Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
File:                     gci3Ore963b_SLLKCZYW7b5xxCY.mft (raw, json)
Hash identifier:          VYA+nNsEhBbeBockQ+mi93xY71cYmvk/qbMQcK09KaI=
Subject key identifier:   56:8B:F7:92:9F:C1:0C:FE:5D:38:0D:C1:DB:3F:9E:9D:6F:0B:A9:42
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Certificate issuer:       /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial:       01962FAB7D03E9976109CBAAA8B0B9AC16DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
Manifest number:          144C
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: 1-VPDuonC2Hi8dBlT4tvnOiHdYOg.roa (hash: WJKUvuV0JjUpEwzD0WN1y14bM/NihUUNvR+FCbd/Y2g=)
                          2: 5_qbUTNJTKmDx-VPoCyg5GiF_44.roa (hash: upLH1FeLhYFLc3B1AG7zDO/VAd2waobao5HIF19Yrvo=)
                          3: 72hcj4wbVqPsCBOmP2-2q0gKVwk.roa (hash: JVI3uRWBk247N9J10ej5wPC2kk3iQ5bErEc04hMDgSI=)
                          4: InIRujvheMSnuntsvHJjTs5su2U.roa (hash: IqMDfUGWehH9FGcRRehcGH1gUKY9FO7UHo3vHht1RFY=)
                          5: YYbT8lbyVWv6yQ3daL3nywYGpE0.roa (hash: H/Qcg0aplqNTHmTWbVVGR+IQ4V4ag89xamHIQ20iGuk=)
                          6: dQWEtMXACcbFK-O5sfKYo_f8Y4o.roa (hash: vHyoYTb8eVOfU/syk4YrhtN9pnkC2H/rIICxrgnsNBI=)
                          7: gci3Ore963b_SLLKCZYW7b5xxCY.crl (hash: n8/XlpYlQrieSJkmdj5WzI1djUrPu7eqyb+sNd++Qy0=)
                          8: gio6F55GO42GZsRq8FQUo7P8nrk.roa (hash: 80TfPfy6fsm8Hf2Ac1l9Gq3x9An3ECfANZIa/nM0IVY=)
                          9: hPi3Yz-IQfnghVcK_tG22EcMbZk.roa (hash: eBUVvaZgDfjhvtgjU9lOaAKzUUmY7IXYS3AoPIKzIbQ=)
                          10: ipyYMMpWH0Tjg9MMcWcxDVXBhDI.roa (hash: jwUnq34H3x2DDYiun7O3jFMVM618SNic53iAmXCX+Z4=)
                          11: lWJoF_swBr2Lu5mO-Q5os-z2oAU.roa (hash: GwiPt4R6jhk5qWspCacWYlKa/6jGmdnZmiVjiKnYhHQ=)
                          12: pocLo2IUa96EYAO9rbTb3m68VAo.roa (hash: Z7HB26uR5mWKPIqwiHiyjqm7+3tugkPZzITbgrY+cl4=)
                          13: sL_8jT6F9be0gHpzuWYJ5NRFk7Y.roa (hash: tTSTzWjgCJKHY0qcH5mPggHS+UBYeFmuuzH6UrgFPas=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7d:03:e9:97:61:09:cb:aa:a8:b0:b9:ac:16:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=568bf7929fc10cfe5d380dc1db3f9e9d6f0ba942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ff:fc:fc:2b:62:1f:d7:fa:22:aa:72:5c:fd:
                    c7:42:c7:d2:76:48:79:ca:ca:87:ca:61:03:e6:cf:
                    57:02:7a:3c:02:85:10:64:d5:40:f7:99:54:6e:58:
                    d8:38:b5:7f:4e:e0:83:52:cb:f7:19:60:54:a0:66:
                    c5:77:f1:f4:17:31:cb:89:41:e0:79:1f:df:ba:6b:
                    bc:55:9f:0d:47:29:1d:19:9f:a0:11:13:79:51:67:
                    2e:15:55:ea:4d:11:ed:d7:14:26:fe:44:3c:b4:1a:
                    70:a6:ea:01:50:74:c0:a5:5c:43:11:52:69:79:a5:
                    85:49:ed:e5:ea:92:1e:48:38:ec:5a:7b:7a:95:00:
                    ff:6c:d1:d3:b3:0c:e2:54:d8:21:9f:ce:25:6d:2e:
                    a0:07:9b:0b:a7:59:a6:37:52:42:2d:72:6a:51:4f:
                    14:82:f8:08:b8:d7:95:1f:de:67:4e:1c:c3:e2:44:
                    d4:5f:69:33:2c:4d:ef:df:5a:66:d0:5d:e9:1e:08:
                    bb:c4:10:ce:bf:b1:cd:26:63:40:58:25:ed:8a:f1:
                    63:b9:c3:7e:d7:55:f4:82:e2:07:9c:fd:3f:e4:96:
                    50:e0:78:43:ab:31:61:44:cc:92:2a:dd:b7:7d:aa:
                    97:03:c2:07:f4:a3:c7:6b:9e:45:a5:29:5d:df:05:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8B:F7:92:9F:C1:0C:FE:5D:38:0D:C1:DB:3F:9E:9D:6F:0B:A9:42
            X509v3 Authority Key Identifier:
                keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e1:23:3a:da:d1:8c:7b:f0:92:58:7a:67:b2:f3:f4:d1:98:
         ec:20:97:ac:b5:0e:7d:00:0a:36:82:c3:fb:b0:22:ec:6a:b3:
         ab:85:b4:b9:7d:37:5d:38:b9:e2:26:ab:77:3e:80:1d:52:5e:
         94:6b:05:4f:f5:07:18:31:c9:61:90:63:56:33:79:b6:f2:28:
         88:7f:14:40:4d:d4:cb:31:2a:02:59:0e:f9:2d:4b:01:32:2b:
         15:e5:15:ba:b7:df:dd:47:08:12:81:5a:fa:4b:1b:08:0f:d1:
         72:f6:29:10:90:73:08:7f:b5:6c:56:aa:54:e4:f7:7a:c0:b5:
         4f:10:42:db:80:ae:67:12:d1:48:42:b3:e7:75:ae:a4:d3:a6:
         c4:64:59:8a:a5:56:6f:f6:15:d8:96:43:3a:0b:c0:8e:ae:97:
         60:36:11:22:e8:02:1b:09:6a:d5:54:cf:9c:2a:fb:41:7d:5e:
         53:1e:10:80:79:9b:64:37:e1:bb:13:9a:7e:a7:23:ab:b8:0b:
         0c:d1:df:83:00:9f:16:05:08:3a:be:87:09:16:36:e4:39:24:
         3d:89:21:4b:34:d5:1b:38:dc:9c:ff:dc:08:35:05:71:dd:0e:
         39:6f:d4:2c:33:30:55:eb:82:57:05:0f:1b:8e:21:17:99:3e:
         90:67:03:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----