Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File:                     g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier:          XS+4L1nPWh8Aez6P3aM9iu2pVOiBD63K0pPqzNDxbMk=
Subject key identifier:   D4:F6:C0:13:37:AD:21:9C:65:C6:58:AE:17:23:D0:FD:67:5E:F4:A3
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer:       /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial:       01962F070DA70E1E0464C9F2A8847C9E14DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number:          1509
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: JTjIGaNjpzftNO-kFk1BOWWIlR0.roa (hash: QhcjtouUn5V8upOm/6e13CmIXaLDrm57wRtRFJI8pfQ=)
                          2: Udl4Y8sRVjim2rAFzxKQuecnclg.roa (hash: OhoAEIIYExt/Quqv/8KIxubBzRvH8hZ7uh526RWh78k=)
                          3: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: sn5T6F2tdADyKVGOzqkrkwffTMvzByGfIqf5MiycIjo=)
                          4: iItCjBu7NqQrWbQleZcs2InABtI.roa (hash: cxiVo1wViQ58OFWvWqbHd9qDUKA+J+hZBuev/y366W0=)
                          5: yjHXpxae4GvC2hVgF9lA84wEs5M.roa (hash: 4Bi95QC518DbFT+lc7i5bmvKADegBbbEtWKzYAy7Xo0=)
                          6: yvNRdoKPa6T74yCCtKA2QvJhdbs.roa (hash: gmVjs/E675HoTkgwked1IKQnLBzNPHHSFLe/DEwf98c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0d:a7:0e:1e:04:64:c9:f2:a8:84:7c:9e:14:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=d4f6c01337ad219c65c658ae1723d0fd675ef4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7f:49:8a:ad:90:a6:f2:ab:29:f8:62:7e:b9:
                    f4:43:ab:36:ff:b8:03:df:98:be:1e:f5:c4:46:ac:
                    6a:a2:57:cc:06:b5:4e:1b:94:e5:4e:e4:77:f3:ae:
                    1b:e6:53:cd:5f:93:20:e3:8d:0a:7c:fe:1b:3d:b1:
                    8a:7f:04:fa:1b:3c:74:1e:55:6e:a3:16:10:00:0a:
                    fb:d8:1a:97:fc:18:f7:9a:74:32:c4:c4:ae:5d:40:
                    24:b3:5f:ce:87:ec:d9:6d:66:72:da:c1:c6:d8:dc:
                    53:9b:a1:35:17:37:98:92:ae:bc:dc:9e:ff:45:91:
                    b4:ba:92:88:8b:41:3c:15:f4:26:92:37:05:3d:8a:
                    1f:95:ac:38:ac:b6:6a:b9:dd:7c:07:51:f1:90:aa:
                    75:69:b1:5f:5c:34:e5:7d:06:55:8d:b8:51:b8:87:
                    6d:35:63:b9:f9:35:38:81:80:d4:47:43:67:49:7a:
                    91:0c:c9:14:7a:d1:1b:0e:8d:7e:2c:9d:a8:f2:9c:
                    4b:c5:8a:70:dc:9c:98:83:1d:44:ce:5f:fb:fb:b8:
                    87:30:b2:d1:4e:00:7f:1f:fe:fa:aa:43:8e:c1:d6:
                    21:f7:72:2b:2a:23:bb:25:65:60:7a:aa:9d:43:51:
                    6e:49:1d:a7:3b:b0:c6:f3:eb:1d:6f:ef:b4:c6:17:
                    22:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F6:C0:13:37:AD:21:9C:65:C6:58:AE:17:23:D0:FD:67:5E:F4:A3
            X509v3 Authority Key Identifier:
                keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:79:b8:f9:62:4d:5e:53:c2:b8:62:bf:ad:65:f2:6b:6a:
         f5:40:79:0b:25:85:17:2f:3a:c2:d8:f2:0d:5c:14:16:54:6c:
         17:e6:f8:82:e3:81:b9:40:51:03:bf:83:0e:18:c1:ce:1b:9c:
         64:c4:8c:89:09:e0:e9:7c:4e:e2:37:92:c1:ab:2b:af:4a:16:
         6e:3a:7f:1f:b4:6b:d1:6a:93:b9:56:83:65:ff:9b:bc:8d:d9:
         98:b9:1d:b9:85:d3:f7:9a:51:a7:78:be:4b:12:45:fb:18:bc:
         3d:ef:7d:57:a2:48:08:27:87:84:7b:bc:a0:2a:90:d7:db:8e:
         ac:7d:e8:15:08:13:bf:29:64:d2:56:41:e7:5d:ed:00:e8:d6:
         32:7b:f3:a8:59:09:e3:bd:f8:23:67:e8:7c:bd:9f:f6:9b:c4:
         e4:a0:60:31:62:7a:ab:47:f2:24:11:29:96:8e:be:48:93:ba:
         c3:91:42:e1:96:c8:b6:11:ee:da:05:02:ca:8f:fa:c2:f3:1b:
         72:22:50:8b:b7:c9:e4:09:d0:91:97:e9:aa:ea:84:1a:f0:82:
         d0:35:5e:8e:87:d0:16:aa:35:2f:56:bb:48:bb:e1:69:72:97:
         ae:9c:8a:6c:ec:95:ae:36:33:42:e7:71:a2:e9:0f:1a:56:7d:
         03:7f:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----