Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File:                     g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier:          3DWrEhPVdcaxx/tMl2XFAvcpNNy7nsZutmqZoDLwlGw=
Subject key identifier:   7E:0F:9E:52:18:E7:26:55:32:72:6D:D4:28:60:5F:E6:57:DC:C6:54
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer:       /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial:       01962E61E92F9ADD7B22ED559773CAE90B50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number:          09E4
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: VgjHvOxBU8eTA_iP_fNUCn81xQg.roa (hash: JJu0mzqFx7iO9SO/UVIC5Bf9dy6p0refWuwflirPpkA=)
                          2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: DUmGSR3ygjEFfgmUUIlnpdgkyV4/SWHcRF2VrYBwa0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:2f:9a:dd:7b:22:ed:55:97:73:ca:e9:0b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=7e0f9e5218e7265532726dd428605fe657dcc654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:99:e5:24:9a:62:80:18:66:dc:84:fe:59:
                    3a:a3:f1:b1:62:48:d2:c5:db:f8:9a:e0:be:41:51:
                    1b:22:66:af:eb:dd:d9:75:e2:df:4e:97:dd:6e:39:
                    30:82:fc:39:8e:37:7b:72:6a:63:84:dc:77:a0:9f:
                    46:a0:e5:3e:47:83:0e:b4:7a:63:df:f0:4e:17:dd:
                    7d:3b:8c:0d:70:5b:7f:f6:15:5f:eb:80:06:84:5a:
                    bb:8f:af:49:19:39:40:e4:87:4c:b9:d5:aa:2b:9f:
                    1f:f5:3c:17:a7:01:a5:7e:07:18:5d:7d:d6:6d:83:
                    bd:4d:be:70:ce:43:68:53:0b:67:43:95:b6:22:19:
                    cb:40:71:05:3a:57:d0:8b:db:c6:0a:92:03:1c:24:
                    a3:7c:57:f9:05:84:38:92:f5:55:d4:89:1c:6b:fc:
                    31:30:b6:ec:13:e0:33:c7:ff:c1:e2:cb:2a:14:c8:
                    7a:b9:b5:65:77:b8:35:34:fb:3d:99:fe:9a:72:c2:
                    74:10:80:68:03:8c:42:9e:63:c4:4f:d5:96:ec:67:
                    5d:4a:c4:2f:d0:09:96:a5:f2:29:98:65:4a:a8:8e:
                    0a:09:50:2e:f9:60:7b:ee:b7:49:99:ab:67:60:6e:
                    c7:ab:06:60:1e:68:fd:a8:d7:64:72:07:cc:fe:6f:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0F:9E:52:18:E7:26:55:32:72:6D:D4:28:60:5F:E6:57:DC:C6:54
            X509v3 Authority Key Identifier:
                keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ab:48:28:81:8a:81:e1:04:fe:ee:63:8c:5a:ba:6a:6b:2a:
         0f:3a:94:12:28:51:78:49:ad:06:09:69:e8:3c:e8:ef:c1:bd:
         2e:7d:4f:15:8e:93:6f:97:20:57:b6:1d:a0:ad:4b:0f:6e:b6:
         b2:6b:5d:b6:62:68:22:ce:b3:91:d9:76:6a:51:b3:6b:00:b4:
         4c:d1:22:04:3e:ae:5c:bb:3c:2d:c2:9b:e1:30:b6:e8:88:e9:
         03:66:07:75:fb:30:73:a8:02:92:aa:66:9a:b3:56:b6:87:44:
         8a:79:8a:0f:ad:91:a6:fa:36:e3:84:23:8f:15:d7:06:3b:9e:
         11:30:95:e1:34:c0:17:a7:90:59:00:c5:6a:a7:14:70:b7:68:
         fe:d9:10:4e:b8:24:6d:fb:67:e7:77:4f:75:69:2f:0a:dc:9e:
         a9:de:3d:17:52:9a:43:29:cf:e2:66:b8:73:f1:8a:91:6b:3f:
         77:3d:81:ac:c9:85:30:3d:ef:d2:d9:03:a4:2f:3e:c2:3e:c7:
         e9:98:d4:14:7d:cb:d1:7d:6b:01:3e:2a:50:e8:cf:6d:dd:f0:
         78:0e:37:a0:90:7a:d0:82:05:f1:35:9e:3e:41:6a:d5:f0:77:
         46:79:59:57:c2:55:20:15:38:c3:eb:66:df:d7:af:10:05:01:
         fe:87:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----