:88:da:f9:4e:d8:1a:
         60:4d:cf:6e:d5:e9:c1:40:31:3d:ef:a6:3a:a3:a0:48:49:8b:
         90:08:9c:61:c4:36:b1:eb:58:93:f9:96:21:0e:a9:b8:14:5b:
         37:6f:e1:3e:2a:01:4c:2c:1d:65:a4:1a:a9:1c:c1:4e:4b:46:
         13:14:f1:15:68:ef:61:37:1b:61:13:0b:cb:44:a4:03:48:76:
         e7:53:16:70:cd:33:97:1c:31:bb:d1:05:68:aa:18:6d:5f:eb:
         4e:bb:ae:a8:b0:da:6f:9f:8f:b8:c9:1f:cb:4a:c0:50:97:a9:
         ba:99:60:e3:bb:95:96:eb:22:a8:9e:0e:45:3e:72:0b:2f:cf:
         69:cd:87:38:58:0a:01:66:5b:6b:e7:f8:cb:8d:0f:f1:b5:dd:
         03:05:36:f1:a8:b1:1a:0b:16:ff:d3:94:1d:47:2f:32:45:62:
         7e:d0:76:63:c3:20:a3:49:08:20:a3:de:61:49:53:48:01:dc:
         0a:36:74:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----