Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
File:                     gySHKx3b4yZPpmambx9OS7Uv2FQ.mft (raw, json)
Hash identifier:          Lcj99djC9IF3B+rX3t7Mj4im3m0wYxJKKdN5Feg2VCg=
Subject key identifier:   E4:22:CC:9F:69:D4:54:4D:AA:00:F4:81:DB:AF:90:81:E7:5A:A4:33
Authority key identifier: 83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54
Certificate issuer:       /CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
Certificate serial:       01962E9899680031C5B056EA84E05A259C05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft
Manifest number:          0C83
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: gySHKx3b4yZPpmambx9OS7Uv2FQ.crl (hash: lmGUM5jgTJ9EM5gahHnNFwR7QpB3fL0tlc7/WWD9zXc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:99:68:00:31:c5:b0:56:ea:84:e0:5a:25:9c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8324872b1ddbe3264fa666a66f1f4e4bb52fd854
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=e422cc9f69d4544daa00f481dbaf9081e75aa433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:93:68:48:41:ca:61:5f:2d:9a:5a:ba:36:39:
                    18:5f:6b:7b:c6:72:b7:91:96:66:83:c8:3d:75:0f:
                    6e:16:14:46:3b:36:db:cf:5d:4b:b5:23:a9:97:bc:
                    0f:a2:5e:12:4f:09:26:cf:bb:90:d0:66:93:36:6b:
                    04:5e:ea:81:eb:2d:e3:12:ae:d7:ca:0a:fe:83:c1:
                    23:f0:8b:f2:ba:56:29:e8:eb:d0:b3:e1:1d:32:6d:
                    33:9c:3a:16:e1:a9:05:59:22:81:6d:d9:31:8a:66:
                    91:5e:cd:89:08:e2:2d:39:23:05:ac:e1:4d:46:87:
                    b0:c2:94:8f:6b:25:7d:d5:c0:c0:42:37:9e:75:c6:
                    4a:2b:39:38:3e:4b:fa:e9:cc:d1:eb:ab:34:4b:cc:
                    17:bb:4d:48:e6:ec:1b:0b:81:cf:d8:dd:28:da:1f:
                    d8:34:43:ab:50:f7:9a:e5:79:73:cc:7c:10:df:23:
                    5a:41:2c:98:4e:5a:b4:38:00:52:24:cc:c0:59:48:
                    54:cc:9a:6c:cd:08:71:8c:4c:bd:8e:2f:51:54:e0:
                    b2:35:bb:be:11:41:aa:8e:f2:34:7f:2d:f8:f2:7a:
                    62:9b:e6:28:7e:b3:72:5a:78:51:3f:ea:b8:4b:ac:
                    f2:c9:b9:b6:5a:e0:a7:6e:49:f1:3f:d9:83:03:49:
                    8a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:22:CC:9F:69:D4:54:4D:AA:00:F4:81:DB:AF:90:81:E7:5A:A4:33
            X509v3 Authority Key Identifier:
                keyid:83:24:87:2B:1D:DB:E3:26:4F:A6:66:A6:6F:1F:4E:4B:B5:2F:D8:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gySHKx3b4yZPpmambx9OS7Uv2FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/778c66-9a51-43c6-92a7-f87b62fb61ff/1/gySHKx3b4yZPpmambx9OS7Uv2FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:0f:e5:c5:5d:34:cb:7b:e2:60:ce:55:2d:57:98:f8:04:d6:
         02:39:ab:c3:d6:fe:2c:a2:79:93:4c:99:20:96:89:ec:06:d4:
         dd:70:6c:85:63:4a:43:75:05:e2:2c:1b:a2:55:4b:ab:5e:cb:
         60:08:4d:5c:8f:22:9d:6e:97:69:ae:9c:da:24:1e:cd:d4:89:
         2c:2b:25:f8:bd:2a:02:ba:ea:db:0d:38:c9:d9:4d:a6:04:91:
         ca:39:29:67:b0:a4:c7:d2:81:73:4c:83:5e:96:60:c4:27:6a:
         d7:ce:f1:37:0b:1d:c4:32:b4:c6:b5:8c:46:3d:af:31:ed:24:
         03:d0:6b:ee:8e:3b:61:e8:ff:25:a2:b4:bd:7b:82:48:c1:2e:
         4c:87:b9:de:b8:88:77:3a:4d:c6:bd:c8:e2:39:56:9b:10:b9:
         2d:59:1f:c9:62:50:dd:b1:f4:f7:90:84:96:91:4e:1a:db:20:
         d7:25:4b:71:91:34:9f:d2:f3:0a:15:20:ca:12:ee:0b:bb:ba:
         51:4c:bb:a3:fe:54:28:d4:8d:9e:e4:b2:47:64:b6:f8:50:66:
         59:dd:1a:52:22:9c:34:c5:52:67:65:32:08:9b:d1:cc:13:2b:
         73:2b:d4:da:12:e1:c5:6a:72:b6:13:d4:db:e1:05:01:1d:b0:
         12:a4:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----