Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
File:                     gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft (raw, json)
Hash identifier:          XIWjWMoK0c3hZsm+lyHgshH1XxNEDdMBmck4flCf8SU=
Subject key identifier:   AC:6A:89:1E:82:B9:DC:4C:90:97:32:86:4E:C2:BF:E1:8C:74:03:8B
Authority key identifier: 82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7
Certificate issuer:       /CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
Certificate serial:       01962F74CA9B8DE8BF2FC07142854CDAC88A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 1GcdqVYrNeFzAfzIvWc1uwT98aA.roa (hash: 4uQf4DSwbX7BKGTdoGDfjY+9K4u0Qbg5gbpIHJoyB/8=)
                          2: gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl (hash: oRIeEQ8GPWdX4YvRAxIkDt2YBOsVUa2EtKbjlB2AMHI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ca:9b:8d:e8:bf:2f:c0:71:42:85:4c:da:c8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8279ead835a8fcfae0d9ee2839cd16881ba11dd7
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=ac6a891e82b9dc4c909732864ec2bfe18c74038b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:32:08:1c:59:60:00:19:e5:f0:02:80:fd:
                    0d:4d:c0:d6:59:4d:46:97:a8:2a:f1:7b:ea:e5:2a:
                    75:3d:41:9b:df:a9:51:b2:c3:04:09:a7:44:6f:1e:
                    d1:bc:01:ff:ec:41:d1:05:37:6a:61:ac:a6:fc:bc:
                    a1:6f:27:ab:3c:7b:6c:df:51:e1:1f:76:db:c1:79:
                    05:b9:4b:1f:3f:84:c5:ae:13:e8:d3:4d:50:31:d7:
                    16:2d:9c:9b:e4:0f:53:41:b7:b6:28:2b:0e:a5:f7:
                    8c:23:36:32:f2:e0:33:60:17:a6:f1:fe:cb:16:bc:
                    16:81:25:af:8a:86:4c:2c:55:a8:b3:8e:f4:e9:55:
                    87:83:eb:91:f2:d0:cd:29:df:64:c3:4f:aa:a0:a1:
                    75:77:a3:0e:65:0a:3e:62:41:22:f1:c9:e6:34:51:
                    34:a1:72:7a:27:c1:87:c1:91:10:ba:a7:74:3f:0f:
                    b1:8b:0b:5d:a2:bf:c9:25:38:04:b1:13:9a:56:f8:
                    c3:38:11:bf:e7:86:ce:2f:4b:78:65:5a:b8:7f:37:
                    a0:57:4c:27:dd:47:9a:de:09:d1:69:30:72:c6:9d:
                    8b:c0:46:41:64:29:c5:50:a2:f5:d7:41:e4:d2:58:
                    a8:c7:35:0b:ef:8c:87:27:43:f0:5a:86:e1:ca:2c:
                    3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6A:89:1E:82:B9:DC:4C:90:97:32:86:4E:C2:BF:E1:8C:74:03:8B
            X509v3 Authority Key Identifier:
                keyid:82:79:EA:D8:35:A8:FC:FA:E0:D9:EE:28:39:CD:16:88:1B:A1:1D:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnnq2DWo_Prg2e4oOc0WiBuhHdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/daaae4-ed24-4473-9ec5-ee29c9136e8b/1/gnnq2DWo_Prg2e4oOc0WiBuhHdc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9e:35:c3:29:f6:34:cb:cf:7b:cb:05:b1:60:97:15:bc:b7:
         40:02:93:13:ec:07:d3:b0:fb:18:aa:5f:15:13:f6:8e:0e:ca:
         30:a9:8d:71:ae:d7:de:7f:e5:a2:e9:21:79:9c:ca:da:0b:98:
         83:c2:b3:24:5b:97:52:18:db:81:b9:37:71:3b:18:98:28:ef:
         69:19:14:14:a1:fd:d1:cb:66:37:92:a3:3b:a6:36:ae:1b:d4:
         b4:73:d4:77:ac:3d:0b:2f:ce:b8:cd:7a:09:66:0d:4f:ac:ec:
         d1:60:5b:92:39:8f:c3:1f:ae:b8:0f:47:81:b4:63:4e:15:61:
         42:cc:40:db:fd:be:ec:58:08:a4:72:70:7d:72:ff:b2:7b:2a:
         00:af:89:a3:8e:3f:cc:0a:f3:17:d6:ed:c4:aa:53:9a:a1:0a:
         5a:06:fb:77:2f:48:6a:09:f7:c6:18:83:81:24:b0:31:f3:68:
         5b:6e:42:13:5b:63:bf:54:d7:cc:23:3a:bf:29:50:ac:9c:96:
         ff:9d:29:09:c1:c7:3a:32:d4:e8:6f:8b:49:47:e9:c2:4d:22:
         3d:2f:9b:59:7b:75:6f:dc:62:90:67:4d:01:5b:60:e6:2a:72:
         3b:2f:93:85:7b:c5:d3:be:ae:5e:1b:04:83:c5:26:fe:2d:81:
         3e:e7:9b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----