Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
File:                     gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft (raw, json)
Hash identifier:          Ayj74RfPru67/hVAkWxCoiYGkSJXk8WCH/jjELjP1/Y=
Subject key identifier:   5A:99:F9:87:F0:77:F0:0F:CE:50:B3:55:7C:4A:E6:A9:26:EF:DA:3F
Authority key identifier: 82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
Certificate issuer:       /CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Certificate serial:       01962E99CCF01EE43550DC05A7F7B13E70B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
Manifest number:          0ADB
Signing time:             Sun 13 Apr 2025 10:02:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:33 +0000
Files and hashes:         1: 9KyF73rehYPV02tjofB2AZLrL40.roa (hash: puNKsT3QO3F9HAC3FWFKHMpsh3lk62Ax5BDntOG9N0s=)
                          2: gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl (hash: F1KknF3gwXE2YONDjC616qs4nD7Y3Saqczd0+I9k128=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:cc:f0:1e:e4:35:50:dc:05:a7:f7:b1:3e:70:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
        Validity
            Not Before: Apr 13 10:02:33 2025 GMT
            Not After : Apr 14 10:02:33 2025 GMT
        Subject: CN=5a99f987f077f00fce50b3557c4ae6a926efda3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:17:22:8b:19:ee:d9:82:d7:80:c4:79:b3:
                    22:9b:52:db:f6:2d:54:c9:52:a1:23:01:10:7f:a3:
                    45:c8:c4:87:d8:ad:36:48:20:3e:52:09:60:4c:20:
                    a9:dc:34:5a:6a:cb:5f:2d:77:09:a1:fa:03:cf:7a:
                    fc:f2:91:b0:3d:8c:b7:8b:14:26:0d:a8:9b:cf:a8:
                    cc:48:ec:9b:e4:6f:db:e1:d3:92:66:f9:c8:5a:98:
                    f1:2b:ef:59:b0:ce:5e:5c:1f:12:55:bd:df:01:b7:
                    38:bf:ed:6e:50:20:79:be:bf:88:0a:46:8e:8e:f4:
                    a1:6b:fa:cc:76:e8:41:8c:d7:7b:ac:5c:26:b9:09:
                    a0:51:1f:58:f1:aa:a4:ae:0a:3a:39:a8:2a:27:b4:
                    88:61:ea:ef:74:99:5d:11:70:cf:3d:77:f9:27:48:
                    1d:0d:69:99:94:79:d6:f4:43:f8:f2:a5:a6:98:78:
                    26:87:16:69:05:de:03:f9:ef:7b:d3:86:0a:8b:9e:
                    11:b2:ba:83:9d:89:b6:c0:6a:50:77:af:92:49:8c:
                    4c:8e:e6:5f:fe:66:3a:a6:9a:c4:40:06:5d:9f:e8:
                    f7:cb:46:b5:72:97:df:19:17:1c:80:2d:cb:2f:22:
                    c3:95:68:22:32:cb:e5:60:8c:8f:b9:33:77:9f:59:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:99:F9:87:F0:77:F0:0F:CE:50:B3:55:7C:4A:E6:A9:26:EF:DA:3F
            X509v3 Authority Key Identifier:
                keyid:82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e1:53:a3:e1:2f:71:c4:ac:69:65:86:bc:00:9c:53:51:fb:
         8e:c5:8e:de:d3:96:45:ae:2f:17:a7:e4:41:d9:52:12:fb:97:
         4d:51:f3:c2:a3:41:c9:61:4c:ce:28:bb:88:7a:99:25:de:0a:
         4b:cf:71:c2:f3:2b:c5:ad:25:76:6b:28:72:c9:0f:47:d2:fb:
         35:1a:a3:12:2e:a1:61:bd:4f:69:9f:20:53:e3:e2:4d:79:93:
         44:69:02:aa:d5:4e:1b:dc:88:df:7e:44:c9:56:06:36:74:f3:
         ff:f4:7a:ab:e2:46:0d:1a:4a:f5:dd:5c:a1:85:5e:bf:8a:c7:
         d8:05:8c:17:3b:ae:fa:3d:b4:28:6f:14:aa:f7:5e:c3:4f:82:
         e5:30:a8:e9:0b:20:90:06:7b:48:ef:81:91:7a:0a:6b:45:79:
         41:48:6c:5f:ab:ad:40:10:d0:03:53:87:73:fc:cd:34:20:6a:
         87:a5:ec:53:6d:99:df:58:78:6b:20:2f:ab:21:d1:7b:61:16:
         48:88:03:0b:48:a1:18:34:d6:3c:0c:82:c4:cc:be:69:9a:64:
         15:32:d9:9f:0e:8c:1f:ae:d5:1f:96:23:f9:9d:35:93:01:dc:
         c8:23:75:5b:70:79:26:e2:be:b4:a7:0c:e3:31:3f:96:6c:f5:
         0f:d8:63:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----