Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
File:                     gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft (raw, json)
Hash identifier:          YJ8emWdROgBvL+3tUBm2WFR5r0USHYPnUY8/vnlzpZM=
Subject key identifier:   AF:D8:CE:7D:16:7A:B0:25:47:F9:0B:D4:25:44:D6:AE:1D:3E:D9:44
Authority key identifier: 83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54
Certificate issuer:       /CN=830555f011be5e241eb0b425de5fd86cc6834a54
Certificate serial:       01962DF4361D039E90CD58A742365CE544D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: X8y17pVc211N8MGfVTBzz81iEoA.roa (hash: Hl59xAoHLIR2ve7ZY+IGK+whUrubuEhh7gzRr94EmJM=)
                          2: gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl (hash: mWwdHFuMmExJTK9WQSQMKxM3InFPfH09V8IcZwZ0+z4=)
                          3: xYBkOkdRt8PDKOH8dzQ2NTMqI8M.roa (hash: ITHwZydQPAzKvryYx9N44bQeMeKILW1oaBs72ARfdxs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:36:1d:03:9e:90:cd:58:a7:42:36:5c:e5:44:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830555f011be5e241eb0b425de5fd86cc6834a54
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=afd8ce7d167ab02547f90bd42544d6ae1d3ed944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6a:ea:a6:98:86:a0:5b:6a:29:5a:96:49:d8:
                    46:bd:fb:9c:d7:cc:fa:c1:d9:1d:62:f0:54:00:89:
                    5f:72:3b:48:96:e0:1c:0d:06:1a:36:fe:98:41:94:
                    b7:c3:9b:80:de:b5:37:14:62:40:a5:ee:0c:07:50:
                    78:cb:7d:e3:f1:3b:24:bc:4a:c7:81:1b:3d:6f:20:
                    5f:a4:4f:ef:b0:f7:12:ca:4c:f5:8f:5a:9a:31:eb:
                    8c:7e:c0:47:94:3e:92:c1:10:61:28:77:03:e7:e6:
                    76:3a:f3:ee:86:2f:94:87:13:b5:1d:35:41:fd:3b:
                    91:ad:58:d9:15:3e:c6:ee:39:92:6d:fa:17:b0:a7:
                    4f:dc:02:44:83:7d:86:62:65:51:60:df:b4:5b:35:
                    0e:0c:18:c8:41:42:2e:e0:c3:09:88:fb:10:ef:8b:
                    4a:e4:65:a4:c0:18:39:c5:a9:f1:65:96:bb:c8:40:
                    8e:9b:fe:40:00:5b:6f:1a:83:4c:f3:22:d6:56:d3:
                    a0:ec:1d:76:a9:3c:d9:34:c1:6e:45:90:53:69:fd:
                    4e:56:28:a9:f4:49:3b:d4:b3:f1:2b:b0:93:63:31:
                    fa:47:82:6c:4c:a4:d0:fe:5f:4c:98:c5:fd:48:27:
                    79:2e:db:76:ee:a4:b2:96:b8:81:3d:86:2a:cf:6b:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D8:CE:7D:16:7A:B0:25:47:F9:0B:D4:25:44:D6:AE:1D:3E:D9:44
            X509v3 Authority Key Identifier:
                keyid:83:05:55:F0:11:BE:5E:24:1E:B0:B4:25:DE:5F:D8:6C:C6:83:4A:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwVV8BG-XiQesLQl3l_YbMaDSlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/bf0162-fcba-4085-b4f1-d699ddc9d09c/1/gwVV8BG-XiQesLQl3l_YbMaDSlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:4b:3f:a0:dd:8f:cc:76:0a:50:c2:40:b4:a5:41:3f:96:85:
         84:14:0e:95:83:58:51:df:b3:1f:3a:0e:3f:fd:c2:e9:fa:f2:
         65:4e:97:78:23:74:9f:c1:47:be:0a:0d:3b:6c:48:ba:1b:c3:
         3d:97:f1:1d:a0:70:62:47:34:06:d6:d8:64:03:5b:b7:fd:b2:
         0a:36:7d:7f:ce:ec:3f:8a:0b:01:8d:2f:c1:60:8f:65:c1:1a:
         40:b4:d3:a3:29:d7:13:5b:9d:9b:cf:5a:c5:a9:91:8f:37:02:
         7e:46:66:f9:44:2a:27:dc:8b:b9:f5:b1:c3:39:95:33:8b:04:
         11:eb:db:23:94:d3:7a:fb:4d:60:ac:5d:91:1d:f2:2d:72:35:
         d5:d1:29:1f:8e:02:80:ee:02:e2:55:8b:6e:b3:d7:1f:41:71:
         f9:cb:6d:04:a0:0f:01:f9:f9:e7:b7:da:d7:79:ab:2f:9b:36:
         eb:56:d6:e2:45:c3:50:67:3b:98:dc:09:16:4f:c7:1c:4b:07:
         1d:07:9f:46:db:74:d0:b2:42:a7:28:7a:0f:a8:be:bc:b3:cd:
         6f:7b:e9:c5:fc:37:69:ee:9d:36:5e:a3:12:c6:91:2c:1f:c4:
         df:65:ef:50:0f:b9:b0:7a:85:47:f3:55:5b:5f:72:a6:90:a9:
         13:3d:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----