Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
File:                     gnMxRuPp1uEVRjF_dSGeogLF-S0.mft (raw, json)
Hash identifier:          dY5h9Cc8RCIPqMaYyX+/GWHpMCSX95XJXH0Kegm7Sig=
Subject key identifier:   EA:48:B9:27:DC:ED:97:29:00:A8:87:4A:DA:6C:83:4A:9A:F7:27:17
Authority key identifier: 82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D
Certificate issuer:       /CN=82733146e3e9d6e11546317f75219ea202c5f92d
Certificate serial:       01962F7487C43C249E92B595BE7295F419C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft
Manifest number:          0496
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: Ui37pni8yZO_R93Vyy6g6ty1CZs.roa (hash: KVFAYIQrtJyTceCsFbCiblO1P3leUs2Y5nLFzfChjkg=)
                          2: gnMxRuPp1uEVRjF_dSGeogLF-S0.crl (hash: Qg893aiHOn6ymllqtFDoFgymeCgpW17w4eiBHesARyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:87:c4:3c:24:9e:92:b5:95:be:72:95:f4:19:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82733146e3e9d6e11546317f75219ea202c5f92d
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=ea48b927dced972900a8874ada6c834a9af72717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:8b:fe:a2:5b:43:d1:ac:08:4b:f7:3a:b0:
                    2e:3c:8a:97:31:ac:80:1e:66:c8:77:c6:66:b6:a9:
                    f1:e6:3e:80:9a:08:ba:55:40:54:af:78:4b:cf:19:
                    9c:6a:6b:18:93:5f:98:4f:b8:f0:35:a7:c2:59:0f:
                    cc:76:64:15:0f:c2:ef:13:07:cd:e0:36:4a:2d:c4:
                    13:5d:18:09:ba:44:5a:aa:73:f7:5d:2f:cf:77:82:
                    7f:44:ab:7d:29:71:75:eb:5a:74:ea:7a:2b:1c:33:
                    7d:68:e9:6b:a4:a4:23:29:a4:1f:b7:d4:8f:ed:85:
                    e6:b8:a7:c0:d5:bf:80:a4:80:2e:ad:ca:3f:9d:83:
                    73:2f:f8:56:16:ba:a0:8a:b5:18:3a:63:e5:2f:6c:
                    ed:0d:33:2a:f4:c9:a7:6f:08:08:49:25:df:dd:d4:
                    35:e4:fa:51:d1:58:45:b8:3e:3a:40:38:ea:a6:ef:
                    2e:24:5b:0d:10:7a:e0:bd:d3:98:6b:f7:0e:a6:8f:
                    a1:37:af:c8:4e:7d:1c:1a:92:17:17:f7:90:d3:9b:
                    c2:ea:19:fd:f6:f3:f4:99:24:77:a6:ac:71:1a:76:
                    29:3d:22:09:b4:25:10:b9:4f:28:00:f0:f8:6b:14:
                    91:6e:48:d0:eb:2b:30:8f:8c:40:13:49:ac:93:f5:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:48:B9:27:DC:ED:97:29:00:A8:87:4A:DA:6C:83:4A:9A:F7:27:17
            X509v3 Authority Key Identifier:
                keyid:82:73:31:46:E3:E9:D6:E1:15:46:31:7F:75:21:9E:A2:02:C5:F9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnMxRuPp1uEVRjF_dSGeogLF-S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4d5e16-5e65-4ed8-bbe3-bacb028538dc/1/gnMxRuPp1uEVRjF_dSGeogLF-S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:99:4c:dd:df:19:ea:1e:c2:0c:a3:4a:7d:f2:b0:a7:b8:94:
         8b:ff:6c:b2:11:7c:ee:b3:24:90:4a:ac:8f:83:a8:6b:58:d6:
         e8:05:3a:dd:37:4e:3b:1c:78:9c:f6:b5:61:54:6e:80:10:29:
         ea:aa:d5:ce:25:c7:08:11:7d:34:0f:84:c6:cf:f4:a6:30:a3:
         c7:f1:2c:57:51:d2:06:26:83:ce:a9:2f:97:e5:c7:42:80:9f:
         ce:5c:75:80:de:72:d7:81:7e:bb:82:e2:df:5d:88:d0:a1:1e:
         74:7c:da:51:d1:e0:1e:e7:63:b1:15:c3:42:79:cd:cb:76:e3:
         30:be:95:3d:6d:e1:f0:50:2b:26:64:75:80:c4:2d:de:ac:ba:
         a0:93:f2:90:63:f3:9c:fc:f1:8a:74:7e:6a:a5:45:70:64:6a:
         b9:ec:a1:e6:1c:ba:69:33:d1:3a:f7:47:62:81:7f:23:4b:8f:
         0d:63:9f:71:12:cd:6e:25:e3:e6:2f:98:69:3b:3e:0a:53:2a:
         10:e8:9f:68:f4:d9:3a:89:c6:cb:43:7d:a6:d1:eb:75:4a:2b:
         e8:d6:08:ff:84:9f:0f:a7:7f:56:99:83:cc:fa:f2:7b:0e:2f:
         68:06:8c:ec:46:83:1e:4f:e9:8e:26:df:5e:f5:fe:df:40:af:
         d7:0e:73:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----