Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
File:                     g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft (raw, json)
Hash identifier:          Vkpcrfj1NgdjMLGmNFMfxKLS71E4eUz70zIYe7RYf0o=
Subject key identifier:   F9:06:2C:FE:7E:06:F2:80:60:34:D0:EC:81:61:5A:62:AE:50:14:59
Authority key identifier: 83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5
Certificate issuer:       /CN=837a739fd50864ccc246843ed6801959ba1ba6a5
Certificate serial:       01962E98CDAD240AA1E4A4C0D616AD8D76E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft
Manifest number:          0453
Signing time:             Sun 13 Apr 2025 10:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:28 +0000
Files and hashes:         1: g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl (hash: cNAGSsF/uDvx2eKs8vze1whTn8VzhoJ9eQSIiYVV43w=)
                          2: i_7sQOqEUBCfUKXhCQozAQCgyio.roa (hash: xzt+AxE4W+DPtsBUDajL0GS1rN6Mde5JKYoD1qrRxjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:cd:ad:24:0a:a1:e4:a4:c0:d6:16:ad:8d:76:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837a739fd50864ccc246843ed6801959ba1ba6a5
        Validity
            Not Before: Apr 13 10:01:28 2025 GMT
            Not After : Apr 14 10:01:28 2025 GMT
        Subject: CN=f9062cfe7e06f2806034d0ec81615a62ae501459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5b:10:8c:c2:35:3a:b0:8a:2d:80:c9:3f:cd:
                    58:57:68:d5:04:d7:a3:6c:a6:1f:b4:0d:e7:27:41:
                    47:81:e8:6b:a0:51:1c:5a:cd:12:dd:87:f3:86:3e:
                    34:82:89:4a:9a:9c:b5:f2:83:4c:d3:7e:af:e1:bf:
                    0f:e9:81:6c:dd:2d:13:30:91:4a:87:d6:eb:9d:99:
                    cd:d2:2a:5f:31:95:08:a0:4b:29:95:c7:17:43:9c:
                    5c:71:e7:62:a3:3e:80:ed:6c:45:0a:26:cc:ac:9a:
                    7e:9a:b2:06:83:b8:5b:c3:2b:52:db:1a:0d:64:f1:
                    b8:e8:a7:be:f9:65:86:99:55:f9:0f:3a:2a:60:2a:
                    43:bc:66:67:f2:1a:08:06:2d:1b:91:b1:14:57:5b:
                    7e:af:7d:02:4c:35:95:a8:5a:9f:ac:18:b4:0e:27:
                    ac:ba:8d:c1:4d:2d:bd:71:74:d1:15:5b:bc:0a:6b:
                    89:8a:42:ce:d5:e9:63:32:8b:50:92:fa:30:34:a1:
                    ad:f0:bd:9e:2b:ac:5c:76:43:24:1a:61:0b:c9:5c:
                    d8:2f:8f:8c:60:9c:41:fe:57:f7:a3:a7:08:48:2e:
                    49:5e:bf:c1:dd:f9:47:82:00:a1:f7:d7:8e:af:5e:
                    39:2a:5a:54:48:85:cc:25:2c:cd:0f:fd:23:a1:66:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:06:2C:FE:7E:06:F2:80:60:34:D0:EC:81:61:5A:62:AE:50:14:59
            X509v3 Authority Key Identifier:
                keyid:83:7A:73:9F:D5:08:64:CC:C2:46:84:3E:D6:80:19:59:BA:1B:A6:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g3pzn9UIZMzCRoQ-1oAZWbobpqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/11cbb5-3e2e-44d6-9d1b-aae1a0bda02c/1/g3pzn9UIZMzCRoQ-1oAZWbobpqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:80:1e:3e:cc:ce:3a:ea:7e:6b:02:fb:a8:c7:93:f2:50:b5:
         6c:17:f3:bf:94:c2:e8:93:4b:de:c8:5a:fa:e6:4f:8d:b6:9f:
         05:bc:f1:a4:52:e7:a8:ec:3b:49:4f:c4:1a:b5:64:46:f0:d8:
         4a:46:84:8c:70:04:c1:68:2f:d1:e8:7e:9a:8b:aa:2b:8f:24:
         99:84:87:4e:26:a5:b2:e5:96:b3:10:bf:2e:ed:b9:73:f2:c2:
         99:4c:7c:7e:91:13:9d:2e:67:02:86:ca:ac:ea:48:bd:ce:a7:
         6b:2d:cb:a4:71:9e:8f:b9:47:71:46:1e:31:a1:6c:03:3f:0c:
         3b:62:a5:2b:c6:3d:bd:30:ee:fa:7b:7e:de:42:06:6c:c5:4a:
         25:57:3a:33:a3:57:ca:e9:97:17:49:15:14:a4:45:d4:b8:39:
         62:d9:a0:42:b4:1e:4d:c2:f3:a2:3d:d3:ef:60:28:aa:1e:78:
         df:fb:11:35:0b:89:a5:45:8c:36:c8:35:df:da:30:77:b6:6e:
         bf:af:53:c1:8c:7d:f3:9d:44:25:b2:31:19:c4:54:bb:ed:1d:
         c0:92:33:38:5a:de:7e:72:c3:d7:07:9f:ec:ff:59:29:24:b3:
         ba:a1:0d:62:72:49:0b:71:1d:a1:b7:d3:40:b8:7a:72:e8:8c:
         e1:2d:7a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----