Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File:                     gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier:          RL4mGyDHaE3df9T28KS+cKI24jD+yP4FGNcl7McEVWc=
Subject key identifier:   A6:DD:2F:91:03:30:2E:58:98:C9:68:85:0C:A6:C1:34:28:2D:6E:62
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer:       /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial:       01962E2AD2A33A5EDE906E7DEEC523D813BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number:          05C8
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: 8sYphYrrmRM_ErwAJ8gqIzEpDGo.roa (hash: rt/OwZDBbcaVJA7rLlh63ti0IkxjXIhkThQceeCTgkI=)
                          2: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: ZzV0qb3Y5BmLQmD6USnZ6sVnimJL1vcfvvoV7KcgrCY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d2:a3:3a:5e:de:90:6e:7d:ee:c5:23:d8:13:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=a6dd2f9103302e5898c968850ca6c134282d6e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:af:f4:da:a2:8e:6d:b9:1d:04:d3:99:13:
                    56:d6:3b:f9:a0:bf:75:48:50:03:45:cd:f4:7b:4b:
                    25:ec:da:87:2f:2f:8c:86:0f:38:76:1e:7b:08:50:
                    48:2f:83:8e:84:bc:56:d7:f0:e3:9b:17:f1:de:2a:
                    e0:fe:a3:6b:84:f0:26:02:59:30:39:c4:8a:be:39:
                    31:ad:00:56:03:66:61:92:57:16:0d:05:3d:60:30:
                    db:21:58:de:32:50:85:64:c8:ef:a3:78:95:52:d8:
                    e6:12:13:bc:d1:05:60:6d:d9:5a:d5:01:7f:40:f9:
                    b7:68:f6:28:76:4c:61:bf:05:d7:1b:0e:11:2a:b2:
                    1f:db:16:b2:03:8e:f5:d8:83:d3:b6:ac:a2:fb:ae:
                    b3:91:a4:c2:f5:be:12:39:66:d4:e3:dc:e6:84:0c:
                    95:b4:84:bf:a2:c9:d6:a3:ce:87:85:35:13:63:7a:
                    4e:56:95:c0:16:8d:64:4d:7d:04:b6:27:a9:aa:d2:
                    47:54:c1:c0:b4:71:0c:99:ac:48:bb:45:bb:16:69:
                    2a:1b:49:7e:ca:7b:de:ac:5d:d5:99:d3:38:bc:10:
                    47:a0:27:2b:f0:da:99:7e:87:d2:84:22:ca:8c:6e:
                    85:88:89:c5:a0:f4:71:68:a6:99:06:8a:b1:7b:aa:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DD:2F:91:03:30:2E:58:98:C9:68:85:0C:A6:C1:34:28:2D:6E:62
            X509v3 Authority Key Identifier:
                keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f4:27:3b:37:f8:ea:ff:d1:37:08:49:57:44:72:41:48:35:
         79:d9:a4:fb:48:81:45:3e:da:a5:e9:0b:5c:eb:da:e5:74:b4:
         d7:59:57:ea:bc:85:94:58:2b:c5:82:0b:c4:0b:a4:50:b6:dd:
         ad:ac:a5:01:8b:b2:0f:4e:9e:d6:db:8f:87:8f:ea:e5:1d:df:
         e0:8a:2c:b1:3a:40:73:5b:6f:17:5f:4c:ca:b5:6b:8e:c5:40:
         77:3e:6b:f8:12:cd:5c:fc:4f:e5:eb:ca:bb:bb:0f:60:cb:a5:
         69:e4:fc:ac:aa:13:02:d9:fb:f9:f6:1a:89:90:ac:b6:34:ef:
         f0:9a:71:3e:dd:40:e6:c3:75:46:0b:69:73:dd:0d:df:9a:4c:
         ce:7c:bb:7f:2b:d7:ef:ff:09:09:ea:92:9f:04:1d:17:d3:da:
         54:90:dd:d3:e4:3e:b5:7e:de:26:c7:89:e6:93:10:b6:82:e8:
         d2:88:a6:68:a6:16:8a:12:bd:0e:b5:6e:c4:b1:f2:1d:25:f4:
         6e:c4:98:f0:93:db:47:6d:91:61:b4:00:91:f4:74:8c:d1:48:
         40:32:c4:cc:ba:71:8c:da:b3:d9:3e:d4:02:eb:78:dd:36:ca:
         44:bb:0f:32:97:69:64:92:30:f9:46:d1:bd:89:cd:df:32:00:
         3f:43:a2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----