Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
File:                     g_gpRGn7euwmAbsDdy0BVvRwt00.mft (raw, json)
Hash identifier:          XFOIJ/0qz9pjvos7u61ZxU01P/HEvHNeDHqKbLdaQD0=
Subject key identifier:   F6:1D:8B:0C:B6:1C:28:67:31:DE:D9:07:97:65:FE:C2:72:AD:03:14
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Certificate issuer:       /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial:       01962ECFA98EBD79093EAA2189055FDA08BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:23 +0000
Files and hashes:         1: atkABp03ezo3IQf9p_BdcUMTGKY.roa (hash: XIGewf/YhXuM1/3dqCaqTKBoy+0/E1uQhatEfe1jkfI=)
                          2: g_gpRGn7euwmAbsDdy0BVvRwt00.crl (hash: 9IS2oSIsX/WpdX8DxK3ini5ruKcL/QaPqQQo8vM7kCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a9:8e:bd:79:09:3e:aa:21:89:05:5f:da:08:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
        Validity
            Not Before: Apr 13 11:01:23 2025 GMT
            Not After : Apr 14 11:01:23 2025 GMT
        Subject: CN=f61d8b0cb61c286731ded9079765fec272ad0314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:0a:80:c4:30:cc:d0:f3:af:1c:16:a6:f1:13:
                    e4:09:50:4f:eb:9c:68:33:a1:3d:8f:74:4d:72:8c:
                    bf:17:d6:42:61:d3:10:b9:56:b2:11:c5:35:cb:71:
                    9e:8f:1a:32:58:30:8c:4c:7d:2d:0f:06:27:8d:73:
                    af:cb:cd:c7:53:42:a0:10:2b:7a:69:5f:ae:37:67:
                    e2:6d:16:29:99:ab:be:b8:46:23:2b:ed:e1:c4:a7:
                    b7:d9:7f:c0:02:a9:0c:17:94:f4:2d:30:4b:a4:35:
                    a0:7a:d8:66:29:34:7a:5c:69:fc:89:d9:9c:8c:49:
                    76:ef:0b:19:06:7a:8c:4a:63:64:ac:57:94:c3:05:
                    0b:2f:b6:df:3f:c1:9b:16:17:27:1a:35:e7:bd:dd:
                    c2:fc:2d:20:da:25:d8:d2:f0:5b:c1:47:76:b5:e6:
                    03:65:95:1f:26:1d:27:5b:13:d5:9c:1c:5f:b8:65:
                    2c:7d:b2:b9:d2:9e:a9:62:d3:2a:17:ce:ea:89:90:
                    df:b9:36:30:e4:a9:43:8c:19:99:16:db:93:ce:af:
                    5f:b5:fd:9f:54:70:44:55:2b:b1:19:e3:9c:c3:ab:
                    e1:ac:29:1c:9f:70:b9:fe:da:e7:54:6c:d1:d3:db:
                    7e:1a:38:20:e3:31:2e:2a:b0:e2:0c:3b:75:df:73:
                    1b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1D:8B:0C:B6:1C:28:67:31:DE:D9:07:97:65:FE:C2:72:AD:03:14
            X509v3 Authority Key Identifier:
                keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:80:2f:3e:ba:36:14:3e:e0:17:e3:e0:0f:22:d1:96:94:f4:
         33:1d:b3:31:df:42:fc:3e:f5:05:ea:bd:2f:fb:98:f9:93:6d:
         a6:92:28:52:2f:55:43:91:bb:e5:5b:e6:32:f3:cc:32:0d:8f:
         fa:28:5b:cf:42:8f:74:2e:93:f8:36:df:ad:d7:64:39:2a:d0:
         1a:52:a2:97:87:fc:70:1d:30:41:d7:bb:d3:f1:a0:84:1b:63:
         67:76:a4:48:8d:7d:19:62:15:1c:02:aa:64:c6:bc:1d:22:4f:
         66:f9:5c:0a:16:d5:1b:fc:a9:1f:5f:7a:a3:ba:c3:44:c3:34:
         6a:01:90:67:7a:e0:57:e5:d3:bd:4f:ad:9d:21:eb:7a:43:9c:
         7d:fd:bb:40:75:24:01:61:be:53:63:e2:d8:bf:7c:25:3a:72:
         21:99:54:5a:0d:da:c2:7a:33:37:fb:47:3f:01:de:95:fd:d5:
         da:2c:47:23:24:b9:ce:d3:37:43:b9:48:b8:02:3f:42:e0:3d:
         f3:ad:6f:ec:f7:d3:55:7a:6a:69:62:b5:10:23:cd:4d:5b:60:
         ab:d7:bc:ed:b3:af:98:c1:26:10:21:78:8a:8d:bc:25:bc:da:
         ed:0f:d6:e2:90:b2:30:38:6f:c0:f4:f4:8a:cd:77:63:33:71:
         e4:2a:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----