Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File:                     G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier:          nHlbV9X8a3nVEOwZOAm5zyc833SRb+//6de+sZpk1PY=
Subject key identifier:   77:E1:15:C3:86:D1:70:84:A8:F9:85:B2:4D:FE:41:5D:46:B9:E0:AC
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer:       /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial:       01962FAB6128916051081BCDE0CD83C02FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: Csk8FW5y7YJBzT_KmLLv1t_20_E.roa (hash: v8gWLbfcXD73mmO4K/7j3PoZmZQLB/oP8z7Xeflu12k=)
                          2: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: u8HfhhVgkmkNWqUt1JOWjrksmQl55HGNbYtQzCmGqhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:61:28:91:60:51:08:1b:cd:e0:cd:83:c0:2f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=77e115c386d17084a8f985b24dfe415d46b9e0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:bf:a9:b4:77:44:5c:5e:93:6d:ee:78:3b:
                    69:81:29:93:f1:a0:73:c6:f3:38:54:be:4d:4a:20:
                    97:ef:82:d7:c0:1f:3e:72:17:03:76:0a:2d:3f:9e:
                    03:ac:b2:f3:32:98:16:b6:dd:08:73:be:2a:a0:72:
                    44:37:7c:79:55:9f:bd:26:91:17:b2:13:2a:15:b0:
                    66:b6:35:06:8d:3b:26:72:0e:9b:09:5d:63:56:1f:
                    5e:00:6f:0c:5d:44:86:67:5d:5c:0e:1f:69:b2:77:
                    85:54:c0:5c:44:a0:15:21:51:27:47:be:32:e4:92:
                    1f:e5:cf:0a:9d:a2:ed:11:7b:0a:94:63:5a:cb:1c:
                    51:9f:da:b0:08:1a:36:f0:d8:21:df:25:aa:83:0d:
                    d0:5f:6b:2c:4c:1d:b2:81:7e:c3:5c:d6:57:57:77:
                    58:40:78:9f:6e:4d:48:78:3a:3e:1c:83:ac:53:7e:
                    b5:5d:4b:14:87:25:ac:4a:ac:a8:40:9f:bd:a0:94:
                    3d:1d:30:4b:0c:6c:c5:8a:e4:f8:ad:18:91:9a:06:
                    f4:51:2f:1b:5a:6e:a1:65:a2:14:3f:a4:cc:a8:bd:
                    2a:8d:82:04:1e:bd:65:f5:4c:32:74:5c:e0:93:67:
                    b5:d4:b8:b0:fa:cf:98:d3:d3:5b:70:01:fc:62:f0:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E1:15:C3:86:D1:70:84:A8:F9:85:B2:4D:FE:41:5D:46:B9:E0:AC
            X509v3 Authority Key Identifier:
                keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:70:dc:6e:d9:5b:28:88:69:ea:38:10:4b:10:fe:84:18:f5:
         3c:eb:87:a4:41:97:94:62:43:5b:2e:a1:d3:dd:57:e9:42:5e:
         06:d5:0d:6f:07:04:86:ed:fe:d3:3a:df:49:5c:e6:49:37:5d:
         37:70:57:02:69:1f:cb:92:f1:89:90:61:d2:f3:b4:de:5d:9d:
         4f:9a:c0:82:8b:34:06:bb:31:42:42:28:71:31:9b:e0:16:66:
         f0:fc:9d:49:28:38:c3:55:16:5e:c5:d2:19:ac:c1:00:89:70:
         ba:42:bf:7e:17:6d:f0:62:53:4e:d5:ce:7a:54:a4:05:60:2b:
         35:4b:1a:f1:03:69:74:bb:01:00:b7:52:ba:27:21:03:6b:7a:
         71:3e:e9:32:3b:5c:c9:ea:bd:37:f9:00:01:9c:35:04:0e:eb:
         08:fe:59:f5:b3:9e:ae:20:9e:d7:17:9f:73:d8:0b:c1:a7:3b:
         15:61:17:50:3b:2a:8a:7b:c4:34:51:4d:9e:dc:33:e9:d2:00:
         a0:58:3f:76:7a:53:44:a3:f2:9f:cc:11:61:0d:76:3d:2e:d9:
         4b:22:44:da:94:70:bd:03:6f:ba:98:c9:d3:92:7d:11:e6:54:
         2d:f0:b4:e2:aa:d1:61:ec:9c:35:43:2f:b6:d3:0b:1c:a5:df:
         24:63:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----