Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
File:                     GhGmY2-M4s71g2xENWXF_jri8gg.mft (raw, json)
Hash identifier:          Cm8O7RJkrToYU/sNU7cTSmc+yLBaCySRfOvSHpAlLig=
Subject key identifier:   3E:5B:8C:F4:77:2D:A8:4E:81:47:49:EB:60:94:37:64:E0:98:91:7B
Authority key identifier: 1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08
Certificate issuer:       /CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
Certificate serial:       01962FAB50C91AD9D877E8BB1CCF135701BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: GhGmY2-M4s71g2xENWXF_jri8gg.crl (hash: yuxFb7gsD6bYhE6tu+hXWEW7gX6Ub/goU+LPHHrSwuQ=)
                          2: hI5edSKk9SDqGgkmF4OcRVaTqCk.roa (hash: l/blfIEQUSaiKWBLl4Zw+Q08icOowG6w3h/+ddEop3w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:50:c9:1a:d9:d8:77:e8:bb:1c:cf:13:57:01:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a11a6636f8ce2cef5836c443565c5fe3ae2f208
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=3e5b8cf4772da84e814749eb60943764e098917b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:10:09:39:66:bd:3a:bc:4c:6e:42:9f:1b:
                    64:86:cd:9c:ce:8e:77:7c:af:a0:81:e8:16:43:a5:
                    16:d7:7b:69:e4:a7:08:f4:58:f7:80:51:1b:8b:f6:
                    8b:ac:cd:42:7a:b6:27:ff:db:ce:31:77:c8:1e:1b:
                    84:77:7b:c9:f2:ff:22:a0:56:7f:7b:a4:eb:69:ed:
                    52:40:9a:cf:34:69:29:8c:71:41:6f:48:3a:a4:66:
                    ef:dc:81:f8:f4:bc:d6:a0:e1:61:d2:6f:b2:5b:1f:
                    c1:e3:ea:b0:a4:44:31:d4:9c:2b:67:8d:78:bf:0f:
                    cc:79:03:57:39:54:bf:66:21:d6:06:c8:0a:33:c3:
                    36:92:f3:82:87:38:b3:73:75:fe:29:f0:f0:78:48:
                    91:11:92:0d:c5:69:5d:e0:8d:3b:21:7e:ce:cd:c9:
                    aa:cb:5e:af:34:1e:3b:75:96:33:bb:ac:bf:6a:f6:
                    be:a5:c1:41:55:8c:d1:0f:37:fc:2d:b6:9c:ab:6d:
                    4c:41:15:43:17:29:3e:e4:03:d7:b1:aa:9d:8d:f2:
                    cf:f9:72:74:1a:17:c1:83:28:93:14:ea:b6:37:9a:
                    8d:ac:17:8f:c6:c0:04:0e:25:e2:20:1b:c7:ad:1c:
                    de:b5:61:77:84:6e:ed:56:1b:fe:31:5b:6c:ab:ed:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5B:8C:F4:77:2D:A8:4E:81:47:49:EB:60:94:37:64:E0:98:91:7B
            X509v3 Authority Key Identifier:
                keyid:1A:11:A6:63:6F:8C:E2:CE:F5:83:6C:44:35:65:C5:FE:3A:E2:F2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhGmY2-M4s71g2xENWXF_jri8gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f8f9c8-0deb-40de-8946-291e4bd70309/1/GhGmY2-M4s71g2xENWXF_jri8gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:1c:9a:d2:02:5a:ea:ee:10:98:11:a4:a9:2c:86:06:11:
         a6:16:dd:49:78:82:74:79:ec:09:77:2c:a5:a6:97:f9:9a:d1:
         85:37:c7:55:ef:b7:a4:b1:03:cc:ca:33:e1:ae:19:46:10:50:
         df:62:81:1f:03:82:69:64:e6:7d:3c:36:7b:75:a3:4c:df:96:
         9a:0b:f8:4a:2a:c9:a8:46:1f:b4:2e:4e:8e:bb:e7:0f:25:8e:
         1c:d5:64:f8:cd:33:35:37:4c:42:79:4d:14:88:9a:9b:5b:51:
         7d:bb:0f:ef:07:de:90:f0:c2:02:5c:bc:5e:a3:39:41:e2:12:
         fd:98:03:98:17:02:e8:c4:b7:24:b0:a9:39:29:eb:ee:de:6d:
         9a:38:62:5d:db:76:6c:56:9b:c7:50:d1:b2:f9:2a:73:13:48:
         a8:30:a2:71:de:b5:03:bd:57:af:4c:47:14:cd:16:a8:26:59:
         de:74:6b:a1:da:27:7d:28:e9:8a:2e:a2:e8:e7:d9:de:7c:4a:
         72:f1:19:60:fd:ad:6f:29:96:89:82:e3:50:b0:a2:b9:5c:5c:
         fe:d6:59:4b:83:4f:e8:40:41:7f:3d:49:b0:67:2f:b8:07:3d:
         1a:0f:85:d5:5a:11:19:e5:e2:35:fc:cd:6f:e4:1f:e5:37:e7:
         ba:46:58:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----