Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File:                     gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier:          sUkB4CkUFQHNFF62ZHgKFcl6I+UHByYIWqSSJY14rdY=
Subject key identifier:   DC:62:35:79:46:CE:65:DD:DE:FE:D3:D5:AA:6B:13:18:F6:F3:24:4B
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer:       /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial:       01962DF42431FDCCD55C8002A723ACA9EE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: 1-4LyRzdV51htq9SQywG6kqmLtHA.roa (hash: 1sr/VI+T/JEkLvvcce2RV7cdGt33J6co/KZF33DPjGw=)
                          2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: 8dbRPJDYPQABlGAejACHX1yNamxdAPkDb3YGGUTFhCc=)
                          3: ppz_ybM7ufAfixh6_nP_nmJDmHo.roa (hash: aAOlU7YV5ghrEJxtxwQBWQh09ipgQ4F/4mZelsxTGg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:24:31:fd:cc:d5:5c:80:02:a7:23:ac:a9:ee:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=dc62357946ce65dddefed3d5aa6b1318f6f3244b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:a8:d4:6b:d2:f3:8a:c5:18:cc:9b:7d:b4:
                    3b:8e:c9:1e:05:5c:bc:8c:d6:50:c2:a9:ce:14:27:
                    37:28:9f:03:2e:e0:38:62:ff:55:30:05:f4:68:15:
                    ff:b2:27:0f:98:a6:3c:6a:c0:c9:fa:c0:58:92:5a:
                    38:6e:e9:80:bf:31:27:d6:fa:79:20:0b:4f:91:9f:
                    ab:c9:49:c0:55:6f:3e:63:96:c3:a1:b5:9b:e3:cb:
                    e7:1b:bf:35:0b:ef:5c:9b:57:e7:ab:43:9f:7c:27:
                    82:b4:32:82:6f:56:bf:7e:1d:9b:65:70:98:cc:65:
                    4e:d9:35:50:08:44:ff:74:1d:9a:aa:8d:c2:bd:80:
                    0e:41:91:c8:ea:79:2f:50:5b:4b:6d:bd:ec:6f:9a:
                    9f:0a:8f:78:6c:62:26:39:fb:7f:88:b1:ee:25:2a:
                    a5:b1:0d:d3:81:43:bd:78:b3:31:06:db:10:38:f4:
                    14:7f:e4:51:c8:2c:d0:a9:e7:98:e5:08:e9:57:d3:
                    07:b7:09:bc:1e:5f:38:44:ca:78:4c:67:91:7e:56:
                    d4:b4:26:fd:8f:4e:c8:03:b1:4a:49:6c:df:16:f7:
                    a8:3d:10:49:39:9d:36:9f:05:14:c6:4c:99:bd:95:
                    ef:d2:e3:a4:b4:19:88:90:45:14:b7:2a:5c:46:31:
                    b7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:62:35:79:46:CE:65:DD:DE:FE:D3:D5:AA:6B:13:18:F6:F3:24:4B
            X509v3 Authority Key Identifier:
                keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:fd:e8:cb:37:9c:07:95:f3:37:55:ce:a0:6d:87:65:08:
         4f:e5:0c:0c:5c:c9:a9:46:da:32:34:9d:73:43:92:35:d3:d2:
         b1:0e:21:df:f3:25:d5:59:5c:32:c3:ef:c1:92:65:14:bd:d6:
         13:f1:74:1d:91:75:ae:32:99:45:33:b4:30:a1:49:a7:6b:32:
         d6:d9:43:f4:80:2a:1e:e4:24:db:04:51:ef:bd:9f:17:2a:f1:
         97:ef:c6:7d:d3:95:39:fc:73:7f:80:ba:41:ae:29:a2:3b:96:
         3f:c0:eb:12:82:8f:43:0c:b0:fe:c2:7b:da:64:11:7e:05:57:
         27:8c:43:b4:fe:be:f0:fd:9d:3e:f0:ab:3b:f8:4a:1d:d1:b2:
         7d:9f:62:2d:3b:0a:c8:f9:ba:17:8f:d1:48:b2:e0:4d:81:58:
         e2:4b:1d:7b:35:87:0e:c1:1a:8d:46:e9:d5:63:bf:42:30:6f:
         d5:66:3b:e5:da:92:16:bd:c0:f1:fd:3c:58:8a:ea:c0:67:d8:
         14:f1:fa:5a:e0:27:6f:7d:be:34:c5:2f:aa:a6:84:05:0a:29:
         ec:9d:ce:ce:00:29:78:91:1b:0a:d9:3e:87:87:a2:56:b4:fb:
         ff:6e:7b:ec:d4:c4:81:5d:13:c6:99:50:9e:d2:b3:d3:d5:6b:
         57:95:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----