Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
File:                     gEH-6hI_ywfocqjLS92at7jaL88.mft (raw, json)
Hash identifier:          ejRXpklVgXBnzZEcznWZtj7fSGc4g7k+Uq8JDzSF7YA=
Subject key identifier:   C4:B7:04:27:81:96:36:F7:E4:97:03:5A:E4:6D:32:A8:C2:85:EF:0D
Authority key identifier: 80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF
Certificate issuer:       /CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
Certificate serial:       01962F3DAE41BB420FD05F4217843FF7B5D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft
Manifest number:          0901
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: 5QlNV7-3Q34zZfQ5XbNLc8wKA40.roa (hash: T1GmpANOUDoxZLUDnHoNMN2ENMK9C/xESzMwTNL0s2Y=)
                          2: gEH-6hI_ywfocqjLS92at7jaL88.crl (hash: uKpmx5ou7bsGSmBr8vEgu5f43O/b/Dkb1zFvw2lTI7s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ae:41:bb:42:0f:d0:5f:42:17:84:3f:f7:b5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8041feea123fcb07e872a8cb4bdd9ab7b8da2fcf
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=c4b70427819636f7e497035ae46d32a8c285ef0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:e6:6e:a5:3d:c1:59:07:5e:8d:62:5a:f9:
                    1c:af:18:a5:36:80:9b:1d:40:0b:7c:10:a8:34:1a:
                    36:a4:2d:c1:89:50:19:02:91:9c:22:99:03:00:e5:
                    4f:35:ae:1c:e5:c6:e4:97:92:b3:6b:a4:c0:44:cc:
                    25:aa:03:0a:64:9b:f8:53:a0:58:b7:e0:7c:c5:8c:
                    3a:77:6b:b3:b6:6c:1e:00:d7:28:30:7a:f3:19:4e:
                    16:fe:d5:aa:a1:fb:bd:18:28:b4:22:9a:7f:fc:34:
                    12:95:a3:24:28:e5:aa:0c:b6:bb:e8:90:05:e7:ba:
                    ef:3c:c2:03:a7:39:80:3b:b3:f6:c5:47:05:28:44:
                    32:f3:66:70:27:9e:ab:a6:ae:98:fa:85:f7:61:12:
                    51:bd:bc:c4:16:c4:c0:15:a1:2c:4d:7e:9f:bf:f2:
                    51:ab:6e:db:80:26:03:b7:5e:fc:38:9c:b3:e9:a5:
                    7a:5c:88:7c:83:74:f6:f8:7f:7a:31:6b:be:2c:6e:
                    b9:9c:f3:57:77:83:bb:f6:53:25:9f:36:09:6a:b8:
                    16:2e:f7:40:ed:97:05:90:91:73:7d:04:f7:36:5b:
                    0c:a6:cc:69:34:7d:6f:b0:33:0b:fc:a6:3c:b9:d3:
                    0d:3c:60:a2:18:c2:37:a4:35:84:fa:56:3c:3e:b5:
                    fb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B7:04:27:81:96:36:F7:E4:97:03:5A:E4:6D:32:A8:C2:85:EF:0D
            X509v3 Authority Key Identifier:
                keyid:80:41:FE:EA:12:3F:CB:07:E8:72:A8:CB:4B:DD:9A:B7:B8:DA:2F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEH-6hI_ywfocqjLS92at7jaL88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d317ca-3961-4fe0-bde8-f7c501418e56/1/gEH-6hI_ywfocqjLS92at7jaL88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2b:00:ce:b7:35:d5:43:9c:a4:2e:9d:8b:64:0a:1d:8a:27:
         5f:7d:b3:90:28:da:4c:97:eb:c2:cb:42:28:3c:25:d8:9f:5d:
         ec:03:0a:ac:ae:c1:c3:11:09:84:83:7c:b5:52:19:37:6c:ed:
         ba:1a:6a:8f:5b:8a:66:8a:28:a3:3b:9d:f5:07:8e:a5:dd:d6:
         5a:1f:a7:e2:be:83:21:89:4e:14:06:8e:6c:d1:3e:70:b2:20:
         23:64:27:37:33:aa:a8:d5:90:ce:59:58:ce:e9:36:c2:69:75:
         cf:ed:4c:81:af:16:e2:80:7e:03:cf:f2:51:a2:1e:34:36:4f:
         cd:85:9e:e5:d0:5b:38:f6:af:77:95:1a:f3:21:f0:64:dc:88:
         0b:ea:e7:9a:5c:a9:84:e4:87:70:5a:ed:b4:2a:fb:19:95:26:
         73:df:f5:1e:84:d4:74:34:90:56:4b:7d:62:83:52:35:e3:a6:
         e7:5a:2b:7d:77:2b:2c:c4:a9:6c:77:d6:d0:ed:d2:c7:f0:2f:
         78:e5:49:8e:3b:d4:76:d5:b2:6f:26:b6:5b:62:9b:f6:d9:bd:
         7b:04:f8:c4:64:42:2b:25:37:d0:a3:94:a4:14:36:05:56:e6:
         7e:15:66:ea:87:18:b4:11:ae:12:f3:07:a6:11:00:71:3a:70:
         58:a9:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----