Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
File:                     gcEVEu7o_tkcQi8ztljWi8NOt4A.mft (raw, json)
Hash identifier:          4WQ2fBLQYFrJPYZR07dCbp39wOZUARiTFOZxZ2FRlyk=
Subject key identifier:   08:23:E8:FA:A0:A4:CC:63:15:F6:38:4F:0A:F0:99:E2:28:8B:D8:20
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Certificate issuer:       /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial:       01962F3DD25D11D5B1CAC7CFD5ACDE8D2D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
Manifest number:          089A
Signing time:             Sun 13 Apr 2025 13:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:42 +0000
Files and hashes:         1: gcEVEu7o_tkcQi8ztljWi8NOt4A.crl (hash: hnErEfB09a0nyRMg8HIQ4wxUVc0/Czw/Gklu7pCQaes=)
                          2: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (hash: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d2:5d:11:d5:b1:ca:c7:cf:d5:ac:de:8d:2d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
        Validity
            Not Before: Apr 13 13:01:42 2025 GMT
            Not After : Apr 14 13:01:42 2025 GMT
        Subject: CN=0823e8faa0a4cc6315f6384f0af099e2288bd820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:4a:c6:00:71:5e:70:7c:e9:e8:ed:c1:87:
                    cb:bf:cf:8c:b3:40:96:c4:aa:ef:d2:68:e1:f7:7f:
                    9f:67:70:ed:1c:60:f9:4c:24:b9:5c:c7:fe:14:60:
                    64:21:f3:c9:42:c2:be:01:69:cd:ef:68:04:dd:f5:
                    5e:92:eb:81:d5:8e:4a:43:d7:33:31:fe:a8:b6:0c:
                    86:63:c7:c1:58:51:b7:90:83:21:be:d6:2a:f7:95:
                    97:ba:a3:87:26:b0:a7:f8:e7:bc:41:a5:6f:fc:71:
                    aa:04:08:39:35:0a:f9:97:e6:cb:a1:5e:b9:5e:e2:
                    12:85:75:cf:ab:f9:a1:05:0d:1b:4b:77:a5:23:28:
                    2a:ce:92:ec:30:d7:f4:32:33:84:a0:ed:72:56:ea:
                    aa:93:73:a7:6a:4c:e3:19:7a:71:11:6f:4e:12:00:
                    69:78:55:9c:02:e1:d1:d5:5b:21:4f:c2:17:39:c7:
                    f6:f7:3b:0a:fc:6b:56:d6:b1:a6:7f:ce:08:f8:8e:
                    61:f4:fa:17:8a:c7:9a:99:db:22:13:90:1d:b1:c2:
                    56:cc:9a:a8:99:23:b1:2d:70:7d:71:82:28:0e:f6:
                    67:de:c1:2b:6c:ce:60:1d:ae:1f:92:e8:70:00:ba:
                    be:ae:c6:86:42:28:69:30:b7:b1:c0:c6:ed:9e:ca:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:23:E8:FA:A0:A4:CC:63:15:F6:38:4F:0A:F0:99:E2:28:8B:D8:20
            X509v3 Authority Key Identifier:
                keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0c:eb:4b:35:3f:cd:ae:14:91:2c:cc:d0:a3:c1:86:c0:03:
         d8:99:b2:5b:d4:d6:d0:34:a0:6a:16:e2:1b:78:31:5f:bf:82:
         e2:a0:9a:7b:b9:39:6a:cc:7a:93:16:b8:ba:76:be:bd:36:58:
         b5:bd:20:ca:dc:2a:5a:33:32:43:a8:b3:13:64:ea:ac:3e:3a:
         3b:aa:db:4f:cf:89:34:7c:0a:be:ac:e6:9c:22:49:82:5c:c8:
         5d:79:3f:24:2f:cb:38:21:fc:b3:4d:61:77:8a:7a:17:f4:00:
         fb:65:53:a7:fa:6a:9e:80:86:e5:cb:d1:ec:bc:c1:29:3d:bb:
         8f:fc:d3:cb:31:47:3f:59:01:7e:e0:95:09:98:db:10:c5:b4:
         08:de:e3:93:1c:10:18:d2:32:77:3b:16:46:7e:12:5f:a0:37:
         9d:aa:fb:9c:d1:fe:ea:52:31:da:90:f7:84:86:fb:d0:26:25:
         e1:41:cd:36:79:7f:37:41:ce:d4:c5:76:57:a4:fa:74:5c:c5:
         ba:24:1e:2a:6b:7d:7f:f2:76:48:4e:ef:62:fb:42:dd:47:35:
         89:2f:d0:f7:0d:1d:d1:f0:4a:6b:5d:27:e9:32:3f:83:fa:69:
         ce:8b:36:8e:c9:97:90:b1:27:2b:8c:d8:01:03:e1:0a:b1:5f:
         13:c1:9e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----