Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
File:                     gMcurrwgRhwxz5QuThVfB7igPHw.mft (raw, json)
Hash identifier:          fyu36KIp1qNh2sl6zFfJ+7SzjACPQ3injD/dS5/98FE=
Subject key identifier:   9F:93:8E:9B:70:FD:93:71:96:48:23:72:AB:74:DB:9A:35:83:7D:7A
Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C
Certificate issuer:       /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
Certificate serial:       01962FAB8BB8DD5469F11DC86391E7DC50C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: K4wUu7obHZ1pQeOh3vYsQgoummw.roa (hash: jArnZVWT3LFdRd35DdT9LyAFWuY1r/brZRKqPdnSEKo=)
                          2: gKseKjRnR67udMqIQaqApCcgBAY.roa (hash: abyNq8YPIR1WvDGgDgqiWSpvlJw/U2/7rDxHOpNSYwQ=)
                          3: gMcurrwgRhwxz5QuThVfB7igPHw.crl (hash: qgueM+mF1L6nPxjSxty2HI0X5acC8aMumYsQJWRQPV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8b:b8:dd:54:69:f1:1d:c8:63:91:e7:dc:50:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=9f938e9b70fd937196482372ab74db9a35837d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:db:23:61:78:e1:d8:79:a2:51:f7:31:a4:
                    5f:e6:5d:c0:01:f5:5b:d0:e5:a4:4c:8b:8c:83:75:
                    29:01:6a:48:8a:97:bd:60:15:28:9c:f0:cf:d7:af:
                    44:6c:eb:f0:b7:7a:4c:d0:d7:67:d2:87:17:79:7e:
                    cb:d0:7b:02:3f:18:9a:ac:dc:47:03:e0:2e:07:b9:
                    25:5b:be:c7:f9:88:c5:20:9b:af:e4:e1:e4:ab:8b:
                    00:9a:61:e7:23:4f:aa:d7:02:c4:e2:3c:04:8a:d1:
                    1e:cc:c4:9a:01:da:25:dc:a1:db:1c:2c:5e:14:fb:
                    39:29:b6:d4:e4:63:d5:57:c8:05:cb:30:93:3d:5b:
                    ef:18:95:b6:d6:d8:df:4c:bf:f2:fc:59:a6:44:92:
                    34:85:3d:a2:42:99:7c:0a:6f:45:54:46:60:c9:0c:
                    8e:b6:cd:64:57:16:dd:7f:40:94:38:09:3e:5e:ed:
                    aa:93:94:3d:ce:e6:74:88:14:11:dc:3e:53:fe:03:
                    06:b4:b3:6e:b4:01:71:39:0b:55:6b:78:30:43:57:
                    26:ba:4a:37:8f:a7:ce:ac:de:d7:5d:bb:84:de:61:
                    13:a0:a6:cf:2f:da:22:57:76:f8:1c:76:04:cf:c5:
                    ad:96:04:a2:a8:f2:02:23:38:6d:b7:65:9c:78:db:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:93:8E:9B:70:FD:93:71:96:48:23:72:AB:74:DB:9A:35:83:7D:7A
            X509v3 Authority Key Identifier:
                keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f9:92:4f:41:16:b5:51:c7:84:16:3c:ed:4a:c8:47:ad:8f:
         a2:aa:35:df:b5:c4:23:2c:78:5e:55:d6:23:46:0d:18:10:98:
         4c:a7:a0:04:6f:67:74:b1:61:4a:96:78:87:ad:90:e8:2d:a7:
         f4:94:a3:fa:aa:b1:5d:cf:3e:6b:47:45:6b:2f:4f:a4:52:e8:
         aa:5d:b9:bf:00:70:b8:d6:98:d2:5a:3b:a6:db:eb:7c:57:71:
         cc:7b:76:12:6f:37:4a:85:71:83:47:dc:88:96:4b:8e:b7:d8:
         ba:8c:e9:19:8c:33:d4:0a:3d:35:4d:7c:21:59:27:91:55:64:
         de:35:1e:28:9b:60:9c:7a:38:2f:3f:0b:67:73:23:3c:57:dd:
         5e:2f:49:97:ac:95:f0:25:56:e0:ec:d0:56:32:fa:53:5b:c3:
         ef:be:3d:9a:38:91:fb:05:fb:46:c4:da:e7:00:fb:0a:59:59:
         8c:ec:8a:eb:be:39:77:22:d0:4e:00:15:d5:6c:75:df:ea:ee:
         fc:01:a2:a3:32:77:7a:b3:ea:df:09:a9:63:8f:81:52:f8:89:
         7c:6d:04:70:20:fe:92:04:54:f1:6f:89:17:95:f3:8d:12:62:
         b6:fd:3b:83:7a:eb:7c:ef:58:aa:21:ac:3b:8a:09:cf:42:d4:
         3a:77:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----