Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File:                     g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier:          5Gqr0luoYa2WiDphl4IKsquW3p1VQslsbCvs7oTvh0M=
Subject key identifier:   25:80:38:30:DE:9F:FE:E3:02:1A:A0:0E:46:8A:84:7C:D2:19:2F:6A
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer:       /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial:       01962F74EA4F4154BCCA55F5A2C554B296DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number:          11F2
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: DobE_GDwj6LglTHnTGTNO49HHQg.roa (hash: BUWVPFb7JdXBEYo3ia6vx/6Nxlayi+TmF4VDb5fiITc=)
                          2: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: FWuBxBiNQoEFVtM1CvuPxRP+SAfzaxTq25ac2R5uOd8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ea:4f:41:54:bc:ca:55:f5:a2:c5:54:b2:96:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=25803830de9ffee3021aa00e468a847cd2192f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2d:87:26:47:17:6d:6e:78:d1:90:fa:29:1b:
                    6a:26:c9:7d:7c:ec:0f:02:60:09:2f:a9:d4:f6:6b:
                    77:82:e1:3e:fe:51:ce:7e:b4:d5:df:ba:eb:48:79:
                    f3:39:27:fe:6a:e1:da:c6:5b:84:95:9c:44:e7:29:
                    e0:44:f5:9a:6e:7c:4a:a8:d4:bc:d6:4c:0e:97:d1:
                    0c:7e:4e:38:49:f0:82:25:63:4e:40:35:a7:02:4c:
                    7e:c2:eb:aa:26:f3:bc:b1:37:69:d5:13:fd:af:16:
                    13:0c:7b:f2:bc:2e:e6:1d:da:19:6b:fc:ed:6f:46:
                    8a:00:b6:86:5f:36:5e:29:aa:15:4e:ce:97:ac:d9:
                    7b:9e:60:03:bb:07:e5:62:f7:c0:6a:28:a4:2e:4a:
                    88:18:6c:2c:d8:20:e8:31:b6:fa:a1:d7:6b:7b:22:
                    70:5b:cb:3a:2f:29:65:d3:05:4e:9c:b1:c8:58:46:
                    37:06:2d:bd:05:52:3b:06:23:01:55:4f:19:eb:0e:
                    15:f1:82:87:c5:b8:ae:37:39:58:8e:80:6f:b4:bf:
                    c3:64:bd:bb:d6:32:03:04:fe:f4:0f:61:79:62:85:
                    b8:71:d8:f7:a7:03:10:94:c7:5c:c1:a4:ea:13:bf:
                    2a:7d:22:a0:c4:9d:ba:d6:91:91:13:47:5e:61:42:
                    3a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:80:38:30:DE:9F:FE:E3:02:1A:A0:0E:46:8A:84:7C:D2:19:2F:6A
            X509v3 Authority Key Identifier:
                keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e7:5b:7b:0d:14:bd:84:84:52:ec:7f:0a:5a:95:1e:65:eb:
         38:e0:d7:f4:ee:d2:45:45:9b:86:b4:5c:6b:6c:38:cb:f5:a4:
         a9:15:2d:25:11:a2:5d:31:95:69:3f:94:f8:b3:7f:50:d3:8c:
         52:aa:03:ff:7f:cb:62:21:a4:92:78:13:76:59:24:c0:5e:3a:
         2e:5a:d9:59:9b:07:95:d0:37:5a:59:1d:ed:31:1f:8f:04:14:
         9d:33:cc:34:6b:7c:1f:05:6b:9d:40:da:5e:d0:53:73:df:f7:
         25:4d:1b:12:ff:bf:67:6d:04:f5:13:d3:8a:e2:6c:9f:2a:a1:
         47:df:f0:3d:63:fd:9b:50:59:cc:60:93:ad:3c:d8:26:3a:05:
         89:3a:57:25:f9:5b:d3:91:8f:58:27:50:34:86:0c:7d:a2:42:
         84:d1:9e:78:56:5b:35:57:eb:22:31:0f:35:13:21:74:ed:43:
         d2:38:12:1e:c7:de:13:0c:d4:b1:9e:49:83:0d:25:f5:89:51:
         9d:94:a9:38:aa:30:94:e3:69:d1:02:bc:94:11:cb:94:58:84:
         f4:fc:52:4f:41:db:1b:2b:19:2b:2d:fd:00:7d:bc:55:75:42:
         03:b2:15:99:e9:15:1d:fa:c1:d0:5d:ab:58:27:51:1a:e1:48:
         80:8c:51:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----