Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
File:                     V3GDYWiNFi_4AjwSJ81kTa45ocA.mft (raw, json)
Hash identifier:          gs5B44iii0NKsTsoBs+Ny0YqPC3xkQ+E9/NIFd91HIU=
Subject key identifier:   87:2A:4C:32:FB:64:F9:A6:6B:9F:BD:37:13:A2:C8:42:93:20:6B:A9
Authority key identifier: 57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0
Certificate issuer:       /CN=57718361688d162ff8023c1227cd644dae39a1c0
Certificate serial:       01962F745F173AD2EA164926CE5027E88A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 14:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:17 +0000
Files and hashes:         1: V3GDYWiNFi_4AjwSJ81kTa45ocA.crl (hash: FRGkCmOqvQv6S1Y3k6+5p65nrBfPYoTbPBlD6jQbeAY=)
                          2: lgeLoySacO5n6-jqTWkewt--0AI.roa (hash: cHeeK4JCsJJNj8Pz7DQjcNm/axVPSQ0h4TJyF4NqSFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5f:17:3a:d2:ea:16:49:26:ce:50:27:e8:8a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57718361688d162ff8023c1227cd644dae39a1c0
        Validity
            Not Before: Apr 13 14:01:17 2025 GMT
            Not After : Apr 14 14:01:17 2025 GMT
        Subject: CN=872a4c32fb64f9a66b9fbd3713a2c84293206ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:5d:d8:48:3f:a7:f5:b0:13:ff:7e:c6:6c:
                    ac:d7:37:87:cb:a2:79:16:d0:df:0a:73:05:4c:6f:
                    6e:c5:ca:78:98:34:cd:67:88:29:b7:25:19:be:3a:
                    a0:dd:54:ee:71:07:fb:54:0c:e0:15:59:36:2d:40:
                    d8:f9:77:38:7a:1d:01:10:e5:15:1f:7e:b1:b3:0a:
                    c0:30:7c:b2:ed:dd:a8:35:3e:a3:79:57:3b:de:2e:
                    42:84:b0:e4:8f:7a:30:b9:a8:42:7d:db:87:2e:ec:
                    6a:5f:08:47:19:12:52:79:6b:9c:94:f4:a9:38:40:
                    c3:35:5f:af:1c:e2:f8:5b:c4:59:72:fa:84:31:5f:
                    49:30:80:8e:33:a2:f4:03:f6:3b:84:fe:43:ec:0d:
                    10:11:01:af:d5:69:4f:02:74:01:f2:72:ee:09:7e:
                    4c:ed:b3:c5:cc:4d:64:65:98:9e:9b:5b:8e:26:c4:
                    0a:3c:e7:01:44:52:45:01:a0:a9:6f:1c:47:0e:56:
                    cf:8e:84:50:3c:0d:34:48:ae:dc:25:e8:c6:cf:10:
                    99:b4:b8:91:8f:80:e6:55:20:fb:c5:01:64:d7:73:
                    03:ef:08:23:0e:ab:81:4b:45:86:28:f5:79:e6:f9:
                    6e:17:35:b5:42:bf:ff:05:b4:44:7e:36:e9:f0:07:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2A:4C:32:FB:64:F9:A6:6B:9F:BD:37:13:A2:C8:42:93:20:6B:A9
            X509v3 Authority Key Identifier:
                keyid:57:71:83:61:68:8D:16:2F:F8:02:3C:12:27:CD:64:4D:AE:39:A1:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3GDYWiNFi_4AjwSJ81kTa45ocA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a554d3-4232-48fc-b883-b3b5caaf5ea6/1/V3GDYWiNFi_4AjwSJ81kTa45ocA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b0:2e:68:c7:9b:8f:7e:0a:11:86:d6:02:27:1b:01:ae:17:
         44:53:3e:94:73:9e:d0:24:df:34:11:23:35:a6:fa:21:39:fd:
         f0:a3:62:73:da:40:be:48:a9:29:46:14:ae:98:f7:f2:3a:d7:
         da:3b:14:4b:4e:2e:3b:19:ea:b3:51:a8:41:79:90:85:7c:ee:
         6b:69:a2:da:4e:7b:c4:49:55:d8:db:a8:fb:b2:ce:17:e5:26:
         a1:52:08:8b:e8:c1:9e:f2:92:eb:a3:76:4a:ce:4b:06:01:be:
         c8:bb:7c:d4:eb:10:a3:dd:de:40:9b:e9:fc:4b:2e:80:a7:81:
         a1:f1:d6:23:14:54:90:0f:03:7e:df:7c:98:66:c9:02:26:d5:
         0e:b7:89:ef:24:11:9e:66:60:ca:01:e6:7c:87:1b:2b:6d:bd:
         cc:c5:af:9e:28:76:c1:78:c0:4e:53:2d:5b:72:d2:fa:64:a2:
         d5:ff:57:60:35:63:3a:56:f0:35:d8:44:63:76:b5:77:8a:b0:
         70:b2:83:2a:8f:60:a4:af:b5:b6:ce:26:7e:4d:a4:16:75:d3:
         8d:31:cf:22:7c:f4:e0:2c:bf:b4:b6:9b:5f:a7:38:05:93:42:
         9d:fd:f1:dd:33:aa:3c:4c:08:d9:2e:15:35:85:6d:28:69:83:
         fb:c0:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----