Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          skioa3gnp9KusdL+Y0hFiRdsLC/MVUF3v5FY9AYWpWA=
Subject key identifier:   0F:EC:C5:B3:1C:7A:01:2B:F5:15:F2:E9:43:64:F8:F1:EF:B9:34:6E
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       01962DF3E64B9E5FF7FA6EA51D5C8DC3F3AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          0C39
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: 1Di0Xz_MpkFSCrXwieDlABcYUOY.roa (hash: e9+8w6PzwdqZ5DMc28fcl3/6JCrUHirDY/ShA9oFLww=)
                          2: Fb4Aih2t-3x0svMSkoJF-OT975k.roa (hash: 4CpcD3G4jnvkJ9iB2UM4J3ZMTh++G55QBNDvUCamA1Y=)
                          3: NXwDVZABd3p4a0yMyLVaEUu993w.roa (hash: lhUXJxfjstspXt3/27XnZ9HzN1ZpRrwcEX2KjNAybVU=)
                          4: _zmyvqhTt2oFbDnddAPtCQEEyok.roa (hash: DAvzMAds1rhf279ET0ww79hQJtAHmid5htmCA8lZZdI=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: oKDTGM1NeiVQ+hJ6h5C8Lm3s1ww5RJvHUWF4uRUj+rE=)
                          6: m4nA49Lv7EMjkCcxgMafzldImD4.roa (hash: evH9NZtYuDtPls9Lqu7Vupfo95DdUFuCaTKXVG/rgrY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e6:4b:9e:5f:f7:fa:6e:a5:1d:5c:8d:c3:f3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=0fecc5b31c7a012bf515f2e94364f8f1efb9346e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:15:d9:fe:48:57:e7:41:42:dd:4e:1f:ea:
                    42:05:8a:1e:5f:54:7c:9d:b4:2d:22:cb:51:19:15:
                    98:86:31:6c:ae:e4:4e:eb:f7:6f:cd:5f:50:2b:67:
                    07:45:89:79:4d:34:1a:6d:36:40:65:b4:2b:ac:1c:
                    52:f2:44:a0:03:24:32:90:22:12:d5:38:23:86:b7:
                    51:c3:47:52:1a:02:a7:c4:0f:cd:44:b4:75:f6:b2:
                    dc:41:c0:01:90:d5:f5:ea:d0:f4:6b:cc:fc:fa:1f:
                    f6:08:fc:35:e2:b8:75:b2:36:f1:c1:9a:01:7d:6f:
                    6a:80:74:79:7c:45:c6:4a:04:74:48:a7:80:17:0d:
                    e2:17:65:2d:ad:05:2a:70:4a:db:7a:4b:b6:73:8c:
                    74:bf:d3:e4:c3:36:95:76:0c:6a:41:8a:c7:cf:88:
                    27:91:69:c4:c3:a1:0e:75:f8:35:cf:a3:f6:73:fc:
                    59:0a:46:c9:0b:54:9b:1f:4d:50:10:98:a9:bc:25:
                    59:30:0e:ef:0b:e6:55:90:0d:ec:03:57:a6:4e:3e:
                    b3:93:dd:54:3d:c2:95:39:50:e1:15:e5:68:69:a3:
                    8d:06:10:3d:0f:ce:6a:69:76:fd:6e:85:7a:88:0e:
                    ec:6c:85:d4:ec:6a:24:93:07:56:ce:32:9d:64:f8:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EC:C5:B3:1C:7A:01:2B:F5:15:F2:E9:43:64:F8:F1:EF:B9:34:6E
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:50:b0:c9:1d:4a:a3:f9:00:b2:93:83:db:a3:a1:bd:2f:ba:
         0e:a1:ef:3c:d1:ef:90:8a:e0:4f:97:2c:33:39:ef:cd:a8:91:
         c7:91:4a:e9:cf:04:47:3e:3a:92:09:b0:04:26:5c:c1:45:81:
         05:51:b3:41:d9:bf:f3:2e:a4:77:c6:6f:c5:7f:23:28:49:b3:
         3a:56:71:29:dc:7e:64:87:6f:db:ce:b9:c2:6c:2b:a3:99:dd:
         13:eb:46:96:f4:eb:3c:92:f3:a3:2e:06:8b:19:7e:5c:4f:93:
         54:24:b0:6f:02:7c:74:7d:16:63:8e:45:a0:b3:08:79:d6:df:
         ea:7a:a7:10:55:ab:b1:65:22:89:1b:68:24:4d:7c:e6:b3:6b:
         8d:db:71:d7:04:fc:b0:6d:09:4b:c9:e9:80:3f:de:fd:bf:4a:
         4b:1c:94:68:7e:5b:c0:e1:44:da:cb:b5:3f:e7:a5:05:32:be:
         d1:01:cb:fa:77:e5:84:57:96:b8:51:db:4c:f2:e6:79:3d:7d:
         bd:75:3d:a9:ee:f0:ca:7f:2a:d3:46:97:f1:94:91:1c:9f:38:
         c5:9a:12:c4:1a:1e:84:f4:42:6e:91:03:d5:8e:11:e3:2f:7c:
         3d:b7:b9:f9:d7:b7:27:6d:01:fb:8b:8d:fc:42:a0:7c:99:aa:
         bc:07:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----