Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
File:                     gou61vSRaEK74yAoT6_hDK9Z7fA.mft (raw, json)
Hash identifier:          Wy3ng3FeQiHoVSFEgTTqpVfNCy110BoaYeFzmdpqSI4=
Subject key identifier:   A7:28:F7:96:9D:E6:A9:94:28:B6:0B:77:08:04:DB:59:78:64:67:13
Authority key identifier: 82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0
Certificate issuer:       /CN=828bbad6f4916842bbe320284fafe10caf59edf0
Certificate serial:       01962F3D9BEC995EEC87F345B3199654DFAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft
Manifest number:          0A0E
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: H0NG9092js7rDQpTqrZPdac72WM.roa (hash: R/Zdm9NfezmZRIz7VuQ59WGkqNjcJj7PHzqhqVFYEow=)
                          2: gou61vSRaEK74yAoT6_hDK9Z7fA.crl (hash: mhR9HHP2obLevJsypnrJM5ntuQNM63oQJB05FyG3TYw=)
                          3: yrhYdyJUuDyLHAzDMziEeCqDJFI.roa (hash: G6JVEYgvH80sw+7zP6zIaheoCR0r4+RD30tbsjOvgAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9b:ec:99:5e:ec:87:f3:45:b3:19:96:54:df:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=828bbad6f4916842bbe320284fafe10caf59edf0
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=a728f7969de6a99428b60b770804db5978646713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:25:e1:16:f6:af:b1:6c:69:e7:f4:3b:4e:68:
                    59:57:3c:65:25:72:96:03:ed:89:a5:b8:f0:ad:02:
                    8d:cb:58:9a:fe:96:31:27:a6:9b:10:07:73:e5:25:
                    8d:01:b2:98:f8:6c:5c:71:21:bb:40:91:b2:6e:02:
                    14:2f:ac:8a:4d:6e:37:6a:80:2e:0a:5a:0e:4a:46:
                    ea:d7:32:71:8b:a5:2a:fd:5a:b3:70:11:61:af:ee:
                    01:ff:3c:a1:61:4c:43:5c:12:7c:a5:b2:8d:97:7c:
                    d1:99:4a:75:1a:7a:a9:4b:a1:c2:c2:25:0b:f5:2b:
                    1a:20:1a:a7:55:d0:f9:cb:23:72:79:43:1b:b7:64:
                    e4:85:40:c4:1b:9e:0e:e1:c1:a2:bc:f5:09:d9:5e:
                    04:07:42:2a:0b:62:7c:9f:8f:d1:e2:7e:89:ea:6d:
                    c3:0e:b2:55:57:2d:3a:f0:d3:bf:2f:a2:c8:4f:03:
                    20:37:96:ac:32:ac:16:3c:60:f6:2d:2e:76:d5:d8:
                    94:ac:b8:9f:82:cd:81:bb:6c:f7:84:3f:11:5e:bf:
                    ba:78:d0:f5:f7:fa:bf:24:0b:da:94:8d:b8:a6:6f:
                    de:93:d1:4b:68:9f:79:2b:3f:63:6f:42:ab:4c:bf:
                    c6:bc:ba:87:5d:40:cd:9c:c8:d6:6d:3a:06:4a:72:
                    89:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:28:F7:96:9D:E6:A9:94:28:B6:0B:77:08:04:DB:59:78:64:67:13
            X509v3 Authority Key Identifier:
                keyid:82:8B:BA:D6:F4:91:68:42:BB:E3:20:28:4F:AF:E1:0C:AF:59:ED:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gou61vSRaEK74yAoT6_hDK9Z7fA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/83f977-82b8-4695-9c08-1896555a2f0e/1/gou61vSRaEK74yAoT6_hDK9Z7fA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fb:0e:af:1c:e7:61:b0:36:f8:3e:8f:0e:5a:9d:1d:c4:5c:
         ad:9b:e5:bf:2c:aa:27:e4:2d:3d:d3:31:55:e1:1d:7f:3f:46:
         a1:c2:fd:e3:21:79:20:c0:95:ae:26:c6:71:5a:0c:07:cb:be:
         2c:d6:c9:af:d7:df:45:e6:5c:e9:bc:9c:5b:82:5e:2f:66:36:
         1b:25:ef:c9:a1:b8:48:2c:7a:54:b5:0a:f8:6d:fc:61:c3:a7:
         e4:2a:50:c8:7d:d1:17:f0:54:93:a2:6f:6b:1e:d7:7e:72:e8:
         3b:5c:c6:2d:61:44:7a:97:04:ca:ea:15:88:c5:45:50:9f:be:
         75:8e:97:3b:58:f5:a7:bd:eb:b8:09:27:b6:fd:3c:14:8d:52:
         85:ad:5a:a1:97:cb:32:86:8f:5b:fc:35:43:f7:8c:67:99:7f:
         fe:2e:08:4a:0d:db:c8:57:a3:a2:27:ad:c8:e5:3c:ea:c1:63:
         ed:fc:f4:81:01:39:f8:71:9b:e1:cf:f2:fa:12:5b:7f:b9:51:
         cb:e7:20:d7:0f:f4:b7:c5:4a:f4:84:0d:13:88:38:bd:a5:c4:
         c3:5d:7e:d4:53:6b:7c:fc:e2:48:17:a0:b5:7b:6a:5b:b0:dd:
         cb:07:7c:94:09:ed:ad:4b:78:7f:cd:85:7a:67:6c:28:6c:f8:
         f7:6c:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----