Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
File:                     gKMz0T3JFfT7-2GyWkh36ROOfx0.mft (raw, json)
Hash identifier:          AXQK1xWSqw4ueZLq+DtipunkJR4KlvDsAMk9DRjKFYA=
Subject key identifier:   93:AD:0F:C1:78:FC:C8:18:82:D6:7D:8E:DA:6D:96:93:64:94:03:C7
Authority key identifier: 80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D
Certificate issuer:       /CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
Certificate serial:       01962F748FE5A56D7E94DCC6A08FEC67769D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: EV9I607bk7yKT2_ZGGPzpK_T3Kw.roa (hash: +4JZ98C4BqbbLLfwtggPDHTa1SBuwVe0r20VBr9Sh7Q=)
                          2: gKMz0T3JFfT7-2GyWkh36ROOfx0.crl (hash: UCAs6akYS9lkakoLZaRjZyOIxJ70UtoBVMBj8iRArDg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8f:e5:a5:6d:7e:94:dc:c6:a0:8f:ec:67:76:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a333d13dc915f4fbfb61b25a4877e9138e7f1d
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=93ad0fc178fcc81882d67d8eda6d9693649403c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cc:7b:8f:ef:95:36:be:ad:98:b7:12:13:9e:
                    7e:be:4c:6b:26:c3:98:b1:99:7f:34:6a:d8:35:0b:
                    d5:be:34:49:5b:0b:eb:e5:85:65:b3:47:1e:2d:17:
                    9b:21:df:b0:4b:1e:12:4c:93:99:55:56:ef:e3:89:
                    32:e3:4c:53:b6:1a:95:9c:35:eb:2a:d9:9e:8d:17:
                    b4:e6:8e:95:e4:8d:6f:f7:8b:59:8b:65:4f:45:ef:
                    67:af:4c:0f:b1:f8:6a:01:b0:49:cd:45:97:e7:3c:
                    86:14:47:24:e1:ee:9c:3e:da:be:69:d1:3b:4f:29:
                    82:31:9d:e2:12:7e:e5:6b:38:85:10:ef:51:fd:d1:
                    17:e5:fe:7c:1a:1b:3d:e0:64:a1:ee:90:5d:c1:4f:
                    7d:c9:71:93:c8:c7:93:2e:fe:18:d2:46:17:0e:91:
                    88:95:d1:9c:60:44:29:1c:a4:af:2d:41:20:77:3e:
                    ab:b3:fc:96:82:71:e2:47:65:8e:92:0c:79:1f:e7:
                    36:fa:bf:ad:c5:a3:79:2e:2a:83:50:7f:de:72:6b:
                    49:18:e2:c0:0d:b0:7f:56:03:2e:89:d3:cd:e5:21:
                    dd:6f:44:e2:de:0a:0d:71:c6:aa:45:07:ce:e6:ee:
                    7c:88:65:60:0f:2f:72:39:46:d6:ce:9d:84:0b:91:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AD:0F:C1:78:FC:C8:18:82:D6:7D:8E:DA:6D:96:93:64:94:03:C7
            X509v3 Authority Key Identifier:
                keyid:80:A3:33:D1:3D:C9:15:F4:FB:FB:61:B2:5A:48:77:E9:13:8E:7F:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKMz0T3JFfT7-2GyWkh36ROOfx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139b38-5b24-407d-b17e-4ca35430dca3/1/gKMz0T3JFfT7-2GyWkh36ROOfx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:7d:af:27:35:b9:f4:af:16:7c:fa:83:00:3d:64:73:ba:4c:
         5a:d3:8e:d1:01:89:00:28:4e:41:3e:a4:50:48:72:a4:a9:0e:
         4f:ba:1f:b5:ec:c2:de:f1:0b:d5:b5:18:0e:4a:d0:0f:ce:60:
         b5:c4:42:6c:04:ce:53:20:50:34:df:a7:f8:23:75:08:93:28:
         24:2a:39:73:78:7d:a7:ba:a7:15:13:f8:a8:82:59:c5:11:4f:
         9d:0b:a9:d8:39:a5:f3:5f:90:ff:09:73:5a:d4:03:1a:d4:40:
         43:64:cc:d2:22:78:3f:19:27:8d:1e:96:9d:45:fc:fb:00:fb:
         99:3c:30:48:1b:56:32:b8:cd:ae:c8:53:27:36:74:05:d9:bd:
         4e:52:a4:ef:7e:2c:49:a1:6d:bb:6a:79:38:a7:9a:aa:87:5c:
         9c:1f:db:f4:ab:de:5a:e7:b5:37:af:65:d0:e8:74:fe:6b:ab:
         0f:f5:e0:89:3f:f2:33:e1:2f:af:76:7e:fe:98:47:19:5c:a1:
         49:ba:12:02:43:37:05:07:f2:90:d4:60:df:18:ec:83:54:3f:
         3a:04:74:f7:45:3f:73:5e:52:cd:ef:73:ac:67:5c:09:1e:cc:
         c3:47:c2:31:8e:d5:b9:4d:6b:00:a4:b3:3c:ad:22:f3:a5:5c:
         18:e9:0b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----