Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
File:                     gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft (raw, json)
Hash identifier:          ORz5jLa2qaQR0uDnXZwp1OAynNHg/S1eAnTkk1wtffs=
Subject key identifier:   79:B6:CA:59:59:6F:AC:F9:3F:E6:6D:40:56:22:B5:B8:FE:ED:EA:B9
Authority key identifier: 80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8
Certificate issuer:       /CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
Certificate serial:       01962E620E12FC021A36DD15A86F4D70D0AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft
Manifest number:          13C1
Signing time:             Sun 13 Apr 2025 09:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:40 +0000
Files and hashes:         1: 0SxQkYZEnXKkmz-KfHE_ng4dFf4.roa (hash: MC7o/cX4pPB7bvBIXoJXRXlWLcMZbnHjOKF7ORQIp5Q=)
                          2: FIcaLo5Lkwo711cOwWKooXhLRhY.roa (hash: ouIyYU8i1Bc12QJ63/vjQssVyB/lGTByw+wFjtilEFk=)
                          3: gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl (hash: CxJRxauEe6ru1XkpkJ2mjmJ+hWr8ThKDH7fyhItv0G8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:0e:12:fc:02:1a:36:dd:15:a8:6f:4d:70:d0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80df0cbdd5571e580ea57e18a440ca2bea4806f8
        Validity
            Not Before: Apr 13 09:01:40 2025 GMT
            Not After : Apr 14 09:01:40 2025 GMT
        Subject: CN=79b6ca59596facf93fe66d405622b5b8feedeab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:8f:27:16:c8:c0:c3:03:7f:77:20:46:2a:
                    3b:96:cf:ea:0f:9c:4c:0c:30:aa:fb:0f:1b:1c:62:
                    1a:7c:6d:a2:4c:63:fd:71:7b:c7:ad:d1:5a:ba:60:
                    09:f6:13:10:3a:59:22:9c:e0:e7:a1:ac:a0:a6:92:
                    73:01:a0:39:c6:d7:a1:92:b5:4d:ee:f2:c0:b8:38:
                    22:a2:b4:ae:4a:99:c1:33:14:51:a4:a7:06:87:41:
                    36:81:c1:54:7a:c6:4e:59:d5:9b:1f:97:21:83:2c:
                    02:fd:69:b1:c4:ae:34:32:01:47:ae:40:0c:da:0d:
                    b0:29:4d:ad:21:74:af:e7:d5:dc:0e:97:f2:b1:33:
                    54:7f:bd:ce:41:93:0b:f0:ce:c8:64:3f:71:5b:0a:
                    7e:a5:a7:4b:96:be:00:af:03:4c:4e:69:24:91:5d:
                    44:4b:2b:a4:f3:a5:e1:37:2b:ca:11:bd:6a:c0:cc:
                    3b:78:c5:ba:11:1a:57:7c:a3:2d:1a:c2:30:c1:5a:
                    2b:d5:8c:58:9a:9f:39:ac:4f:79:f3:47:15:a2:92:
                    7e:92:70:ce:33:ce:4e:45:92:4e:e1:e5:3c:79:59:
                    29:4d:e5:5e:0b:01:c5:34:e3:92:b4:02:12:d6:df:
                    95:d1:5c:cd:6e:45:1f:c3:18:d2:97:2e:22:b0:91:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B6:CA:59:59:6F:AC:F9:3F:E6:6D:40:56:22:B5:B8:FE:ED:EA:B9
            X509v3 Authority Key Identifier:
                keyid:80:DF:0C:BD:D5:57:1E:58:0E:A5:7E:18:A4:40:CA:2B:EA:48:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gN8MvdVXHlgOpX4YpEDKK-pIBvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9291e1-57ca-4c29-9e93-bd75ef9b5798/1/gN8MvdVXHlgOpX4YpEDKK-pIBvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:d2:23:be:83:4f:5a:84:5f:06:83:5b:9c:c2:2b:f4:c4:06:
         f0:6b:67:15:ce:51:9f:03:f6:75:b8:cc:29:9e:ba:b4:27:30:
         21:f1:ac:74:cb:1e:9e:ad:53:c8:85:d2:0b:26:d3:9c:f2:aa:
         44:cc:c5:40:19:fc:68:ae:13:91:82:cd:60:c8:a4:72:71:db:
         71:7a:bd:6f:b1:78:c3:85:78:2d:1a:0f:cb:94:ba:19:33:ae:
         b3:a9:cf:44:57:97:2d:59:f2:35:a8:03:a9:ce:3f:8d:85:d8:
         4a:fe:d6:b7:c5:40:83:b5:d0:58:81:5d:0d:51:b1:2e:24:82:
         70:66:49:d3:5e:50:7f:be:3c:28:9c:a7:b2:32:5f:f0:5d:c2:
         fc:0f:9b:97:85:9a:54:a1:88:8a:cd:d8:7b:87:65:2e:47:0b:
         af:97:c8:d6:04:80:7a:09:00:0a:29:c1:f7:ca:be:1b:59:d5:
         18:48:37:4d:d0:d5:e9:44:22:1d:99:d5:8a:47:ee:76:5e:2c:
         4b:75:51:90:3f:af:83:95:46:dd:38:02:9f:8e:a6:99:b6:0d:
         d3:85:63:18:0b:97:2f:21:e6:29:c9:ca:42:36:c9:16:2e:14:
         6d:4d:fc:56:c0:36:57:f9:eb:ed:9a:07:77:9d:df:6a:71:50:
         62:ca:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----