Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File:                     gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier:          gcep7c/jCUwGpQirwS17vRbnRXyzEGy1DC5pp9/0x0k=
Subject key identifier:   35:CB:47:7E:34:1E:3F:61:BC:78:CD:D5:5C:51:F2:47:29:5F:78:ED
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer:       /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial:       01962DF426DF0B35410B62DADD0D68954C2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number:          1214
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 52xHcZKMiLkJfC48D6ah-VZ8yTA.roa (hash: jrz3bp7KHkqbn8SdD2JCqFdwlcK3RRhyL/xchThJ/cc=)
                          2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: yFRizrf6u2D0ZFOZfUmGSaoWtIPulTlXOZPXinkCRFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:26:df:0b:35:41:0b:62:da:dd:0d:68:95:4c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=35cb477e341e3f61bc78cdd55c51f247295f78ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c2:43:b3:1d:c0:a6:f8:5f:cc:6c:1e:2b:53:
                    f6:ed:e2:d5:0f:97:0e:0e:51:d1:a5:34:e4:e5:3e:
                    52:f6:80:ac:ba:33:7b:43:27:28:73:92:f4:70:04:
                    2f:4e:c5:b5:c3:9f:72:ce:bb:30:17:31:94:f6:e4:
                    81:de:97:ce:e3:a6:65:0c:57:f2:db:c0:7e:c9:88:
                    38:16:9f:93:6e:76:75:b6:62:29:38:fc:fa:4f:81:
                    5f:8c:44:59:82:73:6b:39:11:00:e9:fa:38:a6:2d:
                    5e:19:a0:2f:e1:06:45:9b:da:c2:4e:2f:f3:41:c6:
                    dd:e4:ea:85:71:24:9d:32:00:8e:25:fe:6f:16:07:
                    4c:18:21:fa:06:ba:9a:8d:03:77:56:ed:ab:66:4c:
                    84:1e:77:2e:2a:81:de:09:35:0c:8d:8f:d5:0d:6c:
                    66:e3:97:76:ab:78:84:a1:eb:54:8c:b5:2e:e1:5f:
                    dc:2e:1e:4c:e5:7c:cc:a8:4b:41:36:18:ca:21:09:
                    75:79:18:39:ad:d5:4b:09:07:b8:24:6a:ce:5b:fb:
                    81:8a:12:0d:62:53:1f:a0:6b:b2:24:52:ea:2c:f0:
                    b9:56:6d:ae:4b:6a:eb:20:94:c4:3c:eb:46:95:62:
                    f5:1d:0e:ac:a8:6a:06:86:37:2c:72:c1:36:f6:5c:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CB:47:7E:34:1E:3F:61:BC:78:CD:D5:5C:51:F2:47:29:5F:78:ED
            X509v3 Authority Key Identifier:
                keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:71:5a:25:a9:88:ed:2c:97:51:41:a0:69:d6:6d:b2:14:
         ea:9f:84:14:3a:7d:0c:63:fd:38:28:7e:f3:31:71:87:5c:fc:
         3d:89:12:40:8d:82:aa:3a:41:04:68:d7:73:23:d4:f5:03:10:
         6b:74:29:05:5a:3d:8c:fb:f2:a5:32:fe:e7:68:45:15:f9:64:
         aa:03:db:2e:2a:f5:b4:49:ad:81:2a:97:f2:cc:4c:71:9a:ae:
         da:9d:7b:c4:33:93:32:d0:86:52:01:82:7f:34:12:b4:eb:2d:
         b9:ca:dc:3b:97:5f:8d:4d:32:e4:aa:d4:7d:8a:97:f4:ed:47:
         39:bd:69:a5:2c:94:85:8d:38:1a:82:a2:54:90:8a:3f:fc:1a:
         b2:ee:2d:83:70:a8:5a:cb:08:b6:bc:18:f4:94:ba:91:9f:29:
         c8:09:51:fc:7e:d5:f9:78:b8:b2:4e:68:9c:6d:0c:d5:28:83:
         fd:5f:32:62:60:e3:cc:58:e0:38:cc:05:e7:de:c4:35:dc:5f:
         b7:7a:ab:90:34:17:57:c7:77:4e:32:3f:a8:a1:52:7b:85:29:
         fc:7d:5c:9f:d4:f7:92:f9:8f:17:45:be:62:f8:6b:9b:a6:eb:
         e8:6d:9b:b2:c4:eb:b3:9f:57:12:ed:5e:df:fe:9a:36:ec:10:
         b0:8b:9b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----