Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
File:                     gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft (raw, json)
Hash identifier:          8L2iLC9kGjTxz+xBoj68pmdMp3REY2uyHlIZfOsNDTk=
Subject key identifier:   8E:31:7C:D2:91:A1:89:0E:5E:4A:E6:4B:E6:F8:C1:A9:16:EA:FB:94
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Certificate issuer:       /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial:       01962E61E28CA41CC4B93F36EEAAF84E7900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft
Manifest number:          0B93
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: NyCoKdVsZaQ6H7R3dtaZtG2OwRQ.roa (hash: fsC9LKpRxEKj9iabpAlNPSaizoOq52bdrGFCNv9aJe0=)
                          2: gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl (hash: 2//q3BhUES8OBfC7DbIi0F3hqiQXH4IVjUlmdF6Riy0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e2:8c:a4:1c:c4:b9:3f:36:ee:aa:f8:4e:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=8e317cd291a1890e5e4ae64be6f8c1a916eafb94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:93:78:91:e8:8d:1a:94:27:f2:8a:26:03:d7:
                    f3:6c:05:aa:6d:a2:cf:33:1e:20:93:a2:b3:3e:c0:
                    77:f1:7c:12:90:23:db:3c:10:aa:97:3e:5f:27:e7:
                    51:08:e5:d8:15:d7:8b:62:c8:b0:4f:8a:d9:17:fc:
                    bb:36:c5:bd:83:e5:91:a6:50:b9:00:ab:38:7b:7b:
                    d5:12:ef:13:5a:63:1c:39:ad:5b:31:12:53:be:6f:
                    45:4e:2d:3a:6c:cc:4d:92:48:2d:24:02:11:f5:1d:
                    04:05:93:12:0d:be:ed:b4:1b:dd:80:ad:ca:8d:e9:
                    e7:5b:17:8e:94:ab:72:59:f6:34:1f:03:16:1f:be:
                    43:dd:98:94:85:11:18:5a:37:35:38:3b:73:b9:9c:
                    8b:58:c1:78:0b:3d:83:5d:f7:8f:cb:2a:88:ae:2f:
                    d9:98:07:c9:60:8e:d9:74:fb:cc:c7:2a:69:c8:2a:
                    53:77:df:97:a9:90:33:6a:34:2c:5a:71:ff:35:2b:
                    d4:ad:db:71:b8:07:d1:b2:a4:47:c5:71:ae:a2:50:
                    49:7b:00:2f:37:41:7c:a1:c0:b6:7f:ca:52:84:3c:
                    1e:ce:fc:69:24:83:d1:a1:b9:fb:5e:e4:1a:03:15:
                    27:cd:c6:d4:3a:e2:61:26:22:b2:a0:0f:45:b1:b1:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:31:7C:D2:91:A1:89:0E:5E:4A:E6:4B:E6:F8:C1:A9:16:EA:FB:94
            X509v3 Authority Key Identifier:
                keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:00:ba:e2:3e:76:30:32:f2:cd:61:35:d8:b1:29:da:7b:29:
         a1:58:0e:df:41:21:32:3b:a9:60:d2:de:94:6e:59:ab:22:cb:
         12:d6:54:31:a9:40:63:1d:68:9f:7f:af:dc:56:c1:f9:db:17:
         42:9d:82:2b:4d:81:d9:e6:fe:e8:12:b8:9a:5f:66:f8:8c:0d:
         fc:26:c9:bf:e7:70:e3:9a:69:1d:c7:86:c8:c5:96:e3:04:86:
         a4:7d:be:50:8a:24:5a:18:01:e0:35:c9:9c:e3:9f:1b:a9:b3:
         bd:c9:0a:ce:c9:b1:40:ba:e1:29:52:c4:d9:9b:9d:02:c8:da:
         4b:de:c7:85:e9:ec:c5:0d:45:54:27:19:a8:6f:a1:a0:43:88:
         46:09:57:33:31:46:a8:16:d7:d1:2b:4e:c0:cc:80:58:4f:c0:
         3d:e7:6f:db:18:04:65:cc:2c:41:28:65:16:48:ff:ec:3e:01:
         8b:f7:d2:fe:28:e0:e7:6c:d0:82:52:5d:b7:d4:f6:a1:5f:1e:
         ac:e8:39:e4:5e:21:76:75:b1:14:a4:0a:34:46:e0:c6:76:d0:
         41:fe:9b:c9:8b:ac:31:47:29:8d:02:41:6a:b0:0d:f5:12:c2:
         67:ad:9c:da:37:c8:b7:84:b5:c7:61:fe:8d:b5:18:20:f3:81:
         54:d4:9a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----