Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          V/qN8f7hIOPKyw4+LC5fqr87A+jocyEXDCDcsVQfjKs=
Subject key identifier:   32:B5:11:07:9B:4A:3B:E2:C5:CB:4C:FD:B3:24:1F:8B:E3:25:3F:D5
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       01962ECFBA3DE8220CAFA8A9301504B132E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: 78X0IG7SGTb_CqUUoAsl9rOEOoQ.roa (hash: dHUSFpGblHkPXU9NYMPaCtIz+bczpLlHXComKZfL/BA=)
                          2: FQcgCQcG__7aM5eRsupFU2EPhlA.roa (hash: xigvLo77r4Zkdva8w7DgHnMdwBCwRTMrZ+SBoUs6iWs=)
                          3: MfGfVoxcZRKcXeryJdrARrFNT30.roa (hash: NP17Awbv8VvBz7g9no++bSqGAeudeK0bPJQ8VG+ovrs=)
                          4: WD7CCMj1boEtISgVQIZGdGTenUQ.roa (hash: 4IOANIE3kXmhVP0/F3MzPDZJAgrgCHcPBEmcnYUkUzc=)
                          5: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: fnrpTqz01pqUa7nEDT4AF4PiNCT85FqiGX4ZyQhGFLg=)
                          6: sjitqywkz9ufiQpRQwXHpL0dJPA.roa (hash: O1YNzqfVoGDW6rve4zWAx2oDjZ7sBc+TeGZe932UNgQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ba:3d:e8:22:0c:af:a8:a9:30:15:04:b1:32:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=32b511079b4a3be2c5cb4cfdb3241f8be3253fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:80:ad:2c:91:5e:8b:2d:93:81:87:c4:09:
                    e7:a7:8a:c2:14:c7:39:c6:8c:19:d3:05:ad:ca:98:
                    0b:73:e8:bf:f5:92:0b:ec:af:fd:27:80:da:09:3b:
                    74:3a:e5:f8:7d:66:52:86:04:eb:cf:70:92:0e:bb:
                    29:dd:d3:82:35:79:37:41:c2:27:bb:a7:8c:c7:dc:
                    dd:cc:52:d3:ee:eb:49:86:fe:be:fd:fc:f4:a2:78:
                    66:d7:cf:64:c7:79:e2:da:99:ae:ad:68:95:23:16:
                    9b:d9:33:82:39:77:93:34:e4:5c:30:ff:9f:f5:2e:
                    32:ff:8b:be:b7:c2:bd:df:cb:05:60:d9:d8:39:e0:
                    c3:60:8b:54:80:fd:89:af:01:dc:7f:a7:f2:e3:12:
                    ce:b5:fd:fa:c2:4d:a8:81:bf:a9:68:f1:0e:0d:9a:
                    f9:f0:4a:15:ec:cd:f0:ef:0d:04:e1:bc:cc:7c:6a:
                    b3:f9:64:a9:13:5a:33:44:d1:2b:74:81:58:3d:db:
                    9e:af:1d:c3:b4:9d:66:4b:35:52:d6:74:1d:0e:4a:
                    9a:6e:f6:d5:e1:a7:65:94:f8:5b:94:59:a1:4f:fa:
                    61:06:42:e3:63:b4:1e:0e:2d:96:c5:fb:c9:2e:61:
                    5f:7a:83:79:3c:37:03:5c:68:a5:d4:39:d2:d4:27:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B5:11:07:9B:4A:3B:E2:C5:CB:4C:FD:B3:24:1F:8B:E3:25:3F:D5
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:83:6e:cf:e9:9c:ba:72:af:0b:f4:6e:73:1a:fb:2f:b4:
         02:8d:80:77:ce:1f:f9:d4:22:f5:a2:70:26:10:db:d1:a5:46:
         2c:68:01:5a:66:d1:24:9b:43:07:e1:7a:d0:ac:32:58:37:30:
         b4:10:e7:16:bb:04:b4:64:53:52:a7:60:b9:45:60:88:73:1c:
         53:93:b6:c8:8c:c2:df:9d:d8:25:a1:5c:ff:94:2b:32:f6:97:
         41:f0:8c:9b:d8:0d:da:2f:14:c2:c4:06:8a:7b:cd:57:e0:a2:
         eb:2b:54:5a:49:73:44:e5:ee:ea:61:57:3b:00:54:b9:a8:5e:
         0f:2a:1b:1d:a6:cc:9e:b7:63:20:f9:3d:2f:cf:10:63:77:41:
         41:56:58:d7:b4:47:f8:f0:18:b4:0c:ee:8e:31:bd:19:b3:2a:
         1d:59:88:f5:0d:9f:21:96:92:93:a8:02:98:4d:c5:bc:ac:f6:
         81:af:ec:8b:a4:16:7c:0a:eb:32:c7:8e:17:28:88:79:5c:b9:
         68:78:86:ac:f3:db:34:7f:a8:44:5d:98:48:fe:88:99:fd:56:
         51:a0:d6:f8:6e:6e:50:6c:f5:6e:dd:4a:49:93:98:e9:02:b0:
         ca:c8:38:fc:0c:36:e1:2a:02:b3:5b:96:a9:a5:a2:03:a8:18:
         79:ec:32:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----