Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
File:                     g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json)
Hash identifier:          BcyKz1zjmOn+CeAwEMsM8vXIYYGELVZeARgElTx1RmQ=
Subject key identifier:   DF:5B:2F:B0:DC:67:76:45:A3:70:B0:4B:0C:A4:68:6A:CC:98:13:A7
Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
Certificate issuer:       /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Certificate serial:       01962F06DDA4697968480AB27BF49B0AE1A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
Manifest number:          010C
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: 0otUjOmrbrE-UtuXVDDSBPTMgt4.roa (hash: /6O4kder5Q4c9HIL3TM9q/fRb3AXNbQJDsO22/m8/9o=)
                          2: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: E8y54CRyDnUkIPQGBmjJ/bwRFLD23bEUPwYPMGkQSJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dd:a4:69:79:68:48:0a:b2:7b:f4:9b:0a:e1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=df5b2fb0dc677645a370b04b0ca4686acc9813a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:63:86:7e:d5:b4:71:b9:a9:d3:cf:89:33:14:
                    bb:1a:cb:b9:7f:99:fb:74:15:b9:e7:55:bb:32:dc:
                    7d:cd:9a:c1:4e:50:9c:ed:5c:5f:58:4d:9c:19:ab:
                    34:52:0a:6f:c2:55:5a:8f:f4:93:21:3e:30:ac:be:
                    6b:3a:8d:7e:4d:ae:0f:51:61:ac:ae:89:a7:40:f9:
                    4c:83:70:d2:3e:47:ff:36:56:8d:f8:fb:9e:43:70:
                    92:0d:4d:65:99:f0:a3:7c:0d:66:ff:98:10:ef:2a:
                    3f:5e:92:5c:d6:72:3a:f4:a5:bc:a1:40:6e:5e:95:
                    0e:c0:28:16:88:1f:af:cc:1f:78:dd:f9:31:23:ab:
                    9f:b3:4a:33:38:61:9b:d4:17:e3:b3:d8:8e:05:57:
                    a3:03:bb:1e:1d:6b:fb:d6:5d:13:f6:4d:ca:b5:63:
                    63:cd:77:22:45:3c:d3:dd:cb:30:a6:68:ee:25:5c:
                    8f:0c:98:a3:92:51:85:2b:e0:c0:bb:d5:4c:0a:2f:
                    8f:8f:df:93:48:10:6a:b1:ee:84:d6:2f:60:c2:4d:
                    de:f1:04:99:64:04:25:35:e9:9c:e2:c2:b3:4f:8b:
                    4c:61:9a:da:f2:8c:d5:da:a7:7b:a6:22:00:8e:51:
                    09:78:b9:f1:e5:d6:1f:53:98:14:54:7f:cb:be:a1:
                    85:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:2F:B0:DC:67:76:45:A3:70:B0:4B:0C:A4:68:6A:CC:98:13:A7
            X509v3 Authority Key Identifier:
                keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:70:e9:5e:0e:d7:02:ff:43:40:8e:31:9d:0c:48:47:e7:97:
         71:6e:d6:3c:63:fb:cd:00:5d:c6:7b:2e:38:7c:05:6c:b4:d1:
         72:1b:fc:f6:6a:4e:93:fa:b0:1b:51:22:ba:0b:2a:6b:de:d7:
         e9:46:2c:db:b7:7d:df:07:20:20:d4:3a:3a:cc:4d:92:03:1a:
         a1:03:5c:9a:3a:3c:6c:d3:c6:ee:67:e5:17:7f:93:01:a0:34:
         4c:f3:a0:90:10:18:9b:56:ec:b6:d6:c2:54:1c:c5:34:65:f4:
         c0:8a:26:b8:ec:dd:4a:b0:03:68:e2:9d:3b:71:0c:61:65:a8:
         87:f4:b6:72:5c:aa:00:67:7a:05:70:4b:a4:17:1b:ef:89:d3:
         18:39:8e:7c:7a:2a:f0:99:bf:51:9d:82:ce:6f:7f:55:d3:02:
         4a:b4:d7:99:e1:40:94:92:c7:8f:29:cf:ee:bf:71:96:74:e6:
         03:65:65:b3:48:84:60:09:ab:5c:0e:66:07:54:37:8f:10:3a:
         16:d3:80:1b:02:46:bc:38:02:57:ab:21:82:d1:81:8e:78:50:
         90:44:5c:a3:a6:f7:d6:1a:67:5f:3c:14:23:97:52:b5:df:66:
         c7:06:0a:6d:4e:2f:c5:f3:40:47:88:19:73:7d:7d:96:af:08:
         9c:0e:f1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----