Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier:          oyJk+WzjLdfLoNmqWrhx6mcPxzsbpNfy9KXIJDUttiQ=
Subject key identifier:   79:DC:AD:9E:0A:8F:8B:18:56:F1:09:06:D6:2B:62:13:27:C9:57:1F
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       01962E98AA9BB062CD560C5E366E47E0E319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: OdWvB1tzlHuezmOiK21E-034390.roa (hash: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=)
                          2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=)
                          3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: FQNHHsQk/hHKnUFKWSCJv+I47L6RNn0PpOjdnfuXr8w=)
                          4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=)
                          5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:aa:9b:b0:62:cd:56:0c:5e:36:6e:47:e0:e3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=79dcad9e0a8f8b1856f10906d62b621327c9571f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:c5:0a:a8:0d:b9:78:57:bd:74:77:78:61:
                    28:50:44:25:c4:b9:f1:e0:5d:29:00:18:9e:58:3a:
                    fa:f5:fa:7b:1c:1d:e4:0f:a3:8e:c2:f1:21:49:2e:
                    c7:af:a0:7b:ba:46:de:10:27:4a:fe:f2:0b:61:0f:
                    93:9d:19:0e:26:b0:29:51:ab:ea:3e:68:c8:e2:b9:
                    e8:d1:74:93:59:c5:ce:68:f3:d3:08:af:94:c2:97:
                    5c:d5:94:5c:ef:07:55:99:01:13:72:2f:8c:a5:6b:
                    d1:23:69:1b:bc:65:c2:14:40:c9:0e:6f:ad:fc:65:
                    c3:5b:5a:66:e8:2d:56:9f:3d:db:f5:66:7e:57:46:
                    a2:13:f0:5a:2e:9f:1d:7c:06:12:3f:29:0a:30:a1:
                    2e:e9:6d:87:52:85:b1:42:0d:f4:bf:3f:92:de:e8:
                    12:b9:1b:d4:a4:1d:98:a5:b3:32:c0:03:a3:00:ee:
                    19:92:a7:17:14:6c:e5:e4:e6:1b:df:1e:7b:3d:96:
                    53:70:19:5e:82:05:fd:f8:58:cd:a2:d2:33:96:ba:
                    7a:42:e3:80:fd:53:c9:17:bf:07:65:9a:ad:fb:5f:
                    3b:4e:7d:f8:34:db:b8:ac:09:3b:ce:aa:e3:29:e0:
                    43:4a:f7:ed:16:ef:36:60:e9:95:e9:6e:30:7c:ad:
                    e9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DC:AD:9E:0A:8F:8B:18:56:F1:09:06:D6:2B:62:13:27:C9:57:1F
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:87:9d:d5:49:8a:c0:6b:4b:e9:7e:93:c2:af:c8:1c:44:b9:
         c3:42:7c:34:60:bd:be:62:63:32:e1:12:3d:ec:29:df:07:69:
         88:fd:2d:55:ea:39:ad:2b:bf:a4:06:9c:ba:b0:bf:11:bc:22:
         de:19:55:52:90:2b:e4:5e:32:f9:71:ac:cb:c0:6f:3b:8f:ad:
         ec:13:1a:09:1d:69:86:66:fb:5b:29:6e:6b:55:d3:90:31:e0:
         81:1f:f1:ae:6d:09:b3:23:c4:53:a2:e6:6f:2c:77:a0:4d:c9:
         a0:33:6a:0a:2d:c8:0d:1d:09:3b:36:ae:e6:0f:9e:2e:97:72:
         09:67:bf:1b:cd:5d:e0:17:dd:f6:0b:1b:c1:dd:96:95:18:86:
         76:24:96:3a:17:ae:1f:c6:67:4c:d6:1e:d5:0f:64:8e:6c:5f:
         e3:4a:c6:91:8a:2d:0f:de:3c:e0:a9:00:3b:26:00:77:16:1b:
         e5:fc:e7:ca:86:8f:94:7a:1b:e4:c1:1d:88:18:a1:b0:75:3c:
         cc:bf:ed:93:f9:44:2c:a7:82:50:b1:1e:4c:30:9b:2c:b0:5b:
         02:56:eb:cd:ab:4d:77:63:4a:fd:41:4f:a2:17:b3:2e:c1:e1:
         e2:bb:74:3f:d1:0e:a6:e2:53:6e:fe:3f:cf:eb:f6:0e:cf:75:
         65:db:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----