Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
File:                     GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft (raw, json)
Hash identifier:          lfQQJ870y0eHt05P02Mo88XPFv8adRXsKO6snCkq/Xg=
Subject key identifier:   6A:BE:7F:FF:EA:DD:36:9D:DF:3A:08:8A:B9:A7:94:37:69:42:77:0B
Authority key identifier: 18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A
Certificate issuer:       /CN=184c7c0364f1093cfc584c93037024104fb4854a
Certificate serial:       01962FAB89AE30C01933F250B68C18A54155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft
Manifest number:          0EE2
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl (hash: P7KLac8B+I96m+ZtUtEzYdYUTfiuTr6YAPwR7viLCyw=)
                          2: kNJ4QKHP3RBmZh_tZnDEEJ0E5FE.roa (hash: uU2AY7qa+oUGBZk907QJJv8yZmXGgHMwO9buFHC3OUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:89:ae:30:c0:19:33:f2:50:b6:8c:18:a5:41:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184c7c0364f1093cfc584c93037024104fb4854a
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=6abe7fffeadd369ddf3a088ab9a794376942770b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:77:9b:c7:2b:f2:22:22:c4:57:61:5f:36:
                    17:bc:e0:dc:45:14:31:8c:f1:b4:6a:18:b3:a2:1d:
                    48:77:6b:36:4a:f3:7b:a4:5a:e2:04:fa:34:7d:3a:
                    16:7d:11:7e:9c:aa:13:89:a4:81:00:aa:ea:5e:00:
                    eb:d5:0c:b4:cb:63:f9:c5:32:a0:70:d6:59:48:e8:
                    fd:be:e3:6e:43:2c:1f:c7:e3:58:3a:f5:5b:c1:c4:
                    b9:3b:99:78:70:f7:4e:0c:72:0a:fb:ee:4c:07:94:
                    3f:9d:6c:eb:50:4d:a6:75:43:e7:20:c9:00:c4:83:
                    02:a6:13:90:cd:5c:0e:23:31:29:1e:9f:fb:21:c6:
                    bb:a4:fa:e7:4e:bd:a2:37:5d:26:c2:04:50:db:c6:
                    4e:f9:30:6c:63:6a:00:b5:e4:64:95:39:48:71:a4:
                    2c:22:f8:a8:25:f7:a1:32:ac:e1:53:7d:7c:9b:b1:
                    12:0b:2e:d1:49:e5:94:87:ab:d0:df:53:86:78:ad:
                    dd:0f:d0:a6:a4:51:c8:f7:0d:a7:dd:62:90:4d:56:
                    4e:0e:08:84:66:65:38:e8:fc:4d:d5:ba:8d:f1:16:
                    1d:1f:8b:05:d0:f3:0f:73:38:98:ef:4a:f7:f8:b7:
                    41:34:d5:40:96:51:80:b5:9c:46:6a:42:9b:c2:37:
                    e7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BE:7F:FF:EA:DD:36:9D:DF:3A:08:8A:B9:A7:94:37:69:42:77:0B
            X509v3 Authority Key Identifier:
                keyid:18:4C:7C:03:64:F1:09:3C:FC:58:4C:93:03:70:24:10:4F:B4:85:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEx8A2TxCTz8WEyTA3AkEE-0hUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/666dd5-cfa3-40e7-aa30-98f940e4d7c1/1/GEx8A2TxCTz8WEyTA3AkEE-0hUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:cc:60:1d:f6:af:95:60:dd:d6:e9:f5:a2:52:11:b0:b0:00:
         7a:fc:7d:e6:40:a5:08:37:21:d2:56:04:d0:7c:81:5f:13:33:
         34:ff:ec:ad:d3:7a:86:14:39:97:66:86:46:4b:36:38:47:9d:
         73:5d:71:99:1e:e5:f8:e9:70:10:a2:f7:af:5b:28:84:97:44:
         e9:37:89:43:6f:53:2f:e5:a4:b7:cd:92:cb:a8:7c:47:0b:76:
         ad:8d:f7:fb:4d:ce:a0:e4:d8:83:d8:f8:2b:76:d2:a6:1d:28:
         b1:c0:f5:9d:f0:39:35:db:48:e7:2a:da:ed:e7:55:8f:35:fd:
         1f:ab:18:1b:d7:eb:e7:73:1d:40:c7:4c:e1:42:30:42:46:00:
         08:c2:52:31:27:d0:ff:9e:0c:cf:99:4b:5f:13:d6:b6:9d:d2:
         29:0f:b8:c1:0c:af:a3:9b:6a:38:f7:ca:a8:d8:a9:f6:ff:2e:
         9e:df:7a:60:43:dc:4e:27:7c:03:5d:8c:e5:e1:ca:3b:dd:c7:
         4c:15:c3:8d:f6:fc:ad:5d:04:51:8e:b5:a5:40:0c:e6:5a:c0:
         d0:ff:27:0b:86:01:fe:2f:a9:b4:53:75:49:fc:bf:44:bc:fa:
         c6:5b:fa:75:70:47:96:06:5c:77:90:86:d4:d9:35:a4:c5:96:
         eb:f3:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----