Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
File:                     gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft (raw, json)
Hash identifier:          5E/iDY3fSrMp2UkEVhLw2Rx2sCndFIDHAvmVVep4e84=
Subject key identifier:   80:FC:CD:38:FC:CD:05:27:0E:F3:1F:7D:BE:2C:A0:26:B9:EB:F7:31
Authority key identifier: 81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75
Certificate issuer:       /CN=81062dce1a791e7341d5f4259811ab4d65f6b075
Certificate serial:       01962E98789BB43CEBE1398B5A1B6B1DF8AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft
Manifest number:          107B
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: gPvG8JKXbj-vvJrpNLZ9cDnUs8w.roa (hash: JKRD+vgt19aGbPFmkdV1fkgtJNWsit5Cuia9bEn2uRY=)
                          2: gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl (hash: ny4ibq+7vnSwKohaSMSzdBqAuC2Q0DSSP2tKzb9FXjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:78:9b:b4:3c:eb:e1:39:8b:5a:1b:6b:1d:f8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81062dce1a791e7341d5f4259811ab4d65f6b075
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=80fccd38fccd05270ef31f7dbe2ca026b9ebf731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:90:5a:81:09:44:64:31:8d:02:d9:53:d8:ed:
                    6f:76:98:0f:68:77:4c:7c:89:91:f2:dc:78:da:12:
                    9c:7d:90:1d:90:91:a3:f9:ec:bd:16:43:79:be:c0:
                    63:d2:ee:bb:da:ea:bc:73:99:f8:3c:b3:4f:d1:2e:
                    47:2a:30:38:b6:c0:24:c6:96:ec:7c:c0:f5:91:c6:
                    f9:98:dc:ac:b4:6d:02:33:97:3a:d3:97:15:54:82:
                    7d:0c:d9:2b:5b:59:f6:83:d5:c1:42:89:07:17:9c:
                    5c:8d:30:7f:40:77:f8:61:ee:28:d3:0f:c0:b2:3a:
                    ba:68:96:01:1b:ed:7a:fd:78:cf:05:f1:99:44:a4:
                    19:fa:bc:3d:dc:6c:75:ad:12:e5:04:84:06:c1:33:
                    c2:1b:40:a4:3e:fe:e6:5c:05:7b:30:d3:6e:f2:4c:
                    13:6b:f2:8b:84:8a:59:7b:28:10:fa:87:2a:5f:bd:
                    62:cd:31:13:f3:23:b1:5d:9f:a7:59:59:3e:00:1f:
                    33:09:ab:aa:b9:10:5f:66:57:21:fc:98:f2:98:b3:
                    f4:71:44:26:96:cf:b3:26:5b:c7:9f:fb:b0:55:4e:
                    76:6a:22:37:65:27:fd:1b:55:bc:54:87:35:fc:52:
                    1a:e7:64:e0:56:62:02:eb:71:79:6a:0a:9f:fb:0b:
                    90:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FC:CD:38:FC:CD:05:27:0E:F3:1F:7D:BE:2C:A0:26:B9:EB:F7:31
            X509v3 Authority Key Identifier:
                keyid:81:06:2D:CE:1A:79:1E:73:41:D5:F4:25:98:11:AB:4D:65:F6:B0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYtzhp5HnNB1fQlmBGrTWX2sHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d78d1-3e0c-4c1a-a141-74e218d4b613/1/gQYtzhp5HnNB1fQlmBGrTWX2sHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ff:76:92:07:0a:36:d8:00:07:ce:df:91:23:2f:81:65:fa:
         e1:96:1e:4b:64:ba:bd:7e:31:48:bb:b6:91:fa:e4:8b:ad:67:
         3a:b4:e7:9b:d2:8e:e1:c5:c3:e3:8e:38:f4:92:a3:96:6d:fa:
         cd:61:4c:aa:4a:b3:5a:32:c6:ce:30:84:0f:bd:71:23:66:4e:
         3b:65:34:91:bc:e4:cd:4f:e9:0a:e6:21:2d:6a:c3:ea:83:83:
         b8:32:85:c2:82:a7:91:c6:25:7d:a7:19:8f:80:7e:42:4a:ca:
         10:79:d3:79:98:01:23:07:79:ac:7e:82:09:8f:7e:67:7f:4b:
         b1:b1:4a:d8:25:9e:df:98:a3:b9:93:52:37:68:05:d1:c8:27:
         ad:ef:00:17:c6:36:f5:6e:66:9a:a2:61:1f:5e:5f:1a:e4:a0:
         17:1d:e2:78:c6:c2:66:d3:ec:95:a1:de:00:5f:f0:d0:45:a5:
         90:fc:94:bf:ba:2d:d8:db:ba:31:cc:88:ed:70:e9:65:38:be:
         36:0a:23:ea:d2:38:83:2d:74:78:8c:60:b1:a9:0c:c5:f1:a6:
         a3:a2:d9:6d:1b:e8:fc:a6:e8:fe:71:d4:78:71:0a:79:89:2f:
         91:8f:4a:d9:78:b1:49:3f:3c:f0:63:c6:84:e3:29:6f:b2:1d:
         f6:2c:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----