Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
File:                     gHAu016O_uBMqrmZhCa8PUPK6yw.mft (raw, json)
Hash identifier:          3N8MlSIzcluZ0YMPSUxACSb4NbtehZUpaPkhOJHZM8A=
Subject key identifier:   D6:E2:62:19:3A:76:35:F0:5C:C0:8D:13:B5:0E:22:21:00:D6:AF:BA
Authority key identifier: 80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C
Certificate issuer:       /CN=80702ed35e8efee04caab9998426bc3d43caeb2c
Certificate serial:       01962DF3FCFCC9E3E65ED20CC4090A3A034C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft
Manifest number:          0533
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: gHAu016O_uBMqrmZhCa8PUPK6yw.crl (hash: qTsv2VMojKFaw9AOxy/xWPk1R54wluB5JiHA4B3jaG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fc:fc:c9:e3:e6:5e:d2:0c:c4:09:0a:3a:03:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80702ed35e8efee04caab9998426bc3d43caeb2c
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=d6e262193a7635f05cc08d13b50e222100d6afba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:65:c7:19:04:36:cd:70:00:a8:62:84:c8:
                    c0:dc:81:c8:06:8e:fb:4d:3f:76:ce:d8:35:4b:50:
                    f5:92:11:34:b2:08:94:b0:93:2f:5c:0f:c8:ce:47:
                    51:68:b1:fa:09:ef:ff:95:13:1d:72:2e:2a:c6:2d:
                    ec:ec:2e:ee:31:51:78:ca:62:1b:0c:85:8b:69:33:
                    55:7a:87:73:1d:43:34:f8:59:fb:1c:65:d5:91:03:
                    fe:7f:46:32:29:1b:82:8e:d2:36:95:0b:87:3a:02:
                    8f:9a:7d:db:b2:1a:76:7d:ed:c4:ec:3d:77:85:4b:
                    bb:a8:8c:af:db:6f:d6:a3:0a:84:8d:36:4b:4c:c9:
                    5f:8b:a6:af:6d:c5:9e:58:5a:93:cf:0b:20:67:33:
                    0a:8c:68:d5:97:dc:cb:71:03:f5:2f:3a:e2:47:a3:
                    47:f4:57:22:09:f2:b6:5f:89:8a:d8:d0:87:a5:3b:
                    b1:0f:4a:17:cc:1c:64:1d:36:a9:0d:89:b1:2f:25:
                    eb:ea:e9:b8:fe:72:df:0a:66:11:3b:bc:ca:f9:dc:
                    26:eb:32:f7:41:e5:26:cf:91:b6:63:5d:05:80:95:
                    61:b1:b1:ac:8d:f6:1c:85:ab:96:40:12:32:24:4c:
                    c6:72:e5:c4:b5:07:b7:81:64:99:6a:75:49:1c:3f:
                    46:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E2:62:19:3A:76:35:F0:5C:C0:8D:13:B5:0E:22:21:00:D6:AF:BA
            X509v3 Authority Key Identifier:
                keyid:80:70:2E:D3:5E:8E:FE:E0:4C:AA:B9:99:84:26:BC:3D:43:CA:EB:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHAu016O_uBMqrmZhCa8PUPK6yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/65e296-72aa-488a-a433-9aa4d2f9aff1/1/gHAu016O_uBMqrmZhCa8PUPK6yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5e:a9:de:84:d7:89:09:91:c7:88:51:5d:c0:43:8d:fa:46:
         77:0c:36:3e:2f:cf:f6:55:14:83:3d:6b:dc:d8:23:96:07:85:
         0e:47:a9:9d:5d:7c:9b:44:51:47:80:06:ae:d5:02:f7:e3:31:
         72:eb:fd:d0:55:c1:b5:db:a9:eb:62:d5:8f:a9:b7:de:2a:79:
         20:8c:80:df:7c:03:77:03:c7:a1:49:c5:49:bb:d5:d2:b5:19:
         b1:3d:a8:e0:bd:00:aa:fc:72:d6:08:80:6b:93:a5:b8:92:12:
         e8:a2:85:01:c7:36:61:3d:00:31:f6:7f:d6:bf:ec:78:99:d6:
         f4:ef:e1:ec:02:5c:d3:82:46:3d:07:e5:ac:71:5b:22:3e:94:
         72:1a:39:cb:a1:00:72:bd:09:e3:38:c4:4b:54:23:cb:36:98:
         bd:96:d4:e8:61:c2:58:8f:38:38:43:09:e1:f8:72:98:db:05:
         d9:1f:60:87:13:fd:2c:1e:fe:32:f2:76:64:c4:82:3b:f4:41:
         35:f2:eb:c4:f5:db:bc:07:50:04:5e:e6:2a:00:95:12:1e:24:
         8b:1c:85:4b:de:6e:ec:57:50:29:67:bd:dc:c9:29:7d:50:9c:
         b3:23:a7:12:3e:20:3c:a3:d4:3a:d3:fc:28:c4:2d:e1:0f:23:
         40:d7:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----