Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
File:                     gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft (raw, json)
Hash identifier:          E3LTdGOFyc2LjkgEn70rXZIUchBMJi2+eU6AIA+Q++k=
Subject key identifier:   95:B5:AC:E7:07:41:D7:A0:50:31:D6:BC:FE:88:AA:67:9D:60:F7:98
Authority key identifier: 82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A
Certificate issuer:       /CN=827173a380cdf93c7b28668fabae569aa6f7a35a
Certificate serial:       01962ECF55BEA5D2E1A2B75BC4DD9BA47327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft
Manifest number:          100B
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: Z2JXPb5aczBq6WmK_sd6hX6UoF0.roa (hash: k+SlRJ8Eg3Sd/kSZfZH8+gupJSBpD7AMqyYcN2gXnJ0=)
                          2: gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl (hash: jkHKL63lhmPMzkZT19f9PRa/SA1R5vqAk44MbhCZGj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:55:be:a5:d2:e1:a2:b7:5b:c4:dd:9b:a4:73:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827173a380cdf93c7b28668fabae569aa6f7a35a
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=95b5ace70741d7a05031d6bcfe88aa679d60f798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:76:1b:11:6e:03:8f:cd:fa:18:b6:7f:47:18:
                    9d:19:c4:4a:c6:5d:cd:df:b0:85:0a:06:4a:66:cc:
                    fd:a6:2a:31:85:70:71:58:b9:6b:03:62:56:d5:17:
                    6f:31:24:f3:1b:69:dd:2e:35:db:cb:7d:61:4c:de:
                    9f:66:15:15:82:2f:5b:8f:d0:c6:2f:40:13:e8:6e:
                    27:5b:cf:19:ab:9e:b9:71:ac:64:6d:6d:d1:72:e8:
                    76:27:c1:22:b1:e7:23:04:33:60:4f:fc:de:6b:ab:
                    84:e8:9e:c2:8b:38:4a:94:f2:91:64:26:4d:2e:a5:
                    8c:f4:4d:a0:46:da:46:dc:27:95:bf:11:48:62:8a:
                    94:2f:6c:e6:2c:af:02:50:99:0f:2b:38:b8:1b:9c:
                    b1:73:cc:e0:92:37:40:eb:ef:5b:92:50:79:d3:f0:
                    05:c5:dd:2e:7f:3d:06:ce:30:cc:c1:25:35:b4:1e:
                    68:2e:0f:e5:7e:44:f1:33:a5:0f:c4:d5:56:9b:00:
                    06:15:58:21:37:f0:35:0c:74:dc:4d:3d:da:21:65:
                    1e:2f:ce:02:f5:c6:b5:1e:76:fa:c1:d2:c9:ba:66:
                    19:51:09:e9:bb:5c:30:5c:d4:e8:00:e1:2d:97:f3:
                    d2:cf:b0:fa:86:ff:10:0e:0e:f8:0e:29:f1:e1:5b:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B5:AC:E7:07:41:D7:A0:50:31:D6:BC:FE:88:AA:67:9D:60:F7:98
            X509v3 Authority Key Identifier:
                keyid:82:71:73:A3:80:CD:F9:3C:7B:28:66:8F:AB:AE:56:9A:A6:F7:A3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cef114-5868-47b8-9788-7b64089bb141/1/gnFzo4DN-Tx7KGaPq65Wmqb3o1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:3e:54:4a:ae:fa:ef:50:72:48:a7:00:a4:1b:87:20:8f:40:
         2a:28:8c:26:58:59:55:bf:53:c9:66:92:2e:56:05:2c:ec:9a:
         4b:48:bd:60:ae:36:26:7a:de:bd:38:ad:6a:d1:fb:36:cc:f2:
         b6:41:0e:09:8e:ac:04:bf:5c:4d:75:99:a7:7d:3f:ce:a1:23:
         0a:59:dd:df:4a:de:ca:08:75:39:d7:a4:00:d9:36:f2:f8:75:
         b4:80:83:d3:ab:28:80:c9:36:47:a9:d1:9e:95:e2:b0:ad:65:
         03:d3:c9:5e:ef:74:53:03:8e:82:cd:d2:ee:8d:dd:13:16:c6:
         de:7b:18:66:f2:25:3b:d7:bd:51:94:c5:af:8d:66:87:53:90:
         59:bb:61:b3:82:75:74:b7:70:86:8e:17:b4:d5:55:69:f2:40:
         34:41:7a:2c:9f:62:4e:b9:f1:d9:e5:d8:e2:a7:96:9e:5e:f1:
         1b:a8:ac:24:7a:d1:09:70:8e:91:3e:9e:9e:ad:73:88:51:69:
         91:ef:c6:8f:5d:de:26:b2:57:5c:eb:9d:42:7f:45:09:f3:0b:
         1e:8f:1e:7e:04:cf:d8:7c:1d:91:7e:a4:e6:3a:09:89:6b:d5:
         78:4a:de:3c:ed:3f:10:25:78:9b:94:88:10:94:db:6a:cd:a0:
         ca:74:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----