Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
File:                     gaaIASwSJngYX8634QN_Dh7ReGE.mft (raw, json)
Hash identifier:          3bF/KPyXMj+YFRFvAoFMk1KkmXIrwyoxKguewuvPCRk=
Subject key identifier:   2F:B0:BB:BE:D9:FB:48:32:6E:C7:64:48:98:F4:FA:F9:25:1B:9B:47
Authority key identifier: 81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61
Certificate issuer:       /CN=81a688012c122678185fceb7e1037f0e1ed17861
Certificate serial:       01962E61E2AA83C140849C86F045A4473641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: S3eWbiRfXZtQFoOUJF8EdYDX9Yc.roa (hash: JnGWj1XmSn65dRfGoU3j1BYgj3cm1658PcWeEjvrK4Q=)
                          2: gaaIASwSJngYX8634QN_Dh7ReGE.crl (hash: sUHseAaDvnkXmv3hE2Fwfu2ZSViZi2D/r20aJmkvprw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e2:aa:83:c1:40:84:9c:86:f0:45:a4:47:36:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a688012c122678185fceb7e1037f0e1ed17861
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=2fb0bbbed9fb48326ec7644898f4faf9251b9b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:b6:6c:77:0c:72:b2:02:bf:a7:63:ae:ab:
                    e1:a5:c9:1d:9d:1b:52:59:87:95:4f:d1:aa:54:4c:
                    50:fc:8f:9f:ec:18:fc:1f:b4:5e:0e:83:0e:02:de:
                    e8:47:5e:43:c0:78:6a:70:8d:12:d0:c1:50:ae:1e:
                    fa:c9:f9:db:42:e6:6d:97:0b:1a:59:3f:36:24:7d:
                    bf:e9:e6:d5:d8:8c:b1:03:2a:44:2d:44:8b:4f:a5:
                    9a:0b:c8:44:95:f9:b8:6a:1d:75:6c:70:c9:b3:a9:
                    fe:73:06:50:6a:53:95:e3:10:a4:72:4b:e3:dc:cb:
                    45:45:df:54:7e:80:ab:70:aa:57:63:e1:0f:f2:5c:
                    78:03:f2:0f:6c:9c:26:b2:0d:c7:4f:ee:03:ba:e3:
                    b1:1e:89:3b:fe:d8:8d:93:09:0d:da:54:46:73:b0:
                    f0:eb:10:8a:68:84:7c:3e:a2:bc:5f:9b:b7:82:53:
                    b8:6d:90:e7:cd:0d:23:f4:e0:63:64:cf:b5:c9:97:
                    f2:37:45:18:80:09:b7:0f:ea:f3:ed:79:c7:03:c7:
                    27:f8:d3:a1:33:a8:07:e3:f9:20:6f:64:74:71:1a:
                    6f:51:16:83:a1:9b:8f:9d:59:70:c8:24:be:5d:90:
                    3f:da:7c:38:53:ae:18:42:fd:01:6d:c6:73:d6:04:
                    04:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B0:BB:BE:D9:FB:48:32:6E:C7:64:48:98:F4:FA:F9:25:1B:9B:47
            X509v3 Authority Key Identifier:
                keyid:81:A6:88:01:2C:12:26:78:18:5F:CE:B7:E1:03:7F:0E:1E:D1:78:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaaIASwSJngYX8634QN_Dh7ReGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c7c207-a3ba-49c8-a894-084d4748c385/1/gaaIASwSJngYX8634QN_Dh7ReGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:f6:13:b3:f0:53:b6:e9:a3:93:73:3f:62:3d:bc:c5:17:
         94:05:e1:e5:31:e5:72:6f:5b:1b:0b:df:ae:84:0a:8b:1b:92:
         90:3d:00:73:ef:56:77:91:d9:22:fb:fd:fe:81:6f:ee:5b:5a:
         fd:fd:17:55:c1:5e:58:25:66:1c:6b:be:92:a3:f9:9b:c0:4a:
         15:d3:81:61:0a:af:5b:ca:77:d3:c1:5c:15:2a:8c:c9:95:91:
         88:10:93:35:c5:6f:12:12:db:40:b7:58:a1:f4:6a:29:c4:af:
         42:72:f3:01:07:b1:74:44:d0:07:4c:e8:d5:77:b5:f1:4c:af:
         6e:29:bc:9f:f4:a7:c5:98:91:2b:fc:c1:7f:75:7a:b4:71:8a:
         58:30:3a:4b:17:64:f9:d8:c7:ca:c3:6e:b7:99:b0:b9:b3:1a:
         06:36:c1:51:67:0c:00:ec:c6:90:54:c3:ca:08:fb:e6:bd:a2:
         be:5e:30:70:d1:5a:4c:10:75:ed:e1:e7:aa:f6:99:7a:7b:e4:
         a5:b2:2a:28:32:3c:16:47:e2:91:a3:d8:94:fe:e3:25:b1:b3:
         1d:b9:20:cf:fd:7e:8d:c8:de:5b:ee:ad:5c:a8:eb:91:9c:e1:
         63:10:f3:f4:2f:51:02:40:b4:f7:ac:30:2b:d2:5a:e4:aa:c9:
         c7:75:ab:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----