Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
File:                     gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft (raw, json)
Hash identifier:          X5BsoA7S+OccAempGUUOopiJ5UkUyWvaFrH1eT+J8w0=
Subject key identifier:   FB:B8:08:E0:5F:52:63:05:F2:F7:00:D5:05:23:EE:DE:65:07:01:22
Authority key identifier: 80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34
Certificate issuer:       /CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
Certificate serial:       01962DF449E2F5BE6176804B482E06878272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft
Manifest number:          0A4E
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl (hash: Yw+qy7GsfnkcDQmttNs6syauQTpJK277O9I9HCXfbP0=)
                          2: gi0_EyMqvU0B6RLloJeCvIjrKZc.roa (hash: SmxwMosUzjILazIuYN/g07frRTjtu/khfxltbXPY3+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:49:e2:f5:be:61:76:80:4b:48:2e:06:87:82:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80d1c0b4ef090c44d78b7ccb0bf72f09d0831f34
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=fbb808e05f526305f2f700d50523eede65070122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:37:fd:0e:dd:0a:35:7b:75:b6:ce:6e:d7:
                    b2:77:99:03:1b:18:45:80:a4:d7:de:91:f9:5f:05:
                    cc:a2:8d:60:40:41:de:24:c3:c1:f9:d2:4b:bd:99:
                    fd:d5:cd:91:dc:9b:f3:2f:09:69:29:e9:48:d9:59:
                    d1:57:2b:96:a1:76:f8:69:cb:11:c9:08:3d:68:49:
                    d5:98:94:30:d0:25:67:7d:cf:98:1b:e0:60:d7:8d:
                    61:f4:e4:98:a1:87:8c:b8:c2:6b:fc:9f:c7:fa:e3:
                    76:c6:4b:94:ee:64:ee:c1:c0:0f:67:83:a9:1c:53:
                    bc:6e:86:97:86:1f:fb:c8:e2:6d:3a:74:a6:e7:75:
                    60:10:8c:f4:67:3a:64:74:40:22:63:07:d6:d9:e0:
                    dd:64:3d:a9:dc:e5:48:a6:64:f2:70:b4:d7:c8:64:
                    c5:97:b8:d6:7f:ac:2e:df:23:0b:d5:a9:82:9a:ff:
                    20:7a:34:36:b0:01:36:e7:56:e9:b5:4e:78:7b:2f:
                    e3:36:c5:6b:4a:9e:21:58:11:30:4c:84:c8:71:42:
                    ea:20:08:9b:ad:b1:4c:5d:92:eb:9a:6e:e8:76:58:
                    f9:5a:90:8d:57:d2:f8:17:f3:d2:24:38:f1:f1:2a:
                    d7:dc:92:db:c2:94:d7:17:87:77:ea:b9:c4:93:cc:
                    6e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B8:08:E0:5F:52:63:05:F2:F7:00:D5:05:23:EE:DE:65:07:01:22
            X509v3 Authority Key Identifier:
                keyid:80:D1:C0:B4:EF:09:0C:44:D7:8B:7C:CB:0B:F7:2F:09:D0:83:1F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNHAtO8JDETXi3zLC_cvCdCDHzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/de64f7-39d9-4bbd-b023-bedcbc5a0174/1/gNHAtO8JDETXi3zLC_cvCdCDHzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:87:a6:e9:21:e0:96:da:4a:f6:46:2f:6b:21:95:9b:26:cc:
         48:7c:fe:e0:cf:f9:e5:39:6d:80:60:eb:f9:68:57:63:be:e0:
         ed:9b:ca:58:cd:20:5a:30:5a:9d:e2:69:b9:6c:31:24:7e:f6:
         cc:6d:9d:0f:de:3a:c2:d7:40:c9:dd:80:e5:21:8c:d0:9a:86:
         05:19:c4:9a:d9:0a:30:7f:50:51:63:9d:39:f5:e7:aa:38:8d:
         94:ef:ae:db:1e:2d:ba:d2:9c:a1:f5:9a:6b:09:78:c7:cb:54:
         2c:b9:48:3f:f8:fb:b2:50:51:d1:4c:ab:0d:cf:1a:14:20:e8:
         9a:b5:f3:27:2d:0b:e1:17:ff:e9:f4:14:4e:58:69:fd:7d:1b:
         8c:df:aa:51:14:9c:f3:2b:b4:9d:e5:02:e4:f1:8a:7e:99:ef:
         fe:b1:05:f2:5b:40:b9:4a:bc:9d:4e:13:bb:8c:9a:8f:fd:6b:
         b4:0a:d4:82:eb:6f:5e:05:f1:d9:93:1d:47:99:56:68:66:02:
         14:5f:40:71:16:c2:78:1b:bb:30:25:92:a7:5a:69:0d:3e:6f:
         7a:b6:6b:ca:4b:cc:d8:8a:1d:8b:54:18:32:3e:89:a8:67:75:
         64:cb:a0:b5:ed:14:2d:e7:19:86:f2:52:60:ec:73:bd:ee:16:
         47:9c:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----