Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
File:                     gcAMyMc9EUHIklTtVWqNASypAiY.mft (raw, json)
Hash identifier:          pu99EJQecM1kd4JG+kjZV7ExZNfNXpaLYdg/kn/+l2k=
Subject key identifier:   65:1B:9A:28:CB:C3:74:A8:3F:34:B2:86:1B:45:52:67:B5:7C:15:DD
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Certificate issuer:       /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial:       01962E61AB54F72477C784270366719D2CD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
Manifest number:          0737
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa (hash: A6c2c+PXtuhOYqewWMvzWTg68sLONrRYQPMKhm+zXUU=)
                          2: gcAMyMc9EUHIklTtVWqNASypAiY.crl (hash: omzN8KQ2Jsc70ggpM+V94TIJSKyOzrFVUqoiOrN9+z0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ab:54:f7:24:77:c7:84:27:03:66:71:9d:2c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=651b9a28cbc374a83f34b2861b455267b57c15dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:10:ce:32:f8:71:47:ad:b7:0b:ea:97:69:46:
                    73:58:cf:be:b5:d9:79:31:66:1e:1f:4c:24:fd:06:
                    50:fe:64:eb:e3:1f:2a:b5:94:7f:88:ed:52:79:ba:
                    4e:10:b5:e7:f5:04:ad:0d:73:8f:8f:4a:4c:02:f1:
                    27:7a:ca:ac:0f:c2:85:7a:1f:95:b8:84:21:f2:bf:
                    fd:4b:ee:eb:11:ff:30:f3:e5:a1:ea:0c:2c:dd:d3:
                    cd:3e:15:55:91:3c:52:c8:0c:5d:b8:51:a2:98:e9:
                    23:bf:82:f0:02:62:92:d3:21:58:ce:de:3f:b2:8d:
                    e3:b3:e4:00:71:ab:22:d3:90:aa:cf:a6:53:e5:8b:
                    8e:67:df:da:fa:d5:30:b1:eb:2f:83:88:1d:f3:55:
                    05:48:83:f6:f8:c3:2a:1a:8c:26:24:46:ca:a0:fd:
                    f5:37:80:d7:71:8a:7e:55:c3:47:d6:f8:ba:8e:cf:
                    93:41:c2:d5:d5:c5:da:02:c8:be:3c:a6:00:96:a0:
                    cd:c3:e1:5a:48:93:d0:bb:a2:75:2f:6d:1f:02:b4:
                    6d:8d:5e:ef:7c:68:1e:8c:c8:81:f0:d8:57:8a:3c:
                    6a:35:da:ed:9e:42:50:26:e4:c3:50:39:6d:3d:01:
                    9a:e4:ed:48:30:59:52:8e:ff:03:ab:b4:d4:c3:ad:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1B:9A:28:CB:C3:74:A8:3F:34:B2:86:1B:45:52:67:B5:7C:15:DD
            X509v3 Authority Key Identifier:
                keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:14:0f:31:3f:91:6f:aa:e1:3d:23:11:b9:47:5e:1a:14:cf:
         e6:25:41:83:24:b3:df:30:b8:78:6c:b2:45:da:3c:e2:e0:72:
         48:62:c6:8f:ad:2a:ba:e5:92:c8:59:d4:db:51:7a:42:0f:80:
         58:e6:63:7d:bf:9f:89:1d:3e:17:53:df:18:94:d1:bd:0a:37:
         8b:8d:c2:07:e9:51:f2:56:1c:fe:fb:e8:7f:43:b1:6c:0f:b5:
         e2:56:6d:41:7a:0d:6f:52:7e:ad:95:6f:44:43:b6:7a:d7:d4:
         ea:1a:47:19:48:79:25:73:6b:49:71:60:4d:68:7a:6b:a0:75:
         23:63:91:c9:73:78:ba:69:05:30:fb:e3:97:18:df:98:b3:71:
         93:d3:e2:8c:7f:81:a0:f0:eb:c6:0b:10:42:a9:18:1b:76:fa:
         e5:a2:07:ef:c9:c1:3e:02:7d:f6:9f:45:20:67:f5:68:a8:b5:
         f7:f9:d4:ae:0e:3a:d4:11:93:5f:ad:46:bc:8c:32:ee:03:d9:
         3c:fc:25:0d:b2:fd:ba:06:c7:07:e3:81:dc:47:2c:f4:73:8a:
         5b:24:6b:6b:37:12:13:a5:31:f3:80:22:17:5f:45:04:45:ed:
         d1:27:ad:e1:0e:57:6e:90:7c:f8:22:b6:a8:02:fc:ca:43:78:
         b9:94:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----