Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
File:                     gYFECjZ6NNMGvA9oWunNhpUvf5U.mft (raw, json)
Hash identifier:          arqNXhfU7xYFxnEXzU0/W5GqdDSuGCevrkaEkiVWyYY=
Subject key identifier:   5E:34:8B:E8:5A:91:30:C6:EB:DF:EB:32:68:82:B2:83:70:43:C0:DA
Authority key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Certificate issuer:       /CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Certificate serial:       01962F3D4497F3410E1E415E2A58F8DC1DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
Manifest number:          8E
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: 8kCEwQTy5YvIQTKFaII2JxD4ODg.roa (hash: JdAqhL45qRJWMpMP19Zx1i6m/QFY4ebMtaH6THdeVMo=)
                          2: gYFECjZ6NNMGvA9oWunNhpUvf5U.crl (hash: LEpJfgkgQWZ3MazJS2FgiFJY3VYCvSkA13wvZBDapyY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:97:f3:41:0e:1e:41:5e:2a:58:f8:dc:1d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=5e348be85a9130c6ebdfeb326882b2837043c0da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:e3:20:a7:73:c8:31:6f:3c:ad:76:b2:42:
                    3d:c7:2c:fb:3e:de:a0:98:9d:e2:34:4b:b9:e8:c8:
                    c5:1a:46:02:63:ff:2c:0b:c0:d1:85:c6:00:02:98:
                    2c:4d:c7:e0:52:e1:7d:6d:16:7f:57:89:80:84:85:
                    0e:df:6d:14:63:a9:9c:14:86:65:19:50:fb:66:45:
                    e5:7c:87:92:e6:04:44:7e:77:65:05:53:10:67:5d:
                    9e:ee:f9:4e:75:4d:d2:40:2f:b1:91:dd:12:59:56:
                    96:32:06:ce:1d:e6:c1:f4:6e:04:83:f5:ef:39:e1:
                    32:0a:98:2f:61:54:78:18:d8:58:e6:11:cc:6c:05:
                    f6:b7:a3:45:29:05:ae:bc:25:cf:da:ad:81:50:ba:
                    cc:26:8a:4a:c2:af:cc:79:04:5e:f5:6f:c4:e0:30:
                    17:b7:58:7c:b3:57:9a:7c:3f:30:2d:8d:83:94:a2:
                    08:d3:10:0d:a0:53:8e:7d:95:42:99:9b:5d:74:df:
                    5d:02:b9:1c:74:47:0e:de:07:fc:5e:58:23:4a:0e:
                    94:23:d7:1d:7a:5c:a1:ca:06:07:7b:25:cd:5e:fd:
                    de:d3:ae:28:a4:f4:c5:03:19:63:23:38:b9:0b:01:
                    3d:49:3d:96:21:86:c8:36:fb:86:09:13:73:57:9d:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:34:8B:E8:5A:91:30:C6:EB:DF:EB:32:68:82:B2:83:70:43:C0:DA
            X509v3 Authority Key Identifier:
                keyid:81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:35:9e:f8:65:c8:2b:10:7b:8f:b3:33:c1:22:e0:bc:3a:
         db:c5:b4:0e:85:37:21:2c:7b:5d:1b:27:2c:e5:bc:30:5e:f5:
         a4:f3:7d:a5:df:3c:39:c9:8f:34:b9:00:98:8d:a5:2f:e0:e6:
         41:5d:d3:e9:64:ab:c6:0b:21:be:d7:a9:3f:f8:46:1e:49:4b:
         a9:67:64:d0:11:4a:73:e9:0e:a5:1b:20:e3:8c:d6:e9:ec:9f:
         d9:17:51:27:83:da:64:06:1d:3c:56:74:f4:b7:ef:4d:6a:83:
         08:0b:35:1e:42:b8:12:26:4e:f9:2d:74:28:7f:7e:b1:9a:67:
         5f:09:b6:00:6e:5d:7f:02:9f:8f:5e:df:32:89:28:54:df:78:
         74:ca:d5:40:d8:c2:62:62:10:8d:25:1f:6e:b7:17:79:6d:70:
         7c:0e:d4:24:43:53:8b:82:33:3c:05:45:24:fc:1e:87:46:0c:
         a9:89:68:59:e9:4b:0e:7c:08:6b:30:17:d0:13:be:0f:65:7b:
         32:83:ac:38:87:78:2a:01:ad:df:73:bf:57:b3:90:e4:4b:73:
         0b:fa:b7:7a:f0:7d:f4:f8:8e:52:3c:85:75:91:e7:75:3d:93:
         50:12:40:3f:5b:ee:b7:9f:ea:84:76:f0:4c:e0:95:0e:82:3c:
         9f:7c:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----