Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
File:                     g4dr-7WujP4Ra7X18oZKEWITqk8.mft (raw, json)
Hash identifier:          nNpLngUhGIeyNKHNhcF2etc0DuDjxRlWJt6oQeM757o=
Subject key identifier:   68:EC:BB:D5:5C:86:12:2A:BB:6E:33:56:25:49:F3:B9:16:AB:2E:C9
Authority key identifier: 83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F
Certificate issuer:       /CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
Certificate serial:       01962FAB40354C3AA63895E8E8F1D535826E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: g4dr-7WujP4Ra7X18oZKEWITqk8.crl (hash: WnyVLd3XKN5hXcXG64cNfqZwf7xkJcWErKYQy6PzvrM=)
                          2: on6c4T5uruUZ19cPvyYxdOa3Uo4.roa (hash: DzOTGbti7Ycex9SFmllizCyD+Zg7ddBWN0hhpKZi1gA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:40:35:4c:3a:a6:38:95:e8:e8:f1:d5:35:82:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83876bfbb5ae8cfe116bb5f5f2864a116213aa4f
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=68ecbbd55c86122abb6e33562549f3b916ab2ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:f7:00:18:21:28:43:20:bf:4c:07:a5:41:
                    51:0e:c4:ce:43:17:fb:cc:f8:f3:ac:b1:e5:a2:2c:
                    1a:13:f3:77:bb:97:d6:55:71:08:de:2e:a1:e3:3d:
                    cc:d0:c2:93:5e:5a:50:79:fd:48:55:27:f2:eb:77:
                    6e:1f:c9:90:68:dc:88:8f:0e:81:d8:21:4e:2e:72:
                    d3:92:17:31:b2:f5:3e:5f:bd:90:06:8e:92:5d:59:
                    bd:5c:59:5d:f1:05:b9:ea:84:96:9d:26:c0:bf:57:
                    bc:c3:a0:fb:dd:5f:5b:33:d2:68:b4:40:5b:a0:86:
                    53:f4:8b:a4:cd:1a:fa:98:6a:88:21:7c:aa:42:51:
                    47:32:13:13:2a:4e:6f:2b:b9:69:85:db:6c:13:b2:
                    d3:3d:ea:89:e2:45:d4:c5:39:f1:8a:0a:b7:ad:7c:
                    23:1d:b8:14:a2:b8:4c:a7:b2:6e:ae:10:c2:28:be:
                    34:06:d1:4a:a0:a9:14:95:2e:cd:7e:42:d6:07:42:
                    c5:0a:4b:61:fb:1b:ff:0e:26:85:66:c3:89:45:ae:
                    c1:69:0f:6f:bf:df:96:8c:9b:f7:3f:f0:d7:53:d4:
                    63:01:2b:5d:28:7b:29:ab:de:53:0c:41:ad:9f:cf:
                    d2:7f:dd:fa:bf:62:8d:ec:9d:df:79:3c:a8:61:c6:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EC:BB:D5:5C:86:12:2A:BB:6E:33:56:25:49:F3:B9:16:AB:2E:C9
            X509v3 Authority Key Identifier:
                keyid:83:87:6B:FB:B5:AE:8C:FE:11:6B:B5:F5:F2:86:4A:11:62:13:AA:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4dr-7WujP4Ra7X18oZKEWITqk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/42bd5d-4c3e-43f4-a857-7e709af057d5/1/g4dr-7WujP4Ra7X18oZKEWITqk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:26:c2:da:e0:b6:5e:7f:26:53:72:2f:50:1e:8f:f0:57:97:
         93:b2:f6:06:c3:ac:e0:f1:83:e7:94:0d:c1:8b:17:d5:51:34:
         04:aa:c1:fb:c3:ba:c3:80:e8:b8:e0:3e:bc:74:1d:d0:08:f1:
         df:3f:e7:be:ef:66:6c:2b:e4:3b:31:cc:71:72:35:d4:1f:66:
         74:22:18:7d:61:51:0f:d3:f1:6d:3e:12:4b:e4:24:13:ba:99:
         4a:59:bd:89:ec:b8:0e:74:b1:14:fa:6c:02:85:eb:ed:35:df:
         84:32:af:83:90:74:ac:42:6c:f1:c2:53:14:d2:73:73:4a:28:
         54:8c:76:a3:99:56:2a:8d:c2:a9:b5:90:13:61:c6:ff:e1:2b:
         f4:11:8e:16:02:0f:2e:14:43:7b:ce:bd:cf:91:f1:59:49:2c:
         4d:b4:bd:70:9c:81:66:c2:be:7b:f2:e1:0f:77:2c:53:80:8c:
         2f:87:3e:9b:9f:68:38:aa:e4:9b:68:02:25:9d:99:e0:a5:c0:
         09:19:08:2a:59:8f:6e:f4:be:8a:05:d0:ba:24:c4:df:19:bb:
         b9:59:cc:eb:67:77:dc:6f:4b:48:f3:c1:72:4a:18:40:63:de:
         f1:0e:12:f5:7e:e1:58:ca:8c:69:9c:c9:5a:94:d6:02:62:cf:
         39:15:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----