Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
File:                     gC-luYQiYYMgG3AVlrA2iifKkZY.mft (raw, json)
Hash identifier:          33/gbDVb7GWFdivShcMbyUdcL/V+5JYWtu1k/aQdJt4=
Subject key identifier:   64:F8:D7:D8:7F:D5:5D:A8:1C:BD:92:58:0D:BA:87:92:3E:9A:81:51
Authority key identifier: 80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96
Certificate issuer:       /CN=802fa5b984226183201b701596b0368a27ca9196
Certificate serial:       01962DF3A32257E79E99DA3A08BFE6C3E86B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft
Manifest number:          0686
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: gC-luYQiYYMgG3AVlrA2iifKkZY.crl (hash: TuUETjXivluRgzMu2XrdjFLjKkBF0FMX3Jk++e3ZVrA=)
                          2: iOg6nBqVzcdi2Akc2tXxbjOUGMU.roa (hash: 7kGU2Yz8c6ke6znrEKsk6Gl+moXJfyEygACJlbdXCNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a3:22:57:e7:9e:99:da:3a:08:bf:e6:c3:e8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802fa5b984226183201b701596b0368a27ca9196
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=64f8d7d87fd55da81cbd92580dba87923e9a8151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:7f:37:36:82:27:22:81:26:ca:6b:4d:e0:
                    8a:d6:0d:67:8c:f6:44:f0:86:cc:c1:8b:ef:2a:27:
                    fb:be:bb:c3:e5:96:c0:80:5d:dc:59:d3:0e:37:ff:
                    3a:5f:73:ed:c8:80:ba:ad:9a:f4:29:55:ea:6e:e4:
                    d3:f6:4c:e9:c3:75:38:80:72:7f:f1:32:be:82:85:
                    29:b0:26:9c:de:8f:c1:73:eb:08:ce:18:b7:48:f0:
                    65:e7:10:9c:c3:47:4d:ba:c4:f0:e5:73:e0:91:fd:
                    2c:9a:60:3f:44:00:a4:01:7b:4b:20:d7:57:b9:e1:
                    ce:a8:40:03:10:2e:f1:06:ad:28:ff:05:4f:eb:a9:
                    f9:45:9b:ce:9a:1a:f8:04:cd:e9:21:64:3a:b1:3b:
                    48:d3:39:86:ef:16:1c:02:6f:4b:15:34:40:10:48:
                    7b:91:9a:a7:7c:5c:58:e5:b3:e1:e6:cc:80:1d:74:
                    dd:3b:dc:0d:62:3f:4c:d9:4c:b1:85:ed:5e:f1:6b:
                    af:3b:2d:e6:c8:b1:be:aa:e9:67:d2:01:a3:30:cb:
                    b2:7b:10:04:9d:7c:54:15:10:57:d9:f0:57:72:da:
                    d5:e5:b6:60:b3:cd:f9:c1:93:31:ed:09:f9:38:e4:
                    d8:82:be:2f:a6:66:81:a6:15:c3:f6:e1:04:ab:1c:
                    8e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F8:D7:D8:7F:D5:5D:A8:1C:BD:92:58:0D:BA:87:92:3E:9A:81:51
            X509v3 Authority Key Identifier:
                keyid:80:2F:A5:B9:84:22:61:83:20:1B:70:15:96:B0:36:8A:27:CA:91:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gC-luYQiYYMgG3AVlrA2iifKkZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2c3a30-5498-447d-8d39-25b6bd2e1e43/1/gC-luYQiYYMgG3AVlrA2iifKkZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:8f:f4:db:7a:76:5a:55:cc:48:2d:3f:88:b8:66:fc:fd:c4:
         c5:88:a1:a6:b5:67:b6:44:5c:af:40:3b:14:5b:84:c4:35:a7:
         77:d4:86:ae:7d:07:cf:48:5f:56:bb:a3:05:84:1f:54:fb:3f:
         ed:37:2d:9e:08:97:fc:a3:75:85:2b:1a:56:ed:57:70:12:cd:
         52:a9:5d:f3:91:4c:7d:f3:9e:a5:52:70:0f:46:6c:b5:b7:46:
         d9:25:97:d6:e4:34:d8:a0:22:24:34:14:ae:68:fd:02:4a:09:
         1f:b9:6b:e8:c5:ab:f6:95:8f:da:9e:46:76:6e:3b:61:31:49:
         2c:18:05:00:fc:3f:50:17:1d:a0:6c:8f:88:1d:71:8f:f2:0c:
         a8:a0:61:23:10:90:34:cc:2e:09:72:82:6f:8d:f3:5d:8d:48:
         08:c6:5a:c6:84:78:eb:23:26:6d:0b:8f:01:54:1d:ca:8a:c5:
         ae:5c:d5:32:6f:52:47:68:29:49:4c:0f:6a:09:cd:dc:89:0b:
         73:43:95:6b:b6:f8:c4:20:51:f3:8a:8f:41:e8:cd:eb:ac:e3:
         b1:b2:69:ac:07:51:69:58:2b:72:1d:ca:5d:55:60:df:60:0d:
         ba:7f:b0:ed:e3:8a:14:b4:69:1d:6a:96:41:99:7f:f8:22:67:
         b6:8b:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----