Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
File:                     gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json)
Hash identifier:          j0I+iaMI1sykNjLwPdesxYI/dulsA37CZnCwY27B5Mc=
Subject key identifier:   02:A8:C4:D7:7B:76:B2:39:D7:4E:DE:C6:77:90:78:12:34:51:C7:22
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Certificate issuer:       /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial:       01962E61C20F4F8E97F7D3C89B8A63B8EBBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
Manifest number:          0E4C
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: bNgvelwVPVFr3h5RMUdr0LrSObg.roa (hash: 8+lwoJWYw+/prpcpMbrRUmfEGjzLktOqFPr4MMdHS+M=)
                          2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: RuzEzx4yMeAae+ZNnM+ZiNXeY9KzDTH8thHsKRvV6m8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c2:0f:4f:8e:97:f7:d3:c8:9b:8a:63:b8:eb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=02a8c4d77b76b239d74edec6779078123451c722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d9:a1:e2:1c:f5:0b:17:dc:de:1b:39:2a:24:
                    c9:a9:23:5e:b3:06:95:a9:ba:07:8a:86:b9:01:9b:
                    06:3b:70:ba:1c:b6:64:9d:91:9a:6a:4f:d4:7b:04:
                    7d:c9:b5:7c:69:c4:03:05:33:f8:39:2f:37:83:8e:
                    06:d4:bc:25:25:8e:b0:21:20:f4:e1:22:6e:ab:f7:
                    38:35:41:4d:4a:de:d3:e7:e9:86:d6:c6:84:66:80:
                    db:2e:80:d5:0d:c5:6c:f4:9a:5b:0d:6a:eb:9c:33:
                    66:73:ce:58:a2:b3:c6:03:7b:bf:55:0b:75:30:7d:
                    05:4c:b0:fb:f6:6a:ec:70:00:01:47:a2:da:34:e1:
                    68:2e:c0:49:d8:f0:b9:01:3e:3c:5f:5d:5b:ef:f6:
                    39:fe:6a:02:78:66:29:25:f7:bf:bd:f4:1d:b8:b5:
                    7a:6b:09:22:bf:e3:8f:9a:c0:98:34:f5:19:78:30:
                    a3:b8:16:b4:81:1f:db:a9:a3:c0:c6:25:29:e0:6f:
                    29:a6:b7:e6:d2:dd:d9:99:6c:a5:74:7d:02:93:ad:
                    d3:94:dc:33:5c:a6:6b:f5:78:8b:6f:00:09:21:15:
                    af:5c:74:38:3c:fa:53:fc:80:64:49:49:37:dc:20:
                    a1:ac:81:0e:f7:6b:8e:2e:34:dc:8d:f1:a0:c5:a3:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A8:C4:D7:7B:76:B2:39:D7:4E:DE:C6:77:90:78:12:34:51:C7:22
            X509v3 Authority Key Identifier:
                keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:bb:94:33:d5:1e:ab:40:71:46:e5:e7:83:9e:81:67:ce:52:
         0d:d9:39:69:0f:e7:83:14:47:72:4a:13:59:cf:07:bf:9b:c5:
         1e:f3:ec:06:4d:ce:02:80:3b:02:52:c7:df:c4:d0:57:43:61:
         62:3d:7d:4e:ec:e3:a5:07:50:cc:0b:bd:07:4e:56:39:85:a0:
         55:21:67:38:62:d6:8b:1d:d5:8f:b3:1d:94:07:f9:21:87:a0:
         ca:b0:35:86:ef:b2:06:93:a8:3c:ec:20:e0:c7:0b:5b:e3:03:
         21:71:a6:8a:a1:be:0c:ef:73:27:7d:21:cb:30:c9:4e:dd:cf:
         ef:c6:8d:65:88:d4:ba:86:90:f7:55:fa:35:9b:a4:b5:8d:47:
         8c:9e:c5:cd:20:27:54:7c:f7:43:a3:35:36:2b:9b:f4:7a:d8:
         df:e6:25:86:03:fc:77:d4:c3:5d:51:7f:68:b4:7a:92:02:2b:
         fd:94:1a:5f:35:fe:50:18:8d:8b:d1:88:b4:1a:e3:95:ee:4d:
         45:d8:4c:92:39:69:3a:34:d7:5e:96:21:36:7b:80:7f:81:73:
         a4:82:c8:2c:ef:66:ef:4a:cf:d4:89:b5:63:83:5c:18:c4:ce:
         ce:9e:c7:a2:13:ae:01:5b:ba:06:f1:9b:c8:55:6a:81:6b:7b:
         62:82:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----