Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File:                     gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier:          zv+jvBO0Kxfnk60B/BaqIhEOze159ca1VmScIPuMxsE=
Subject key identifier:   0A:7A:35:19:34:6C:39:E4:6F:74:08:A7:AB:39:0F:B0:1E:23:38:DB
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer:       /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial:       01962DF39C5A973F56C50E356EE6D841C7F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: Kt54sJQgRqTUq_5CeKj_uNxTFL4.roa (hash: 4RVmGcZHz9ixKOs2qOpourGK4cJrBwsGs1fzppEGkHY=)
                          2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: fwsnBqw/0Qilpc1TcvYTkgkkbJ8tnGBfYQ6vhiG0Vuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9c:5a:97:3f:56:c5:0e:35:6e:e6:d8:41:c7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=0a7a3519346c39e46f7408a7ab390fb01e2338db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:11:a1:5e:d6:60:56:4d:7b:ef:7f:45:68:d5:
                    ef:52:ae:21:8b:fc:17:1e:01:0c:e2:3a:e1:90:19:
                    d9:0e:1e:92:94:0a:64:ce:10:d1:06:89:ff:cb:01:
                    60:8b:28:b7:9c:6a:85:98:9d:f7:f4:8b:56:ce:69:
                    28:9d:23:b6:1d:f3:9e:8c:e7:b6:73:57:66:ab:14:
                    78:de:a8:8d:ee:ff:17:dd:a1:ef:f3:60:4e:c9:48:
                    2d:d3:d5:0a:a2:30:b7:65:e2:a1:4f:df:d4:1d:6c:
                    12:b4:4c:a8:81:73:ea:50:c2:74:38:2e:99:27:39:
                    d1:b9:4e:73:29:f7:61:0d:40:86:38:22:2a:1f:1c:
                    73:33:5d:a2:82:87:5a:d0:73:f2:e4:5f:75:90:0d:
                    59:89:60:da:b2:68:7e:55:fa:db:60:ac:e6:57:3e:
                    0d:df:47:60:5d:51:41:5c:ad:44:15:7d:1f:e3:34:
                    42:52:03:8c:16:86:b0:76:55:fd:08:ca:32:10:75:
                    3d:ae:cf:76:46:53:ac:e5:47:63:56:6c:a0:b3:c4:
                    a5:02:2d:03:37:3a:73:76:44:6e:14:4a:12:b8:76:
                    c3:63:14:05:6b:d3:c5:a0:64:ff:a1:8d:f7:19:50:
                    7c:29:2d:a9:30:19:f6:86:87:19:7d:1c:0f:ae:95:
                    32:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:7A:35:19:34:6C:39:E4:6F:74:08:A7:AB:39:0F:B0:1E:23:38:DB
            X509v3 Authority Key Identifier:
                keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:92:a0:ff:bb:a4:c0:1a:14:f9:22:6b:96:86:fb:43:15:31:
         20:23:93:b7:cd:c8:28:47:a3:b7:30:a6:ab:26:5b:73:12:17:
         8d:44:f5:ce:16:33:7e:18:07:50:7e:84:dc:8d:5a:06:89:46:
         b3:35:ce:7a:ba:07:5f:fd:6f:cd:93:37:93:84:8f:5e:a4:9e:
         55:ae:0d:5e:46:eb:a8:4c:4b:5b:09:50:4e:6b:2b:40:b7:43:
         27:ba:cc:3d:57:63:ef:b2:42:e6:44:ce:66:09:6b:f2:b5:11:
         d6:1d:ff:5f:1b:2f:b0:e1:de:06:62:3d:b7:23:2c:38:25:34:
         f8:b3:73:df:1f:7a:6d:c2:d3:14:2b:ab:79:fa:0e:37:69:49:
         86:4c:97:1a:82:b3:2e:bc:64:1f:7e:bf:31:57:b0:f6:ed:7d:
         56:32:49:6d:5d:63:bd:04:fe:f2:45:01:07:c4:03:94:62:cb:
         f9:96:80:ee:d2:5c:f2:31:26:0f:40:2b:ed:dd:9c:e4:9e:ca:
         c5:6a:92:c3:9f:7d:d1:ed:4c:73:e3:25:39:25:2a:e0:8c:0f:
         e6:1c:cd:c1:24:0a:86:58:5f:6f:17:ca:92:5b:f4:74:cd:f0:
         33:c6:b4:96:14:db:70:76:5b:01:a3:26:ff:d7:83:d4:02:83:
         c6:47:15:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----