Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
File:                     gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft (raw, json)
Hash identifier:          M1aeEOSTgTQyEWR6ETMvtOoPHtbuYE2SND02CM9EVTs=
Subject key identifier:   C1:39:E7:FB:03:79:33:8A:7C:BC:EB:35:AE:AB:45:8A:57:30:C8:14
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Certificate issuer:       /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial:       01962ECFA2390843E63A457B7B6759D5DA1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (hash: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=)
                          2: XtfrcY0xGbaYSlWTXL9nm2Diii0.roa (hash: aEZWDKAQcPeSAXKY4jWlj23Ulwbg4fWY9kpGKgMl9kU=)
                          3: gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl (hash: p7xUs82ruvweWcsz+E+SorTmr+U5NLGI98s2r8E57ko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a2:39:08:43:e6:3a:45:7b:7b:67:59:d5:da:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=c139e7fb0379338a7cbceb35aeab458a5730c814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:24:a6:37:cd:bf:ae:fb:87:60:91:0f:32:
                    ca:27:96:9c:17:1e:7f:95:d4:91:1c:cb:7a:0d:61:
                    1b:a0:bf:21:57:98:ce:e5:da:fd:1a:0d:af:0a:79:
                    7b:d4:85:78:b8:95:c3:d2:45:44:57:1e:e7:36:8f:
                    f0:b5:fe:5b:f1:cc:9e:52:04:18:30:9b:30:30:2c:
                    d7:12:f6:34:ef:7e:e2:de:e3:88:51:9b:83:14:82:
                    b8:77:63:0a:5c:9b:41:e7:df:97:46:88:c4:02:4c:
                    97:8c:dc:ab:25:9d:90:2d:6e:44:97:8d:e1:13:26:
                    0f:65:22:a8:4d:28:b0:41:ea:35:06:c4:2c:7d:7a:
                    87:cb:12:5c:e8:62:51:c5:5a:ea:5b:18:c1:e3:ea:
                    a0:46:ec:be:32:df:8b:3e:fc:a9:61:2d:cb:c1:5c:
                    79:52:9c:5f:be:02:d7:3f:79:49:7c:04:93:c4:82:
                    b2:c0:0f:f7:fe:3a:d1:ed:9f:88:7a:fd:03:f7:cf:
                    4f:1d:46:1b:e1:4c:a0:d1:35:e4:75:42:89:56:46:
                    19:11:57:3c:03:28:89:10:45:84:6a:b3:98:f9:16:
                    cf:68:f1:cb:61:4d:d9:85:43:e2:ae:17:3e:ac:bc:
                    76:00:fd:b4:13:0b:01:7d:8a:8a:e9:f9:48:3a:48:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:39:E7:FB:03:79:33:8A:7C:BC:EB:35:AE:AB:45:8A:57:30:C8:14
            X509v3 Authority Key Identifier:
                keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:84:7a:c5:04:c7:92:a1:9d:f5:7b:a8:08:99:b4:aa:3d:22:
         e5:46:89:fb:75:07:02:0f:fa:94:ff:95:73:49:0f:b6:94:0b:
         74:53:7d:09:b9:e7:9c:4d:47:c2:a6:ab:3b:18:d4:89:22:41:
         4c:0d:15:d1:36:21:49:63:11:43:d8:f6:62:cd:26:af:6a:59:
         3b:dc:36:81:ce:07:45:66:85:1d:1c:fa:7a:00:a1:36:5a:a8:
         be:ec:27:a6:8d:3c:c3:90:65:e6:12:a8:02:7c:b3:73:ee:fa:
         74:1d:86:57:3a:75:bd:6e:44:ce:0e:ad:72:d7:94:38:11:ad:
         2d:3a:25:d6:dc:4d:94:48:50:7f:f1:7a:1f:41:45:e5:ea:0d:
         ca:17:da:86:13:36:a2:1d:1a:f5:3d:20:01:31:58:df:b6:3c:
         cb:f9:f3:da:06:0f:e6:17:ae:00:e9:0e:0e:bd:b6:98:05:34:
         d7:fe:7b:3a:c2:7b:7f:60:cc:d6:b3:81:2e:eb:7e:3d:2d:a0:
         f6:ed:5d:96:3f:b8:fb:4a:f0:26:8f:4d:74:9f:8d:42:e0:34:
         23:51:26:4d:34:44:3f:14:a7:47:8c:21:f8:0f:e5:6a:1e:2b:
         38:92:1e:ab:e5:90:87:ba:f0:08:f8:eb:4f:11:3c:e5:00:33:
         e7:7c:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----