Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File:                     grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier:          +SnBlXexoqD9c9zqKoTHgk///yIg+ZjIw6/meguZonM=
Subject key identifier:   C1:D1:4F:B7:EC:02:77:39:12:34:79:4C:70:D9:39:86:8A:E7:A6:8A
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer:       /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial:       01962E99830BD67FA1E00681556262439C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number:          0D5D
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: emiYyOO-4ZtoPEzkSnQ09tYgxmo.roa (hash: UDg/XKhAxepRkXvvtQYSYSZ++r+CNfh/uFuRVdS04Vg=)
                          2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: TXMYyDC8sF9fzI0UwkVQJtHVSuw6/xHBJJrgpCZC8hI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:83:0b:d6:7f:a1:e0:06:81:55:62:62:43:9c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=c1d14fb7ec0277391234794c70d939868ae7a68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1a:c5:46:01:0b:59:c6:ed:12:a8:df:e3:bd:
                    eb:75:e3:80:2c:c0:94:0a:bb:ba:11:cf:f8:24:89:
                    ec:cf:21:96:10:64:62:99:05:16:76:42:ac:8b:be:
                    3f:5a:e3:8e:3f:a6:2f:a9:c3:bc:74:8d:40:51:c5:
                    2a:a7:fd:33:64:05:24:bd:a0:8c:31:e3:88:aa:81:
                    63:25:90:b7:b3:b8:30:f7:9a:aa:41:93:d6:30:61:
                    a5:19:b4:39:b3:3d:e8:ca:b7:80:3f:fc:b3:1d:e4:
                    9c:66:bb:32:3c:27:96:46:10:14:df:0f:60:c6:14:
                    c6:48:71:1f:b7:f4:18:29:28:a9:a4:4f:6b:76:b1:
                    e1:fc:51:7b:25:44:96:2b:41:31:96:7b:46:ba:30:
                    7b:c4:47:af:c7:92:55:2c:56:08:87:d8:84:25:42:
                    e3:36:a2:5b:a8:00:66:cf:93:fb:f0:78:81:e4:72:
                    17:8c:cb:41:67:89:e4:64:83:87:03:b0:c8:69:8b:
                    38:46:62:6b:93:52:4c:49:22:ef:6b:cc:9b:61:46:
                    4a:38:08:d1:bc:17:97:d8:4b:4d:3d:60:ab:7d:4a:
                    ad:75:c8:f1:df:b2:f0:1a:4a:57:46:bf:de:89:29:
                    7f:f8:d6:6a:39:0a:0a:68:d4:11:80:af:db:d4:c9:
                    4d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D1:4F:B7:EC:02:77:39:12:34:79:4C:70:D9:39:86:8A:E7:A6:8A
            X509v3 Authority Key Identifier:
                keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a4:41:ba:e2:9b:cc:cc:6f:c7:78:fc:05:fe:61:4d:98:e1:
         30:c8:70:06:e6:cf:7f:d2:68:32:1d:2e:df:bc:d2:ac:27:94:
         33:d9:78:6b:d1:52:4d:f7:59:7c:09:79:cf:d6:c3:3b:d0:c8:
         1e:41:a4:88:0d:b8:c7:7c:b2:8d:8a:cf:75:f0:db:ba:6b:f7:
         c2:6f:ad:4d:f0:23:18:24:d7:bc:62:30:95:86:eb:76:f0:fc:
         2a:7f:fe:ee:a6:1e:79:25:f2:9a:3b:82:dc:be:dc:cc:ea:e5:
         fa:53:24:7b:da:e9:0f:c5:56:28:b0:84:61:65:f9:d7:a8:e4:
         a1:aa:92:ac:7e:bb:f5:55:dc:75:75:1b:a3:7b:b5:1b:99:fa:
         2e:69:92:5d:73:bf:ba:bd:9d:7b:7c:ea:fa:a7:6d:14:17:fd:
         44:83:af:ca:dc:62:8e:32:ca:0c:9e:dc:86:eb:fe:61:fc:d7:
         ce:fc:8d:38:13:17:a1:88:c2:7b:11:aa:8e:91:11:41:ba:07:
         2f:1b:dd:c1:56:a0:75:06:5c:95:5f:f2:62:25:e5:2e:ef:71:
         8a:e7:82:dc:28:c3:6b:c2:66:94:cb:7a:4b:af:fa:e7:37:fb:
         99:07:e6:17:e9:7e:aa:b2:f6:ed:15:a6:33:fc:65:06:a6:52:
         74:5a:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----