Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
File:                     gHmvy6Wodi-3n05eDXo17oTNPfQ.mft (raw, json)
Hash identifier:          t+tZMuY03C7Z2sK2M0mg0hyFu+13SH5lC6/aH9te0OQ=
Subject key identifier:   9C:44:C7:2F:D3:EC:07:4F:24:56:26:F5:E9:0A:90:48:13:E8:7D:31
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Certificate issuer:       /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial:       01962E618554AE45A48C313E2A91792579FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft
Manifest number:          0B66
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 8IUfLut7BygQV_kfUjYxZ6R1hWo.roa (hash: osXEgzEeRLXEDV95MIWOG4REHDOr18vMvAPD5SIJRo8=)
                          2: WbpoYqM2oX3v4QquNuj3aOGKhQQ.roa (hash: rq9cnpsLBzesNH6rgMT8gVQiRyG9ecQKConKub1KWeo=)
                          3: e906IBwj4MSiW-e8owQAWsQ_4Jo.roa (hash: P83ELX1oAyr6YQ0Ab0RC6iwmwrr6PxLhv5UjiehFQxc=)
                          4: eb3BGeh-4gG7gVQzfJYmE4N9iJk.roa (hash: ytxhtvq1ezR1if4ipOboDxmwy8xQfyDHM3VrrrzA9pU=)
                          5: g2b35-nULZDfmdIQobQp625Nk-I.roa (hash: daDEnydg6U3m1GEZ8hWZT3NDMPEI2dbQkvddvsu4lNo=)
                          6: gHmvy6Wodi-3n05eDXo17oTNPfQ.crl (hash: 96OPYtyn/FVxovIUrWVMy7r8KC83kXk+iEzMwzbO4oY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:85:54:ae:45:a4:8c:31:3e:2a:91:79:25:79:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=9c44c72fd3ec074f245626f5e90a904813e87d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:76:91:06:bf:21:23:20:94:23:27:17:26:
                    ca:c8:89:3c:a5:4c:d5:c0:43:c7:04:70:fd:04:65:
                    2a:83:a8:68:f4:8c:be:6d:eb:8a:0b:aa:7f:a4:dd:
                    7f:ce:8c:fc:dd:14:c1:4a:15:6e:17:8e:c8:c0:e2:
                    78:d2:61:39:45:58:99:f4:51:d6:65:07:6a:06:42:
                    b1:3e:d3:a4:93:9e:a4:d4:b6:1f:2f:82:48:06:76:
                    20:6a:04:68:87:cd:ba:b6:20:f2:23:91:cc:69:6a:
                    42:c7:f9:f0:73:6b:39:18:73:a0:06:d2:72:48:7a:
                    35:2a:5c:d9:8b:8a:1e:3b:b0:60:75:c1:87:51:ed:
                    ba:55:72:ed:34:09:fb:2d:ad:f9:07:d1:2d:48:e6:
                    3d:bb:bc:db:79:16:6c:eb:c6:c2:9d:26:5d:b1:7a:
                    3c:11:89:75:fb:75:20:94:c8:64:57:07:b4:72:15:
                    89:7d:97:8e:dd:4c:03:1d:76:06:22:aa:5f:e1:0d:
                    c5:c2:a2:7d:b4:68:84:90:6c:5f:ec:7c:d5:a0:cd:
                    df:ff:a6:4a:19:02:aa:92:f8:41:89:ab:e7:33:3e:
                    39:bb:5a:0d:4b:b7:8d:d1:7d:fc:fe:f0:cc:7a:d1:
                    bc:45:46:49:e9:1b:3e:c6:28:e8:83:2b:5a:64:83:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:44:C7:2F:D3:EC:07:4F:24:56:26:F5:E9:0A:90:48:13:E8:7D:31
            X509v3 Authority Key Identifier:
                keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:e1:6e:7f:f7:b1:b8:0a:5a:50:ee:30:8f:ec:dc:96:f6:42:
         24:92:ca:48:22:4c:48:0d:2c:a3:d3:7a:b3:02:52:c6:88:bd:
         c0:24:40:d8:d4:02:db:0d:a9:fe:7a:af:37:2e:98:a1:f9:8f:
         dc:24:22:3f:40:28:e0:7e:51:b4:1f:20:20:06:0b:ff:ec:d8:
         c8:21:71:09:1b:bb:a5:68:53:9f:b8:77:88:19:85:c9:56:bf:
         fd:68:b1:b4:1a:95:b0:22:d4:9e:41:be:32:e0:a2:c0:b5:30:
         61:33:63:9d:ff:e4:27:42:cd:4e:c7:7c:42:a4:6c:db:00:f0:
         0b:e8:5a:1a:28:8b:1d:c5:8f:2a:7f:4d:0f:ea:62:b1:11:f5:
         c6:05:36:53:6d:5a:97:ff:c0:11:1c:70:8a:5f:93:c4:da:f5:
         3c:d7:f4:97:4a:4c:58:74:1a:80:26:2f:7c:6f:fd:bd:c8:81:
         93:5a:77:16:a9:06:a7:12:7d:c9:6e:f6:d0:77:9d:85:be:52:
         03:17:70:b1:49:bf:4d:af:2c:74:20:d6:23:9f:68:88:8b:7a:
         65:0f:e3:5a:d9:09:ed:ee:41:a1:5f:04:02:09:e3:d5:0d:29:
         8f:bb:7c:5a:39:15:5e:61:29:09:50:ea:6c:30:e4:06:a1:3e:
         62:4a:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----