Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
File:                     g37WYCvCfxlqSe5LMGoPpt7p0p0.mft (raw, json)
Hash identifier:          L//yeqyDDC9J5PzovkhEydAcp80l7sQjwTNf/vyqaQw=
Subject key identifier:   C1:25:9F:3B:D5:72:89:CD:C5:39:E3:39:D5:4B:6D:23:84:2A:BA:E8
Authority key identifier: 83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D
Certificate issuer:       /CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
Certificate serial:       01962E995168E3DF365BCC0DFA5E5FF635A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft
Manifest number:          065C
Signing time:             Sun 13 Apr 2025 10:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:01 +0000
Files and hashes:         1: En8-GoJ8b8wzWMOZSSvYdOC_d0Q.roa (hash: PL43OakReMXHfp4mMkhTD4X7qZfQiScwqWGHnEOSCsQ=)
                          2: g37WYCvCfxlqSe5LMGoPpt7p0p0.crl (hash: pIeemUxa/KDPs5QTAJzckspYrJDoIg2VSVmDodu8as0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:51:68:e3:df:36:5b:cc:0d:fa:5e:5f:f6:35:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=837ed6602bc27f196a49ee4b306a0fa6dee9d29d
        Validity
            Not Before: Apr 13 10:02:01 2025 GMT
            Not After : Apr 14 10:02:01 2025 GMT
        Subject: CN=c1259f3bd57289cdc539e339d54b6d23842abae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:d2:89:00:8d:42:67:ae:9d:07:03:10:3c:
                    4b:b8:4f:f8:4c:4e:2f:db:c3:25:08:43:5f:18:cf:
                    02:87:9a:21:99:57:75:64:85:65:d0:23:58:0d:f1:
                    3e:60:e5:ff:1d:a0:f5:f0:e4:1d:c7:23:b9:81:66:
                    52:df:f6:9b:a7:3a:72:f2:f4:3f:b5:29:df:07:5f:
                    cf:41:13:1c:87:27:e2:6f:12:b0:e1:41:c4:1a:8b:
                    ca:18:cc:b0:72:4d:d4:35:02:72:b4:64:27:7c:23:
                    34:ee:76:0c:bd:58:85:9d:f4:10:9b:26:9e:b6:08:
                    c7:7d:13:42:a4:e0:b8:86:97:7f:b3:5c:05:6a:9e:
                    2f:34:43:d9:d9:58:08:8c:5f:e8:3d:03:77:be:16:
                    66:13:e6:c5:1d:62:24:56:ca:52:8e:ad:7e:3d:56:
                    71:6a:7f:24:8b:57:46:9a:e5:ba:47:df:32:d5:f5:
                    b2:81:70:3b:d7:96:51:f0:fb:ac:e8:0d:77:ba:5d:
                    2a:cc:4e:b2:ae:57:2c:ab:73:ed:8c:8a:bb:b9:88:
                    02:16:4b:1b:77:f9:60:89:a8:e0:e1:4a:80:e3:39:
                    c2:14:1a:e2:98:4f:47:fc:6c:59:9a:75:64:f8:ce:
                    aa:6c:d3:88:93:dd:c0:7a:84:f0:0e:cf:f0:58:53:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:25:9F:3B:D5:72:89:CD:C5:39:E3:39:D5:4B:6D:23:84:2A:BA:E8
            X509v3 Authority Key Identifier:
                keyid:83:7E:D6:60:2B:C2:7F:19:6A:49:EE:4B:30:6A:0F:A6:DE:E9:D2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g37WYCvCfxlqSe5LMGoPpt7p0p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/4cfb8c-20f0-47f1-8b86-28e697c715ca/1/g37WYCvCfxlqSe5LMGoPpt7p0p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:60:9a:32:29:43:34:96:11:fa:e8:56:a1:99:4b:ad:59:
         43:58:3c:dc:43:30:44:14:4b:03:1b:27:6e:e0:68:c0:5c:7a:
         61:de:ec:ee:26:d7:5c:06:d2:30:bb:e3:d6:1b:88:bb:8f:69:
         d1:b5:9d:5f:45:92:88:98:97:78:94:1d:0a:79:10:6c:00:f4:
         ea:ec:7f:30:42:bf:6d:d5:a2:6f:a8:d0:5e:96:23:1d:5a:5d:
         01:41:b5:4e:ce:3a:ee:c3:38:aa:ce:9e:89:06:18:b9:b3:78:
         76:23:d0:fb:00:f7:22:e9:c9:5a:90:38:ad:3d:68:28:21:63:
         6c:65:3a:a8:3a:a2:c0:d7:17:a4:ca:52:d7:e6:d4:53:d9:c2:
         98:07:a2:f8:b7:a3:a2:72:0b:6b:f9:b2:39:03:ef:98:f8:a9:
         b9:95:e2:ac:f9:7c:1e:05:ab:b0:93:e3:fc:8d:6b:8e:c5:14:
         34:11:43:51:7f:8d:12:5e:a7:c2:3f:ed:9e:ca:bd:e9:f5:ed:
         10:22:39:bb:0c:09:c1:21:15:70:be:50:93:41:ba:f4:b4:be:
         c4:1c:dc:e4:9c:1e:6e:2a:22:21:6e:9e:93:30:f8:0d:fc:04:
         82:e7:ee:82:c3:dc:e5:b6:ea:4d:aa:96:d2:a4:5c:26:9f:bc:
         c0:64:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----