Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
File:                     Goki00gTCNvUwqtucOran3X222g.mft (raw, json)
Hash identifier:          Njsfckcb9e309bKtbPTlOVePt2n/gs+eAINTwUTpvK4=
Subject key identifier:   BB:04:F4:75:9C:FA:EA:FD:39:FB:54:A9:48:32:22:F1:6B:64:85:FC
Authority key identifier: 1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68
Certificate issuer:       /CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
Certificate serial:       01962E98776ABE3BA9994293E8EFB0448441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft
Manifest number:          04A6
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: Goki00gTCNvUwqtucOran3X222g.crl (hash: UZIca+2nEIufhemd/V+R7wIL58kePrUJv9U98dp1yXY=)
                          2: yjMA-1ORB2j3sIAGFa6mi9z8nek.roa (hash: f15I1oJSwK3EkxUVYS/kSdLlBqc6CN56mZfr1WF/Wpo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:77:6a:be:3b:a9:99:42:93:e8:ef:b0:44:84:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a8922d3481308dbd4c2ab6e70eada9f75f6db68
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=bb04f4759cfaeafd39fb54a9483222f16b6485fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:5f:92:d4:66:e0:2a:00:c3:eb:96:c6:a8:
                    a5:37:fc:f7:b2:e8:28:ed:f8:3c:c4:b5:86:25:7d:
                    18:f7:27:74:ce:8a:b2:5b:0f:62:29:c5:27:34:5a:
                    81:7b:0f:a6:07:ea:e5:90:b9:58:22:94:67:ae:d6:
                    0b:aa:52:d7:78:6a:86:bc:d3:67:5c:67:f6:79:70:
                    ce:30:4d:42:d8:d6:8a:9d:0f:fe:ea:ee:7b:95:e4:
                    a2:06:b3:36:c6:7a:cb:cb:64:2d:1e:29:a7:7f:91:
                    f9:e7:7a:ed:00:06:e9:bc:f4:fa:a2:40:a5:8e:90:
                    0a:ec:ae:92:a2:52:63:e8:1a:cc:85:db:a5:b1:c7:
                    9c:1d:fa:75:0e:83:a2:b9:91:36:64:dd:75:45:59:
                    d6:f3:fd:61:c3:f5:07:1d:c4:23:d3:b0:6d:27:55:
                    65:ee:43:e7:e4:ba:5d:08:81:62:5f:53:5e:11:37:
                    87:c0:df:b1:08:28:a4:2c:72:f1:cc:29:94:19:ec:
                    c7:4e:bc:0d:c1:16:87:b4:62:a4:32:49:a1:b8:9a:
                    8c:9b:13:4e:49:29:5b:0d:a5:d6:29:3b:bf:e3:1a:
                    c6:f2:1b:93:d2:8d:ef:28:48:cf:a6:92:c3:bf:36:
                    f3:74:c2:70:8c:83:94:b2:78:14:68:54:fd:f3:42:
                    17:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:04:F4:75:9C:FA:EA:FD:39:FB:54:A9:48:32:22:F1:6B:64:85:FC
            X509v3 Authority Key Identifier:
                keyid:1A:89:22:D3:48:13:08:DB:D4:C2:AB:6E:70:EA:DA:9F:75:F6:DB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goki00gTCNvUwqtucOran3X222g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1b8a9d-d3de-41bb-82c8-7ae263922822/1/Goki00gTCNvUwqtucOran3X222g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:da:18:ce:66:39:d5:d5:21:cb:eb:83:33:c7:d5:b2:f0:05:
         1b:f8:46:07:27:a2:21:73:4a:3d:0f:77:69:50:48:8e:02:e6:
         45:ff:0f:45:3b:26:86:ee:dc:f8:19:7d:99:7c:6f:95:0d:21:
         42:c7:3a:9c:ba:18:ca:9e:70:6f:a5:34:74:f0:91:b8:80:07:
         9c:0c:4a:49:f0:5d:8c:7b:dd:23:06:50:b5:3b:40:76:df:42:
         3e:26:e9:89:fc:31:1e:d3:57:ee:3c:d4:26:04:70:9b:7f:94:
         72:0b:31:74:47:82:d6:98:34:37:b2:55:be:e4:f7:0e:fa:5b:
         e2:01:37:e2:e9:8e:98:3a:2b:ab:c5:8c:0c:39:c0:6a:15:28:
         b9:2a:f7:fc:ab:e9:60:4e:cb:89:f2:82:7b:12:d0:89:f2:96:
         d2:cc:f9:c9:20:d8:9e:11:f5:b0:13:ba:84:51:af:16:b8:05:
         e7:cf:a2:cb:1f:4f:bc:43:90:7b:89:76:28:8f:67:d3:87:ce:
         b2:eb:b3:24:80:56:5d:37:10:a4:b8:cb:8a:45:02:cd:f1:41:
         8c:6e:cf:62:66:1e:1d:b3:ca:b9:14:fc:b2:07:48:16:61:9f:
         23:42:e6:fb:20:b2:be:c5:41:95:85:30:50:aa:9f:16:ae:7e:
         8a:82:e6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----