Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
File:                     gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft (raw, json)
Hash identifier:          xMuIqYUIp7b4KMT9QTWNZdUsX6ju4nZaitNljbItIDc=
Subject key identifier:   CB:3E:BC:E1:21:40:34:CA:9E:36:CA:C2:79:73:01:C4:1F:E3:F9:CC
Authority key identifier: 80:A9:21:40:84:33:B6:6E:A5:0A:40:00:AA:CE:10:D2:AD:D0:6A:85
Certificate issuer:       /CN=80a921408433b66ea50a4000aace10d2add06a85
Certificate serial:       01962F06605C18135E34B2AAD05785B2043F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft
Manifest number:          0342
Signing time:             Sun 13 Apr 2025 12:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:09 +0000
Files and hashes:         1: gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl (hash: 5jxmlzR5rwYcjENU5X+B5vdhWzO2GORX6OCZaoO38kU=)
                          2: knOts_9A8gA0IVqYk7a99kaTuRI.roa (hash: kCE50cAQS4imaI4wXAlSfVZnkYJchZQUkd+tGc4tAWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:60:5c:18:13:5e:34:b2:aa:d0:57:85:b2:04:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a921408433b66ea50a4000aace10d2add06a85
        Validity
            Not Before: Apr 13 12:01:09 2025 GMT
            Not After : Apr 14 12:01:09 2025 GMT
        Subject: CN=cb3ebce1214034ca9e36cac2797301c41fe3f9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:cf:0c:fa:af:84:af:fe:90:45:09:3f:01:
                    6a:50:65:bc:f6:df:87:fc:89:d0:a9:ef:ad:35:6f:
                    56:9c:29:7f:18:a2:02:e5:c2:95:7f:68:20:b9:1b:
                    76:ed:e0:8d:b2:6c:f4:5b:53:16:c8:42:7a:77:af:
                    b4:9c:62:0a:42:62:ce:f8:c5:77:8b:1c:c7:8f:6f:
                    28:2d:dc:d9:d2:e9:8a:b6:bb:7e:a6:cd:5c:68:6d:
                    36:9f:3a:58:79:7d:cd:4e:12:69:a7:1c:1b:a7:c9:
                    d0:a4:f4:95:81:68:8b:10:56:44:07:2a:25:5c:54:
                    fc:5e:d6:ce:c1:b2:a1:15:9f:f2:23:54:f7:54:6a:
                    89:9e:f8:de:87:2a:aa:6c:b4:4c:e3:51:d5:b3:11:
                    20:74:42:ce:c4:ec:a4:df:1b:b9:3d:15:eb:92:18:
                    03:10:db:a7:62:ea:81:e0:d6:24:85:dc:e0:af:db:
                    50:f5:d6:05:e7:d4:4a:b2:7a:51:07:cd:75:87:bb:
                    7e:e7:d3:1f:58:54:5c:e4:31:4b:a4:52:9f:f2:86:
                    c5:aa:24:83:c2:b7:6f:89:09:5e:ce:0e:9e:8f:60:
                    90:30:2b:33:e0:ca:81:ba:20:81:c9:f7:4e:93:9d:
                    3c:6d:3d:8b:f5:e8:c7:c2:cb:55:e1:d2:d5:c9:14:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3E:BC:E1:21:40:34:CA:9E:36:CA:C2:79:73:01:C4:1F:E3:F9:CC
            X509v3 Authority Key Identifier:
                keyid:80:A9:21:40:84:33:B6:6E:A5:0A:40:00:AA:CE:10:D2:AD:D0:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKkhQIQztm6lCkAAqs4Q0q3QaoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d809b1-faf7-40c2-94ba-f1815a41a033/1/gKkhQIQztm6lCkAAqs4Q0q3QaoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6c:26:58:7e:fd:23:2a:bb:ce:bc:e6:6d:15:4a:01:28:d5:
         44:60:62:20:0d:f7:f2:30:f7:2c:6b:4a:75:7e:a6:fc:b5:c6:
         bd:bd:7c:27:2c:b6:a8:6b:d6:19:ea:ab:5f:02:f4:37:07:73:
         b0:e5:70:7a:d4:90:5d:e3:35:2e:36:ac:51:80:32:32:28:a2:
         d6:01:e7:2d:84:54:a1:8b:80:7e:66:3f:fb:76:c3:d3:78:9e:
         93:50:8d:4d:95:c1:81:45:fb:1c:38:76:28:f3:a3:40:04:28:
         30:ee:ee:07:a8:12:1f:53:de:62:a5:e7:29:2e:14:79:5a:c7:
         70:de:6b:19:63:44:6c:3a:1f:56:e5:5b:ee:32:99:55:50:3c:
         15:6c:bb:f8:ce:a8:1b:e0:34:01:09:67:06:92:9c:ad:99:76:
         cc:89:d4:88:28:77:19:f5:e3:1d:26:2c:0a:15:8f:ba:01:f8:
         19:0e:49:1d:a6:80:cd:fe:42:fe:8d:3f:85:b7:07:86:34:56:
         61:08:e2:7f:15:c8:52:18:79:ff:26:5c:3b:98:89:7b:ae:87:
         66:81:2d:50:1a:ea:f2:7d:91:58:9a:80:60:4a:0f:9d:d4:f1:
         87:33:70:de:e5:88:89:1c:b4:72:a6:a2:fa:89:f3:ff:ee:84:
         89:f5:6f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----