Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
File:                     ga63YipE0jwqRbTQ30DWzcwzJB0.mft (raw, json)
Hash identifier:          EkDMkmpPLA5xIaphgLi2yNPC/8QZqmo8QFfLS1O43hM=
Subject key identifier:   A3:FA:99:89:3A:89:4A:DE:D2:21:42:68:A9:33:61:1A:24:7D:2A:3C
Authority key identifier: 81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D
Certificate issuer:       /CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
Certificate serial:       01962F3D8CE2C9B75AB579FD08B929DA5AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft
Manifest number:          0578
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: TdvnZ-pSKLZ2di0IsrjKM1Y6TNQ.roa (hash: 3haz/IHoayXe0sYmFVaRZdqvibPOZRqi6vqfWqU727k=)
                          2: ga63YipE0jwqRbTQ30DWzcwzJB0.crl (hash: KCssS8qNUGkSKyos0+3KjeAQEuruA1vkKgJFwtzrsaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8c:e2:c9:b7:5a:b5:79:fd:08:b9:29:da:5a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81aeb7622a44d23c2a45b4d0df40d6cdcc33241d
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=a3fa99893a894aded2214268a933611a247d2a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:40:90:be:cc:23:88:07:c6:56:fe:93:4d:2d:
                    50:7d:5f:76:53:50:aa:21:e4:f1:59:c0:03:02:f9:
                    24:90:24:ff:db:d9:19:66:07:8c:a9:ff:26:d3:35:
                    dc:02:a2:a3:e5:73:51:7e:a5:9b:08:e6:61:c2:b8:
                    e6:95:f3:89:b0:ae:d4:05:74:59:9f:24:54:8c:b3:
                    b7:2e:fe:75:c3:78:74:f4:da:97:5a:10:bc:8b:62:
                    d9:d4:fa:95:f4:7c:08:61:c5:f1:5d:7d:be:e6:a3:
                    04:e6:66:1d:a1:38:99:5e:eb:2d:a4:65:c6:7e:ad:
                    48:53:5e:c8:c9:43:8e:48:1d:80:84:3b:d7:1c:75:
                    4e:03:56:b3:9c:12:d3:39:c5:7d:ce:7f:d1:a8:94:
                    68:4f:15:bb:5c:6b:0a:e1:7a:23:21:96:61:0f:36:
                    24:68:f7:9f:c2:74:34:03:9b:fb:86:55:f5:8a:62:
                    42:4c:a6:1f:93:1a:65:fe:a0:5a:9c:0b:1f:e0:71:
                    f8:e3:0e:92:74:72:a7:45:82:64:8c:ad:13:86:d5:
                    15:97:01:04:2f:aa:52:1d:7f:a3:cd:79:47:d4:8c:
                    25:7c:60:2c:f5:ff:2d:a8:44:e6:39:fb:7f:f9:0b:
                    5e:f1:cc:84:56:8c:71:0d:46:fa:e3:ba:8f:c1:53:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FA:99:89:3A:89:4A:DE:D2:21:42:68:A9:33:61:1A:24:7D:2A:3C
            X509v3 Authority Key Identifier:
                keyid:81:AE:B7:62:2A:44:D2:3C:2A:45:B4:D0:DF:40:D6:CD:CC:33:24:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ga63YipE0jwqRbTQ30DWzcwzJB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/331ce6-e428-41fa-bb10-db3afd3d762e/1/ga63YipE0jwqRbTQ30DWzcwzJB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:68:6f:0b:53:f6:3d:26:c1:42:5c:0f:58:31:36:7c:c5:13:
         de:4d:e5:d7:4d:c6:4c:d6:c1:c9:0d:c7:35:0f:4a:08:cc:a8:
         75:0b:ca:16:8d:27:86:3d:05:8f:63:c3:8b:c7:e2:d8:83:98:
         d6:9b:0e:a0:14:0b:98:3d:4f:c8:85:24:a4:6e:75:f5:cd:2b:
         0e:0f:9b:e2:36:52:4e:eb:d5:12:17:9c:b7:7b:57:f5:ac:7d:
         a2:8c:60:0a:1b:da:ac:09:71:c4:45:f2:80:81:6a:f4:83:15:
         1b:3a:a2:29:16:6c:c5:e1:39:94:65:9e:3e:ec:39:7c:ac:38:
         76:01:d0:45:c7:25:f0:dc:da:86:ae:51:d6:d4:1a:1c:71:aa:
         1e:4c:e9:b9:70:26:99:4a:cb:a6:be:01:57:67:36:74:1c:55:
         5d:0f:76:58:1e:4f:de:4a:d2:0c:5a:fd:10:3a:20:ba:b5:6d:
         86:19:7e:aa:48:c2:cc:c5:3c:ac:6e:bb:43:76:4f:b9:4f:3c:
         e3:b6:08:63:c2:dd:01:ab:6c:f0:5b:b5:5e:e2:c5:8f:a5:c6:
         df:5f:ee:83:f0:ce:37:e8:f8:d8:d2:de:58:09:18:f8:d2:e4:
         c5:55:2c:73:1a:8e:69:91:32:43:40:5a:25:75:ca:d0:85:23:
         97:91:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----