Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
File:                     gsbbjg23mzF0_umfxqYFz1bfvck.mft (raw, json)
Hash identifier:          Wj3cvI7bhvlIBz9EyiZPf8v1TjDMVQ1jnfQfJXUZPUI=
Subject key identifier:   A5:26:C8:E1:75:ED:37:F3:1E:DE:D7:EC:18:E7:83:D3:B4:A1:FB:82
Authority key identifier: 82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9
Certificate issuer:       /CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
Certificate serial:       01962E988E5EF8105C01E933A7F3B1056ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft
Manifest number:          065D
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: gsbbjg23mzF0_umfxqYFz1bfvck.crl (hash: 9oipxwfMoPtBuwNrBZMgHkC9tXQqOoQ6ke/7vn2QT9Y=)
                          2: x6jSUPrNwCyjzV69rEteWUbA8bw.roa (hash: 1zp500CT5AdJ87LI8ByrofonFUUOcrdgDO051AN4e6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8e:5e:f8:10:5c:01:e9:33:a7:f3:b1:05:6a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82c6db8e0db79b3174fee99fc6a605cf56dfbdc9
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=a526c8e175ed37f31eded7ec18e783d3b4a1fb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:78:fd:15:84:a1:fc:b7:0c:d2:b7:62:7c:
                    b1:62:5c:4e:87:81:a8:3b:9d:bf:27:c9:b2:fb:fb:
                    ae:65:5e:e4:81:f3:be:bc:15:a9:a3:32:fa:81:e2:
                    7e:65:51:cf:9c:a8:e7:db:2d:39:c3:9f:6a:18:e6:
                    a4:59:38:ac:cf:4c:ff:ca:b4:1a:24:45:09:d0:31:
                    bd:51:27:da:a9:6f:ee:a1:3b:4e:da:f9:c3:22:34:
                    43:3f:ab:22:af:57:0e:36:64:8e:0f:1b:20:bb:9b:
                    4a:12:68:32:5e:6d:41:4c:f4:68:30:a9:60:3e:f6:
                    b2:ac:72:4c:e5:5e:e4:96:36:88:dd:54:46:34:43:
                    b4:c9:23:8b:e8:05:87:cb:81:11:8c:13:17:6c:4a:
                    24:b0:eb:91:73:33:95:6b:83:ca:83:ae:f9:fa:91:
                    71:ef:2d:e5:fe:ae:19:11:0f:1c:21:af:0b:bd:06:
                    65:4b:d3:b8:9f:13:ad:83:65:74:bc:51:09:f6:96:
                    1f:26:36:74:d8:34:5c:8d:59:38:47:de:cf:3f:36:
                    5c:55:84:cd:d3:b1:18:c2:78:6d:71:88:b9:7e:52:
                    9a:43:8e:f8:72:dc:17:d2:1b:05:60:f1:be:56:b9:
                    b8:52:9d:33:67:cb:ad:f8:93:bd:3f:c7:4e:69:4a:
                    7e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:26:C8:E1:75:ED:37:F3:1E:DE:D7:EC:18:E7:83:D3:B4:A1:FB:82
            X509v3 Authority Key Identifier:
                keyid:82:C6:DB:8E:0D:B7:9B:31:74:FE:E9:9F:C6:A6:05:CF:56:DF:BD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gsbbjg23mzF0_umfxqYFz1bfvck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9e6850-310c-420f-b755-baba4e3d3c1d/1/gsbbjg23mzF0_umfxqYFz1bfvck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:87:13:b4:6d:2b:ca:e2:17:fa:70:90:ef:e0:44:89:2a:99:
         83:62:8b:e2:d9:2a:13:2b:0e:dc:7a:d4:f0:3b:ba:c8:42:08:
         2f:e1:76:94:88:b4:56:0a:72:5a:35:cd:c1:8a:aa:77:35:16:
         2b:f6:0e:4f:06:c1:e4:e2:b7:7a:6c:e1:14:dc:4f:49:9c:04:
         40:65:07:f8:51:30:71:4c:94:0b:30:94:37:7c:33:71:2b:11:
         cf:d5:16:bd:ed:aa:99:ce:3e:8d:ea:15:da:fd:7b:30:1c:dd:
         df:b8:2f:f4:09:82:09:6b:00:c5:8d:97:30:0c:c1:03:3c:14:
         a6:ad:3f:16:a7:41:23:ce:01:54:10:01:83:49:2e:53:22:e6:
         5f:5f:2a:54:54:0c:fa:b4:85:cd:dd:e9:a2:e0:f5:e4:86:6f:
         b5:3a:e5:43:11:83:48:be:cc:eb:5f:9b:15:ee:2b:0f:51:be:
         bc:6b:98:9f:9d:67:7e:d5:47:49:ea:ea:74:18:15:be:12:59:
         44:41:d4:1d:22:ae:2b:eb:fd:6a:ed:1c:27:49:db:88:50:46:
         ae:55:36:4f:b9:5b:18:14:7e:84:3e:db:8c:db:e4:01:1f:16:
         e6:22:14:5b:47:e6:46:b1:13:1e:cf:e4:06:fb:c3:49:63:4f:
         67:63:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----