Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
File:                     gmf7Sgtne4N3kHuC-x-4gQov7wg.mft (raw, json)
Hash identifier:          QKxw3525EAgfk/RKC+w4hRAHQQzuZkPDhZ6Edqnkvkg=
Subject key identifier:   2E:86:29:C6:89:04:78:B3:7E:01:22:15:8E:53:F1:39:D2:F4:5F:87
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Certificate issuer:       /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial:       01962E999A25252CB46AA86E902CA4DEA2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: M06N0gwo3JL6GFlpwhETdttP9PQ.roa (hash: JdKy18XjO1bCDj++PIiRzZGq0fdEiBKbHucnCQRbUms=)
                          2: gmf7Sgtne4N3kHuC-x-4gQov7wg.crl (hash: 7jJIRJj0dwJSJIqS/mKaAh6KB4AEdDU2+1WlYY8wBxg=)
                          3: l6IYvh1CKLMSrMEr-TM7q3chK9Y.roa (hash: rnPxXzKtfkYxdX0ghFEuYclewjG7j4/p3CTTLzWXDi4=)
                          4: rJqYPA_Hva-IaBLfUn9RcoY2ojY.roa (hash: o6BNzu4DD6yxBTs+9aSDottFhpX2sbKr1oEfAdwf4NU=)
                          5: wpH7An9OGaqDDHbjqAXOYrzTOjY.roa (hash: 2UBnZqOnnI+7jNrBotsNcwolkfZL1bsPGHesYmJ3hac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9a:25:25:2c:b4:6a:a8:6e:90:2c:a4:de:a2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=2e8629c6890478b37e0122158e53f139d2f45f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:c1:ca:76:d6:f4:b2:07:a1:c1:74:09:d6:
                    71:a2:fc:0d:f9:1a:51:d4:0c:b9:3d:af:f8:e3:23:
                    79:42:3d:34:69:2b:55:24:fb:f6:64:81:24:b4:5a:
                    47:34:d7:c1:f5:e7:65:96:89:ca:da:82:5f:6d:36:
                    bf:fd:e1:a1:41:73:fc:61:7e:a4:34:f0:b1:e8:7e:
                    c4:b5:5f:00:b1:14:17:89:50:54:56:e0:7c:ba:72:
                    7e:47:49:bf:be:0f:5a:77:b3:8f:67:aa:16:36:00:
                    d4:ba:92:df:e8:cf:0f:93:57:64:8e:3e:53:95:15:
                    6a:55:cc:72:5e:52:1b:5d:2a:72:85:e3:ee:04:9f:
                    ed:ce:af:a5:64:9e:5a:4a:4a:db:7e:b4:9d:43:46:
                    4e:8a:ac:79:08:31:5c:98:be:fd:13:49:2f:c8:74:
                    00:8f:50:d5:c6:57:b8:9b:18:f2:c7:31:d1:f3:af:
                    4b:1c:34:30:d4:ae:26:3b:74:0e:f5:b2:19:5f:46:
                    19:d8:00:a0:b4:85:c9:e2:bf:a6:c0:e4:cd:1f:5c:
                    da:a7:3b:31:37:2a:64:f3:9a:6e:ba:b5:8b:ff:23:
                    b4:e3:f9:c2:db:37:31:15:3e:b7:75:2e:5c:aa:e4:
                    2e:c0:78:36:31:7a:39:f2:59:55:fc:1d:11:d2:df:
                    00:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:86:29:C6:89:04:78:B3:7E:01:22:15:8E:53:F1:39:D2:F4:5F:87
            X509v3 Authority Key Identifier:
                keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2a:02:eb:91:e9:45:9b:81:f6:d1:26:56:33:de:6d:0b:a9:
         d5:24:6d:17:56:02:0e:ba:04:c0:1b:2a:0f:c1:85:5d:8f:57:
         e3:ac:a1:b0:40:cd:fb:66:ac:9a:17:8b:e6:59:33:db:47:3c:
         50:a2:e7:c6:af:60:2e:71:11:0a:d0:c5:a7:07:30:c3:56:3d:
         d6:dd:8d:6d:e4:9d:07:fc:00:75:8a:78:67:7a:d3:0f:a9:6d:
         cd:33:b9:ed:60:2d:0b:4b:76:5b:86:1a:53:57:62:39:4d:98:
         9d:3a:22:27:37:cb:cc:35:0d:9f:e2:07:f7:92:c6:7a:1e:4e:
         8d:c2:7c:25:06:01:d7:3a:80:ce:96:b4:07:9f:d4:d6:9e:d3:
         14:f5:34:9b:7e:2a:71:cf:cb:ad:cc:90:7e:cd:97:aa:bd:77:
         2c:28:17:6e:75:bf:e3:ad:f6:b5:27:18:de:67:02:fe:0f:da:
         ba:46:58:c2:12:e1:3c:fd:a5:92:e5:23:ce:4a:09:b1:42:f5:
         2b:93:a2:15:2b:93:6b:c4:a3:c3:a4:fc:76:28:2e:d8:05:48:
         8e:3b:c6:65:25:f5:2b:69:18:53:d3:df:f7:68:70:ba:2d:67:
         16:5c:2b:d9:02:5f:50:46:2d:88:14:33:4c:2e:f4:0d:74:c9:
         81:e6:b5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----