Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
File:                     gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft (raw, json)
Hash identifier:          7tNELDbs8/+/owGMdKaTIw/2x7itERjZ1BcihRQrHvw=
Subject key identifier:   E9:AD:6B:6F:3E:5C:A6:A0:5F:F5:A7:43:34:62:E4:E0:D2:AD:44:45
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Certificate issuer:       /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial:       01962ECFA7DFF449C5971C0D3B6D2A76B6E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft
Manifest number:          1446
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: 7bfhk4avMv3aXwEYlLbXhXoy75k.roa (hash: ahW1+x6JyHSj5mcCjtaoHK41xJuZSnTDOh9RfWnmSUA=)
                          2: gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl (hash: XYkNUB+0HPpTZxC6hyvnCGe2BF13IUdXdRmbhJh3PE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a7:df:f4:49:c5:97:1c:0d:3b:6d:2a:76:b6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=e9ad6b6f3e5ca6a05ff5a7433462e4e0d2ad4445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:18:43:5c:d4:d8:d5:89:33:ff:02:9b:5d:5f:
                    13:88:f8:47:37:61:41:9e:1e:25:fe:cb:74:6c:ad:
                    e4:dd:33:10:3c:e3:3d:81:1c:98:48:22:ff:51:bf:
                    02:f4:25:05:6d:b4:53:5f:02:b0:d2:db:8f:ce:a5:
                    e4:ec:24:4b:ad:46:ce:9b:00:e7:1b:7a:ae:68:71:
                    8e:8d:83:1f:1e:3c:75:f0:28:d9:d1:f6:4d:6f:64:
                    ca:e7:f1:64:55:3f:89:9a:04:9c:97:ee:5e:5e:4c:
                    c0:4a:21:ea:14:2b:ea:66:91:d9:c5:a1:33:de:26:
                    48:e4:16:63:a3:d1:51:d4:82:34:1d:b1:4f:52:e1:
                    fc:49:e2:17:9d:9c:7e:55:0b:c2:99:a8:69:da:35:
                    2e:25:0c:5a:8e:a7:1c:f2:08:02:06:ad:76:18:ec:
                    2a:83:cd:4d:f4:c4:f8:05:55:f7:39:ef:7f:32:93:
                    c3:6e:5d:ba:30:44:71:37:c8:a9:b6:02:78:32:56:
                    97:3b:99:c7:2b:04:9b:fa:d1:88:9e:c1:6a:53:cd:
                    b6:c1:bb:ed:23:03:a1:94:d7:19:87:25:8b:80:ca:
                    5c:cf:f4:cd:b7:67:f2:24:f5:62:f1:ed:ab:cb:a5:
                    fe:db:0c:79:3d:fa:dc:77:45:8d:9c:ca:ae:1e:38:
                    83:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AD:6B:6F:3E:5C:A6:A0:5F:F5:A7:43:34:62:E4:E0:D2:AD:44:45
            X509v3 Authority Key Identifier:
                keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:f0:27:60:a9:d5:59:f3:d7:55:70:fa:1f:80:39:9a:5f:
         4b:9d:59:d0:39:f9:53:7d:44:75:6b:a3:c3:f1:2d:75:b4:02:
         af:dc:4c:60:27:2c:12:4e:0f:a3:6a:e0:5c:d9:b1:c5:48:dd:
         22:ca:82:81:d4:cb:bf:3f:45:5d:0a:1b:49:e4:2f:2f:7d:c6:
         f0:17:03:e0:c3:19:96:d9:20:11:c9:ea:3f:7a:34:b8:e2:0f:
         a5:46:db:5e:77:8d:a8:b4:0b:81:8e:26:65:3f:9b:86:c7:a2:
         c8:03:bd:e7:d1:e0:fc:de:92:78:ba:8f:9d:73:cb:48:9e:fc:
         2e:bd:e5:0a:5c:c7:0c:e3:43:5e:4f:89:ea:0e:92:a9:65:ca:
         09:f9:2a:e1:5e:bf:d1:76:1b:30:c0:30:eb:4d:33:cc:93:3b:
         32:8d:c0:ae:f8:b9:04:99:6f:c0:8d:0f:26:55:a3:68:7f:80:
         58:0d:00:ce:6c:5e:b2:17:fd:4b:eb:54:ff:35:c6:65:4e:91:
         e0:a3:c6:b4:a7:b7:cd:e2:b6:21:41:57:fc:49:34:af:f4:58:
         65:f4:dd:5b:67:b1:bc:aa:37:9b:28:84:75:4d:6e:db:37:87:
         88:b8:37:da:03:d1:e7:8e:6d:9b:d9:b6:65:c3:86:87:54:b5:
         04:d2:e1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----