Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
File:                     gRncpg1HvWA7jpzF3r2WxcS6FFs.mft (raw, json)
Hash identifier:          ROXfsUa7sQvHh0isEhwTaBckP12qrK6+vk6NVW5WEMQ=
Subject key identifier:   BA:EA:52:D6:95:51:BC:4D:F1:86:F1:95:6A:4D:ED:F5:83:3E:3E:DA
Authority key identifier: 81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B
Certificate issuer:       /CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
Certificate serial:       01962E61767AA03FF5F7FA78C797451E3393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft
Manifest number:          0458
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: cv2xTszOP7j1k8VH8Xq8b77acso.roa (hash: gJcKaSX3/S1aDVSD+NWUNHhQVwYYx7ZgiUJVulKjqVg=)
                          2: gRncpg1HvWA7jpzF3r2WxcS6FFs.crl (hash: CepMt83vO/8avHO9PuP8gOgntsqEYw8/sSFz4reiEW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:76:7a:a0:3f:f5:f7:fa:78:c7:97:45:1e:33:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8119dca60d47bd603b8e9cc5debd96c5c4ba145b
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=baea52d69551bc4df186f1956a4dedf5833e3eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0a:a5:94:ba:b3:91:d2:9f:de:ce:ce:7c:aa:
                    d9:1c:c5:31:4b:65:7b:e6:56:6a:43:3c:72:17:ab:
                    1f:62:71:51:13:fd:a2:79:4c:5d:08:33:c7:5e:64:
                    b6:98:28:75:f3:43:12:94:0f:a0:d2:f6:e3:88:10:
                    2d:fb:d2:6d:61:0d:da:14:e4:ba:46:4a:33:55:c6:
                    0e:75:1f:8b:30:15:16:42:cc:5b:02:26:ed:ee:84:
                    0a:9e:8d:90:24:06:7a:f6:de:1b:b0:e7:8d:34:62:
                    a0:ad:f8:ba:77:80:20:c4:aa:eb:3c:4d:9e:24:f5:
                    a1:3e:b9:bf:f4:a9:fc:fe:ff:8b:d5:3c:c7:90:2c:
                    dd:64:e1:e4:1a:46:73:f1:c2:8c:d4:bd:39:d1:72:
                    e8:92:50:1a:ce:31:3c:2a:03:7b:3b:b5:23:dd:89:
                    f5:4d:50:c5:cc:f3:cb:98:a6:df:42:de:e4:f9:f5:
                    00:d0:f1:1e:4f:8d:d1:a6:f2:56:3e:c2:e5:60:96:
                    12:81:4a:b3:98:dd:4d:ba:73:af:12:4e:2e:e7:96:
                    b8:ea:9a:9b:72:51:12:61:fb:93:b6:b1:52:ab:5f:
                    b8:25:8d:74:49:7c:b7:c4:1d:94:0a:b8:5c:4e:2e:
                    53:f3:b9:27:0a:ed:37:ff:2e:39:d8:82:4e:b9:cd:
                    f1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EA:52:D6:95:51:BC:4D:F1:86:F1:95:6A:4D:ED:F5:83:3E:3E:DA
            X509v3 Authority Key Identifier:
                keyid:81:19:DC:A6:0D:47:BD:60:3B:8E:9C:C5:DE:BD:96:C5:C4:BA:14:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRncpg1HvWA7jpzF3r2WxcS6FFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/255ec8-f1e3-4a8f-af30-7e39d963a537/1/gRncpg1HvWA7jpzF3r2WxcS6FFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:54:d7:ae:1e:40:e5:59:96:86:8e:08:f5:3c:43:00:47:45:
         71:3f:14:0e:a8:58:fa:95:3b:77:83:72:7f:07:0d:d8:2f:e2:
         39:5e:cb:6b:fe:f0:d3:6a:5f:ea:10:8f:a1:d8:83:1d:5f:d9:
         d5:a0:d1:8e:57:19:d5:ef:a0:50:5b:18:ab:43:5a:ad:f2:69:
         4b:41:50:fd:dc:ab:0d:8d:6a:7a:08:d3:07:65:84:bf:69:d5:
         6a:14:74:2f:78:3c:b1:52:55:bd:e6:e2:7a:08:30:c4:d7:08:
         49:1b:4e:68:37:ab:1f:b4:80:3b:75:b0:bc:31:a9:c6:78:1b:
         99:b1:87:70:40:10:03:85:1f:a1:6e:47:7f:03:80:93:55:dc:
         09:ff:22:99:b8:c4:89:ca:0a:b9:ab:37:2d:90:c1:bc:00:c3:
         58:87:3d:50:10:02:1a:54:01:2a:d4:7d:7c:49:b5:1d:fc:99:
         31:9a:0d:72:10:25:dc:ad:d2:9e:1e:05:15:b1:00:b4:b1:1c:
         d4:7a:94:ed:79:09:2b:80:56:44:72:cc:ef:0c:15:c7:ee:f2:
         10:62:64:24:3f:de:2f:97:cb:a7:0e:07:d1:3c:07:dc:b2:22:
         4c:ee:cd:5f:6a:5b:22:db:2f:56:bf:79:a9:a2:0a:5f:09:54:
         40:27:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----