Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
File:                     gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft (raw, json)
Hash identifier:          mNnKNdIehPySoj1XmJAQkP6ejnBKTDSoFb/0a3YjhR8=
Subject key identifier:   EC:F1:BA:03:20:84:95:E5:8C:FC:8B:A2:3A:64:21:36:D6:C1:F4:72
Authority key identifier: 83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55
Certificate issuer:       /CN=8300996c08890bd5e1e6dd0528217d28f9d09355
Certificate serial:       01962E2B2028B464424734295CD2C75B4C59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl (hash: Vc7a6Y8vMwKwRKXY9FEVgqP1Iif7wow6m0kOqxYSQZc=)
                          2: rqs2jYsXIEmeZSer38OOcJGK7EU.roa (hash: m+TNUwZvlDUtkC5/TwdymkZwjEw131NWG7VhMWfXmRQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:20:28:b4:64:42:47:34:29:5c:d2:c7:5b:4c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8300996c08890bd5e1e6dd0528217d28f9d09355
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=ecf1ba03208495e58cfc8ba23a642136d6c1f472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:8b:f3:22:8c:77:1c:a8:90:a3:e6:87:7e:
                    2d:d4:db:95:d7:fb:58:38:91:b5:4a:ed:03:66:e9:
                    c4:c1:5b:66:a5:0a:26:7d:0b:c4:9a:03:6e:8d:62:
                    7d:0e:74:87:55:4d:73:63:10:55:eb:96:3a:f3:b2:
                    dd:ab:5a:68:02:bf:53:8e:8d:6a:fc:f7:cc:44:c6:
                    89:22:92:e7:c2:ec:39:6d:32:40:01:36:90:4f:15:
                    c8:24:da:37:8e:30:36:b8:50:db:ca:50:42:5f:34:
                    2e:3d:2d:e6:0b:d8:cd:52:4a:e6:bf:8e:3a:40:44:
                    37:5f:49:4c:af:61:50:6e:b6:6a:f0:6d:ed:11:37:
                    7f:99:9d:79:bb:41:4a:96:bd:32:0b:c0:3a:a3:d4:
                    40:06:7e:39:5c:1a:92:c2:df:22:25:bd:62:d8:4a:
                    97:56:81:e4:9c:b1:57:50:77:50:dc:c3:a3:dd:6a:
                    a8:99:60:c0:28:e6:0d:0b:e2:3d:df:3e:e6:9a:39:
                    73:9d:63:0c:99:9c:88:34:8e:57:7e:67:c7:e9:e1:
                    65:c2:27:f7:c8:76:66:3e:c5:fd:96:84:b9:1f:43:
                    04:df:33:ea:eb:cd:74:6e:28:8b:2a:9f:cf:6d:fc:
                    6c:fc:f5:11:5d:ad:fb:8a:d9:99:bd:66:70:8c:25:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F1:BA:03:20:84:95:E5:8C:FC:8B:A2:3A:64:21:36:D6:C1:F4:72
            X509v3 Authority Key Identifier:
                keyid:83:00:99:6C:08:89:0B:D5:E1:E6:DD:05:28:21:7D:28:F9:D0:93:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c01306-66f5-4209-8c88-2db691b1d4ab/1/gwCZbAiJC9Xh5t0FKCF9KPnQk1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e2:c1:f2:96:61:73:52:be:83:da:c5:80:93:01:2b:f7:be:
         18:9d:ad:3c:02:28:35:1d:19:7b:bb:48:18:e4:d4:75:ab:a2:
         10:99:0b:98:87:71:93:11:93:10:13:9a:5f:c9:4a:32:64:49:
         d6:ee:20:8b:27:cb:bf:ba:b6:ee:0c:ef:7a:1a:0d:72:8d:23:
         53:c0:79:d8:47:c6:ec:a0:13:99:d9:b9:71:12:72:7d:a1:60:
         56:7a:91:27:32:0e:c0:56:aa:0f:ce:4d:ff:2e:dd:01:62:38:
         26:de:d0:4e:a3:92:9f:2f:ea:ec:30:23:34:5c:43:41:8f:4e:
         82:43:ac:59:44:1c:3e:8b:28:30:1a:7b:2e:a5:8a:15:7f:3e:
         26:f8:9d:02:f6:00:22:36:e0:6d:e8:5d:a8:03:8e:53:61:68:
         9c:3a:fa:e3:7b:cd:62:2d:92:de:ea:96:13:66:46:0d:16:16:
         49:c7:66:ff:32:2d:4a:6b:4a:d5:8c:92:f9:bd:cd:23:19:56:
         1b:03:23:b2:44:84:6d:22:dc:52:33:74:c4:c1:df:2b:e7:c2:
         e6:13:bd:24:b0:89:e7:0b:68:11:e7:05:07:01:dd:d5:70:31:
         34:6c:fd:9c:bf:94:40:4c:71:79:68:4e:f9:f8:2d:9b:96:ab:
         cc:bc:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----