Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.mft
File:                     gREA7ka_Z6hJXo01Y1aWao0vfmU.mft (raw, json)
Hash identifier:          iCipy6uAWl/B/ZHrzKM4XZEYH0pl2X6ITyXlaB96jbQ=
Subject key identifier:   2F:EA:42:58:07:AC:98:13:F5:9D:CF:79:54:E6:6B:AD:3E:AD:34:3C
Authority key identifier: 81:11:00:EE:46:BF:67:A8:49:5E:8D:35:63:56:96:6A:8D:2F:7E:65
Certificate issuer:       /CN=811100ee46bf67a8495e8d356356966a8d2f7e65
Certificate serial:       01948DE34F277644A3730326E80AA0D7EEDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gREA7ka_Z6hJXo01Y1aWao0vfmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.mft
Manifest number:          0CA7
Signing time:             Wed 22 Jan 2025 12:01:11 +0000
Manifest this update:     Wed 22 Jan 2025 12:01:11 +0000
Manifest next update:     Thu 23 Jan 2025 12:01:11 +0000
Files and hashes:         1: EJMKvBCdw2_MsOq9C37gE8bMZd8.roa (hash: MMz57/tmiMn7pJo6P4gKh53NgUstZu29pckuqCa8kQs=)
                          2: gREA7ka_Z6hJXo01Y1aWao0vfmU.crl (hash: oUWJniolMfC0IiHVmsc2Nr/i4h6wGLTLnKIL3jcO6+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8d:e3:4f:27:76:44:a3:73:03:26:e8:0a:a0:d7:ee:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811100ee46bf67a8495e8d356356966a8d2f7e65
        Validity
            Not Before: Jan 22 12:01:11 2025 GMT
            Not After : Jan 23 12:01:11 2025 GMT
        Subject: CN=2fea425807ac9813f59dcf7954e66bad3ead343c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:03:80:f9:3c:57:29:ed:18:44:0d:1b:f6:
                    3f:46:b3:30:9d:c8:64:3f:f7:80:c8:cf:5e:94:dd:
                    46:62:d7:cd:2f:d0:e8:3c:c3:88:6b:ae:ab:f1:74:
                    72:c4:56:23:72:0b:66:ac:e8:f4:49:f9:69:91:b0:
                    b8:3a:18:e8:bd:57:5a:c6:65:cd:d0:ce:e0:31:86:
                    11:f8:2e:bd:76:75:61:2f:7c:1c:eb:7f:08:26:01:
                    ba:bf:21:63:ed:a6:4b:89:62:f3:eb:19:6d:de:cb:
                    82:d2:fc:24:ab:cc:fa:e2:9d:9c:4d:33:3f:92:70:
                    f2:a9:a5:17:15:39:4b:9f:85:aa:a1:a7:5c:4a:06:
                    0a:4c:20:d2:ba:72:1f:38:66:8b:f0:6b:3b:e8:2b:
                    70:1f:4e:c6:f5:9e:0e:ac:85:3e:0d:ed:65:1c:e2:
                    1f:75:ff:07:b8:3a:5e:98:2b:09:94:9e:9b:c1:e1:
                    a1:14:11:81:60:26:65:ca:28:a1:44:0e:0b:93:2d:
                    8f:50:36:b4:ef:e0:8d:5f:a4:cd:5d:38:ed:35:4d:
                    23:55:9a:07:3d:4d:45:c5:cb:57:6a:91:8b:b8:8a:
                    34:12:9a:b5:40:96:48:75:e1:b2:51:58:40:9f:82:
                    51:1c:91:f7:49:bb:a1:38:b9:5c:ac:d1:00:cf:ca:
                    2d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EA:42:58:07:AC:98:13:F5:9D:CF:79:54:E6:6B:AD:3E:AD:34:3C
            X509v3 Authority Key Identifier:
                keyid:81:11:00:EE:46:BF:67:A8:49:5E:8D:35:63:56:96:6A:8D:2F:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gREA7ka_Z6hJXo01Y1aWao0vfmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d34378-7da4-4233-9522-54eb7c07aac4/1/gREA7ka_Z6hJXo01Y1aWao0vfmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:02:66:9b:51:b6:71:d3:f6:5f:5b:e6:42:80:2f:93:54:d7:
         b6:04:74:2c:05:37:ff:e2:38:e6:80:fe:2c:87:0a:22:f1:15:
         b9:fe:78:40:cc:91:6c:6e:53:f9:e1:21:f1:35:5d:40:42:42:
         6e:f2:07:e1:89:8a:3b:7c:e9:c9:57:22:4f:fc:23:6e:b3:0f:
         eb:11:a6:8b:71:3c:c9:45:b0:98:58:e0:4f:0b:85:c2:83:c2:
         3e:0c:fe:f7:7f:97:2c:88:6f:c7:81:ad:96:97:b5:d5:0e:4e:
         25:5b:a9:fe:c3:cc:60:a2:ac:da:18:23:37:1d:19:db:18:45:
         60:19:0f:0a:89:ee:79:62:ae:dd:56:86:99:b9:40:a6:56:dd:
         b8:5d:32:8e:fc:a8:32:9b:b6:25:45:c0:1e:91:76:1f:ce:2d:
         60:27:da:90:c7:bf:4c:61:ca:4d:02:a0:f6:58:48:41:aa:22:
         8f:71:6c:1c:f5:c3:04:f4:7d:f7:3d:6e:87:ab:16:c3:b9:a8:
         ee:54:4c:5d:f8:3b:5c:a1:94:8c:6d:30:8e:2d:92:d2:d8:86:
         61:5d:a0:a7:03:d4:25:00:88:80:9f:a8:3b:1f:64:94:00:04:
         31:99:4c:37:18:6f:e1:06:15:88:04:c9:00:2a:85:58:44:20:
         73:4a:e0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----