Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File:                     g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier:          ZwMDnVZ/h/jhV0aWTToculI7mj20PnRS5MU1vSvlSw0=
Subject key identifier:   59:0C:B4:E6:40:43:52:86:09:4C:4A:A3:2A:31:4F:39:CE:C0:7D:89
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer:       /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial:       01962F3D7B90CD6AE3A7BB339438113DD496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number:          1182
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: 15Cc0rkgOAAGUx8rhsWE0wocji4.roa (hash: w5RcK6dKOaSgSCjKMtRrWFYt+lmDT9Fb/OPGmzxAWAs=)
                          2: SJFANTgwe4hEyH_EtKYCt-bwKco.roa (hash: ldpxNw0POIEDob8qbk6GclOigoPKG+NNUzLcGWGZ1io=)
                          3: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: AGyuv8gGr81PQ/HNvuGDXcMYL/bOT2Nvrhb2nNYRklY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7b:90:cd:6a:e3:a7:bb:33:94:38:11:3d:d4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=590cb4e640435286094c4aa32a314f39cec07d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:55:d9:aa:d0:66:cc:36:04:00:c8:5b:1d:1d:
                    44:c2:17:88:16:2e:c2:be:b3:a9:b3:ab:8c:95:fb:
                    c7:01:cb:61:a2:a2:95:47:34:62:c9:8c:e0:41:c8:
                    24:45:a2:0e:5d:38:6b:1c:99:ba:1d:43:ba:db:88:
                    9f:0b:81:fc:9f:ea:12:3a:4f:c1:69:4c:69:5a:e1:
                    a2:11:85:9e:da:93:53:da:b1:2c:07:3e:d8:ec:6b:
                    68:e3:f2:49:5d:4e:99:ae:1d:04:98:f5:05:0b:66:
                    e7:8f:b8:d1:ec:a0:f9:40:d0:50:1b:64:cd:a2:5b:
                    9f:69:7b:1a:dd:36:65:87:43:df:fa:c5:b2:3b:26:
                    c5:ce:03:10:a6:66:f2:2f:45:0f:95:83:2e:b0:46:
                    0d:8f:c5:a5:f0:88:2a:cc:0e:7a:09:f7:b5:ca:24:
                    99:31:58:b0:69:54:32:fd:34:d2:40:93:90:c8:35:
                    d2:aa:75:ff:16:38:f4:60:11:23:47:3e:53:90:2d:
                    79:6d:b8:ac:69:c1:4e:39:9f:e4:00:1f:7b:17:24:
                    cd:a5:ab:b2:71:c9:07:74:52:a9:0f:b4:89:b9:75:
                    6b:c0:55:e1:2c:47:df:54:07:d4:3c:9f:97:7d:6f:
                    57:a9:d6:99:94:de:d2:3d:86:d2:57:3e:79:8d:29:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0C:B4:E6:40:43:52:86:09:4C:4A:A3:2A:31:4F:39:CE:C0:7D:89
            X509v3 Authority Key Identifier:
                keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b8:4e:98:86:49:07:05:b0:58:d8:be:83:0c:5b:8c:77:c0:
         c6:09:52:61:0d:b8:27:2e:d6:55:47:d5:35:d1:33:07:c7:3a:
         b8:84:03:57:40:30:65:3e:8a:f4:09:b3:89:30:3e:ec:59:36:
         2f:f0:72:71:15:10:e1:d2:d6:65:fa:a4:c2:5e:e9:43:da:4f:
         e5:a5:01:e2:73:5d:0c:bd:0c:39:42:04:93:59:ae:ad:6f:7f:
         8e:6e:0b:3e:50:c9:2b:88:ac:ba:14:71:cf:c6:94:04:39:c9:
         bf:1d:36:3b:ce:d3:20:aa:97:a4:4a:92:1b:11:26:fa:46:7c:
         ef:1b:50:ad:22:3b:da:51:e7:ea:1f:a8:7e:ee:9f:6a:4e:14:
         d5:f4:a3:cf:ec:ea:dc:c8:30:d6:e0:13:94:d6:87:f3:6e:ac:
         35:0d:1f:f7:6f:07:85:59:f6:69:14:e1:b3:1b:8e:a6:5d:81:
         f6:2a:11:09:e6:81:0e:9a:83:f3:5e:3c:8c:ee:d8:63:08:6e:
         41:1e:87:42:d2:e3:18:59:49:2d:18:fd:a5:cf:a8:49:1a:90:
         78:8a:fc:57:3e:5e:ee:36:08:31:a4:6a:0e:ee:91:1e:6a:54:
         15:9d:c6:33:9f:dd:e5:a3:bf:ba:87:70:45:51:83:38:4f:a8:
         ee:a0:9f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----