Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
File:                     gKn_9jo0d5V_91zNwAPatoz50VU.mft (raw, json)
Hash identifier:          kAj+rUjnoa7GwQpjPKNAMJUzcZQyA5xzAhf6W5A22qk=
Subject key identifier:   38:B7:F2:E5:BB:C3:59:D8:E8:EB:A8:62:E6:E5:2A:5D:1D:00:9A:9B
Authority key identifier: 80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55
Certificate issuer:       /CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
Certificate serial:       01962F7482931CDF675C21E3F4DB31B6E098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft
Manifest number:          151A
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: QFczUkAgEuyKmzEnbolrTA6X2HY.roa (hash: 9oqBYWgD2K4y/lveKI1WmKGPvOv0tK+0eRuH2GWZVYI=)
                          2: bg83CsbAQiTyxHzKc0CBT2sNe1Q.roa (hash: IypY4fWGLD2Ctp5fhCv/SvpdxWW6HbfvIyIXTNzNYXY=)
                          3: gKn_9jo0d5V_91zNwAPatoz50VU.crl (hash: dDZlH0EIXX/OXwwdFgCqn0Ie73YRtwXw25kwN2NrIQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:82:93:1c:df:67:5c:21:e3:f4:db:31:b6:e0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a9fff63a3477957ff75ccdc003dab68cf9d155
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=38b7f2e5bbc359d8e8eba862e6e52a5d1d009a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:7f:d3:a2:4a:2a:fe:6a:94:32:01:16:04:
                    39:f6:f9:22:c3:32:0c:61:36:31:f1:95:a5:03:55:
                    d7:0e:26:d0:00:5d:9d:40:de:e4:25:17:06:ad:9c:
                    2a:04:32:2c:e7:de:be:c2:50:c9:07:ad:fd:51:3f:
                    58:b1:db:14:63:30:ef:ca:71:7a:6c:c9:e7:a7:d8:
                    00:cc:7d:03:45:37:61:b7:d7:3c:25:3a:af:41:b8:
                    a9:d2:ce:7c:0e:84:39:45:33:ec:a1:92:35:0b:ed:
                    b2:ad:f7:7f:2c:38:15:06:94:c3:c1:77:b4:21:d6:
                    fa:14:07:92:fb:09:ac:4e:5d:c4:5a:87:61:43:ed:
                    38:73:b4:8e:21:ea:85:9e:20:e1:1e:6b:75:f4:88:
                    45:a9:9d:82:42:13:3f:b1:35:e2:6a:ff:63:7d:c2:
                    53:29:30:d8:63:61:d8:3a:f9:74:b7:d3:85:63:d0:
                    e9:e7:a4:99:23:70:14:cf:a8:c7:44:c8:07:99:72:
                    d9:36:f8:a3:ea:6c:a0:73:1a:07:13:32:7a:79:93:
                    f2:fd:b5:8f:2a:dd:59:a6:a1:ad:19:47:a9:cb:f4:
                    9e:c7:06:ca:95:a6:a5:a9:30:4f:2f:bf:af:b7:4a:
                    dc:43:d4:49:b1:bb:da:d1:00:1d:a4:96:39:dc:6b:
                    1a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B7:F2:E5:BB:C3:59:D8:E8:EB:A8:62:E6:E5:2A:5D:1D:00:9A:9B
            X509v3 Authority Key Identifier:
                keyid:80:A9:FF:F6:3A:34:77:95:7F:F7:5C:CD:C0:03:DA:B6:8C:F9:D1:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKn_9jo0d5V_91zNwAPatoz50VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b084bf-a454-43cf-ac92-47d98e58545a/1/gKn_9jo0d5V_91zNwAPatoz50VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8a:e3:b2:4c:dc:39:1d:0d:7e:f5:23:92:17:ec:e0:2d:49:
         d9:4d:82:a4:28:b8:fe:6e:4a:53:38:04:03:ca:e5:59:30:b6:
         bf:28:2d:a2:23:92:6f:9a:37:96:17:c7:fe:3d:69:d8:63:29:
         95:87:a2:0d:99:1d:18:e2:63:d2:51:02:d2:f9:fa:d7:a0:97:
         18:2c:bc:32:be:d5:94:36:c7:a1:89:60:4c:14:ec:9e:3d:b7:
         88:19:15:1e:1d:86:a6:84:4a:b1:44:2e:54:09:60:86:1b:bf:
         cb:08:b9:cd:47:a3:a8:f2:f3:fd:c3:73:53:de:91:3f:43:d1:
         3d:6c:75:6e:9d:5d:3e:5e:9e:73:a4:1d:40:39:ee:13:e5:58:
         98:a4:a8:e6:2b:12:a1:52:cc:09:17:bc:df:35:8c:44:54:14:
         81:4a:81:ac:73:fb:b1:a4:54:1b:e7:b6:fe:26:0d:f6:99:28:
         81:8d:8b:e1:b8:ad:c3:ee:b3:24:c5:2a:ce:01:36:eb:f6:5e:
         24:25:dc:27:5f:53:e4:e2:eb:c3:ee:ed:79:dc:e4:73:7d:8b:
         86:1b:0b:b6:bf:e6:37:b1:e3:01:71:3a:02:a6:98:a2:ec:27:
         ca:79:67:29:86:86:71:bc:84:61:53:dc:af:8f:04:64:8b:26:
         58:1b:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----