Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File:                     cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier:          /6ByUnJtLMYtil9L3OdKpYsbXTICxbK2VQYlyUachns=
Subject key identifier:   33:16:57:77:1A:C2:11:B0:5C:17:F9:67:2E:2D:17:8D:3E:D8:2E:FE
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer:       /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial:       01962F74E5078F3C516188439A6385AEFCC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number:          0D13
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: WLQJ8zcZCMsER4r6hGR6_boxEBI.roa (hash: 8yJ5VPtEriA2v8Qxk3Uyit7MsAAT1OiV71AZSGLF2yM=)
                          2: Z00tzDptb3jFHIL69XvH8_giNRA.roa (hash: X1cnjA0aHCCUUGs++tB5SEQQf9ajzL2uJiiXmI5qvlg=)
                          3: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: Y1egfQ6gFchWMdc6/buAYe3/r+IIo/symMz/R99UJSw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e5:07:8f:3c:51:61:88:43:9a:63:85:ae:fc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=331657771ac211b05c17f9672e2d178d3ed82efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ae:e0:0a:f6:0c:9b:a0:d9:66:88:89:1e:a9:
                    2b:29:7a:e9:ee:07:51:1e:92:3a:50:f9:65:0f:fb:
                    3d:c9:8e:1a:a3:d9:e7:5a:06:61:5f:00:45:b6:98:
                    1f:2f:b7:78:52:87:32:d9:a6:0f:9b:43:79:3a:62:
                    2b:1d:04:43:64:12:7c:32:b4:e2:e0:3e:43:cf:6e:
                    98:47:30:92:82:d2:6a:0c:1e:15:60:c4:9a:dd:50:
                    40:d8:e3:7c:a7:1f:30:99:61:a6:fb:37:ab:95:3b:
                    96:74:f3:47:9c:07:f6:7f:9d:1e:ca:9b:6f:3d:a6:
                    e2:17:33:3b:a2:00:aa:83:77:db:47:df:da:50:ea:
                    94:5b:f2:19:c2:8e:81:ee:35:17:74:51:c4:b7:c0:
                    0f:b6:4d:f9:12:ef:df:5a:79:63:f9:ed:a8:64:c0:
                    5e:10:24:d1:be:7b:ad:3b:63:28:ce:1b:b7:04:50:
                    3d:73:43:47:46:61:79:91:4e:3b:20:9f:0b:f8:ec:
                    ab:91:22:e2:5d:84:bd:93:b0:13:54:0e:5a:05:7a:
                    16:60:53:5e:f0:8d:2b:7d:39:33:d7:ca:21:6d:b4:
                    fc:dc:44:1b:39:18:38:af:00:c1:61:82:77:86:07:
                    b3:04:45:a7:91:db:84:00:58:91:e9:06:6a:03:e2:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:16:57:77:1A:C2:11:B0:5C:17:F9:67:2E:2D:17:8D:3E:D8:2E:FE
            X509v3 Authority Key Identifier:
                keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:c2:b1:88:f0:07:b2:e5:03:34:4e:dd:43:a8:d2:5b:c8:d2:
         37:7c:4d:ba:20:1e:61:04:4f:ec:0d:e9:b3:aa:fa:47:e5:ca:
         79:05:92:26:5c:37:c4:a1:5b:a6:a1:50:50:5f:d2:dd:ab:8c:
         68:fe:65:e7:e0:1f:a6:ca:8f:47:ac:96:71:fe:19:0b:83:8c:
         ee:36:e2:e0:d6:67:34:b7:00:32:73:2a:0a:63:b7:c6:67:7a:
         10:30:75:4c:ec:b9:30:01:53:e0:b5:4e:ec:66:1e:88:49:e2:
         af:46:20:c1:db:de:34:d5:bd:80:44:93:51:dc:d3:51:17:1e:
         9e:0d:ad:b6:63:69:3d:27:99:63:56:dd:39:45:07:23:b6:0e:
         74:9f:22:15:a6:b0:c3:3b:80:fc:dd:d8:40:75:40:d6:8f:0e:
         82:d1:51:f2:8d:f1:28:6d:bf:b9:38:1c:2e:11:11:ac:e9:18:
         40:15:d1:28:b4:cd:a4:cb:67:9f:1f:1f:b7:4b:e5:b1:7c:21:
         59:44:55:c1:9e:bd:35:a9:40:19:19:c9:5e:b1:4d:78:24:c9:
         82:b2:59:b2:8c:80:f7:65:cf:b4:bb:87:25:40:4d:77:b9:fd:
         47:d8:34:eb:ff:61:15:e1:75:39:03:1e:82:c0:a5:e7:b0:1f:
         7d:f2:f8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----