Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
File:                     gvWThvzeWW90WQde3qTXTBmwHKI.mft (raw, json)
Hash identifier:          et8R7+/7eB4CrVv6+QTnpsQar83Hpq9QdmYs/8JQdTk=
Subject key identifier:   9B:89:8B:2C:F4:9E:AF:51:69:D7:7A:03:20:3D:D0:6C:0B:C5:AA:0E
Authority key identifier: 82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2
Certificate issuer:       /CN=82f59386fcde596f7459075edea4d74c19b01ca2
Certificate serial:       01962F3D88B0949DA3D8F358DD45BD5E14B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft
Manifest number:          0788
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: MVRm2B27-mtawpjQijtz-fTQOKU.roa (hash: TjDlm71DJPQeofi//IsXEPB4VT8uuUFQlFrO0LSDhhk=)
                          2: gvWThvzeWW90WQde3qTXTBmwHKI.crl (hash: UPaUsP47XWuLCFV1r3gvol7RWGoGss3VZYwRJBmOnH0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:88:b0:94:9d:a3:d8:f3:58:dd:45:bd:5e:14:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82f59386fcde596f7459075edea4d74c19b01ca2
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=9b898b2cf49eaf5169d77a03203dd06c0bc5aa0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e2:05:e0:ad:d4:d4:83:00:72:8a:f9:a9:ad:
                    7a:68:c7:83:a3:8f:97:09:1d:0d:9d:34:13:2d:a2:
                    8c:4b:94:68:4e:c2:82:1f:7f:af:f2:c0:2f:53:81:
                    5d:9b:03:c4:6c:72:73:db:25:03:2d:38:a3:5b:61:
                    03:81:14:e4:38:83:3c:e9:a5:c1:62:13:89:68:af:
                    05:cf:87:2e:22:3c:da:fd:66:42:23:c2:a5:df:87:
                    20:c3:f8:82:7b:39:d8:8d:44:55:41:03:91:97:07:
                    95:54:aa:63:71:71:9c:11:93:18:d9:e4:48:6f:3c:
                    97:c8:84:36:26:69:19:59:54:46:56:9d:56:28:31:
                    9e:50:76:f3:3c:9e:39:d3:75:f3:e1:eb:c2:f7:da:
                    a2:64:52:9c:58:27:88:66:1a:d2:c9:f3:9f:2b:fc:
                    61:65:41:5e:94:69:46:af:01:f4:a7:45:ea:1c:19:
                    7a:94:27:61:79:7c:9e:02:d6:95:38:2e:b1:c4:30:
                    9e:f0:0f:9d:54:4a:43:ff:c6:54:e3:67:32:86:cf:
                    03:bc:12:27:76:cd:0c:01:d7:77:2c:0f:a0:59:05:
                    50:90:51:97:52:74:59:84:79:ca:6e:41:4a:9f:c3:
                    79:94:88:c7:3f:ef:00:14:c3:fa:3b:32:fb:4d:c8:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:89:8B:2C:F4:9E:AF:51:69:D7:7A:03:20:3D:D0:6C:0B:C5:AA:0E
            X509v3 Authority Key Identifier:
                keyid:82:F5:93:86:FC:DE:59:6F:74:59:07:5E:DE:A4:D7:4C:19:B0:1C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvWThvzeWW90WQde3qTXTBmwHKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/5bc134-5625-4eb1-9f70-f9fedbf63272/1/gvWThvzeWW90WQde3qTXTBmwHKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:32:f8:eb:e6:33:d2:80:d2:8e:35:86:a7:82:ab:be:d7:4b:
         24:08:a1:99:02:05:dd:2e:59:30:1d:9d:0c:9c:b8:aa:2a:5f:
         7c:da:b4:77:e4:f1:5a:a2:ce:92:db:8d:9d:42:99:05:79:f9:
         4b:f8:a3:a3:b8:2a:68:08:69:c7:01:08:5a:85:d2:2b:0c:5c:
         9a:c0:0e:2f:5a:de:96:9f:78:c2:1b:93:fa:f4:a5:44:e5:52:
         95:fb:0b:5e:2a:de:9c:cc:85:8a:88:a0:2f:a1:38:8c:1e:8f:
         81:94:2d:db:3e:5c:6b:cc:98:12:1c:14:d2:df:82:b0:2e:fe:
         2b:9b:a3:1b:c7:ce:41:1e:5d:75:35:73:ae:e9:d2:10:4b:38:
         aa:ce:1c:f3:24:6d:3b:94:28:91:78:f3:f1:47:e8:bd:7c:9b:
         b4:dd:2c:05:8f:33:5e:26:c0:72:5a:e1:01:a7:a5:2f:68:b3:
         3f:98:aa:72:41:f2:62:e3:dd:94:48:49:14:3b:c5:ae:7a:a3:
         53:00:38:52:21:6f:1d:1b:a4:4e:3f:5b:9b:73:4c:17:15:64:
         33:d7:73:86:88:95:32:ad:8a:af:ce:e4:30:ed:23:03:f6:77:
         6e:8c:22:7a:3f:d6:52:98:2f:b0:af:8d:6b:c0:01:9f:f0:17:
         90:7f:f9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----