Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File:                     gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier:          sp5KBRcfjAxnvOQgbCmJ4THbtnqVDIPrpLOKowYO/OQ=
Subject key identifier:   A2:9A:27:27:96:75:E7:2B:AF:28:B0:70:CF:51:5A:C2:3C:4F:E8:69
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer:       /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial:       01962F067170871DA4EAB5C1D9565F1E128C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number:          01F0
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: AUMiWbM4e52RdzmaQ6UG45QPmwI.roa (hash: GsuF2sv+ICThkJKWildnPjGLnNEqrWMzCEJm1Y27s1Y=)
                          2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: ydcp6CpE4y5oI8u7MZ9UKVTubYnPo212bxvpen5BkuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:71:70:87:1d:a4:ea:b5:c1:d9:56:5f:1e:12:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=a29a27279675e72baf28b070cf515ac23c4fe869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:ab:39:fa:f1:34:c2:2f:81:e8:d7:99:47:
                    fa:3e:55:5f:d6:80:be:3e:03:d0:b3:92:07:5d:86:
                    e8:b5:0f:b8:81:82:68:d9:c0:73:ca:4c:d8:06:7a:
                    3f:ec:ae:b3:ce:7e:13:2d:e8:e1:81:39:f1:98:17:
                    e4:dd:55:c8:69:31:46:06:d0:31:77:d7:54:7e:1e:
                    23:cf:1a:4e:f9:71:af:c8:0d:3b:76:9e:54:8a:9b:
                    a1:02:d7:ee:66:da:d5:4a:81:fb:65:95:d6:aa:71:
                    24:6c:82:d8:ea:27:ee:69:de:ec:38:ca:fa:40:b7:
                    78:c3:6e:b7:33:e8:da:10:5e:33:32:1e:02:6b:3c:
                    e3:99:25:cb:12:27:c4:e7:d7:6a:59:ed:78:d9:88:
                    25:e3:80:a3:c6:a1:7c:00:d7:56:78:59:6e:df:e7:
                    de:75:7c:15:7d:a2:de:de:3b:5b:13:be:04:29:da:
                    71:2e:97:73:89:3d:b9:30:29:2b:b0:53:32:b7:b8:
                    bb:88:bb:5d:de:f5:f9:15:64:20:ed:f1:c5:2b:46:
                    5c:2b:3d:e2:7c:50:01:b0:8e:5b:85:c6:17:f7:d8:
                    61:37:ea:ee:50:e3:ac:b3:23:c5:f1:5d:d2:c8:2f:
                    ca:b3:13:ed:39:53:f5:86:b2:a3:a3:e6:d2:2f:7a:
                    e3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9A:27:27:96:75:E7:2B:AF:28:B0:70:CF:51:5A:C2:3C:4F:E8:69
            X509v3 Authority Key Identifier:
                keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:48:2f:49:40:30:3b:bb:ad:14:d3:bc:72:b1:1c:6b:65:fd:
         d6:82:cf:8b:9d:d4:51:99:1f:ae:20:95:e3:39:29:3e:53:c1:
         c7:dc:d2:b9:b5:43:46:2d:ef:9c:61:82:6f:66:06:c0:b8:41:
         78:a8:4e:37:bf:24:2d:90:70:fa:4f:b1:d4:95:5f:9f:41:2f:
         b0:89:75:16:47:fe:4c:0b:00:58:5d:a0:99:db:2f:60:ef:90:
         a0:33:87:8c:2f:b8:8d:64:d2:5d:7c:f0:19:fb:1e:34:3d:63:
         7b:6e:7d:1e:0b:c2:cb:ec:93:0a:78:ef:f9:f0:02:49:f8:f9:
         b4:25:28:2a:94:10:ad:a0:70:43:e1:d7:22:66:0c:5c:18:df:
         22:b6:52:f4:f5:4f:45:5b:1f:1d:72:5c:32:8f:56:e6:20:8b:
         b9:29:99:62:47:83:52:97:9c:8c:c3:1a:9f:38:c5:1e:3b:78:
         f1:3f:98:dd:5c:de:69:90:e0:84:bc:3f:6f:fd:9e:7b:8d:a1:
         7d:6f:bd:9f:d6:b4:a4:40:bc:28:fe:f1:0f:2b:d9:cd:c0:6d:
         7e:7d:d2:be:3f:14:03:e1:4f:3a:33:82:6d:35:eb:72:39:29:
         8b:1f:6d:8f:7c:c1:2f:fa:24:51:5c:25:37:7d:40:08:e1:f8:
         a2:7f:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----