Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
File:                     gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft (raw, json)
Hash identifier:          XMgoyCvwS0IKU/Stw+6kZFHwV7KTywRQJvxZ4jn/fV4=
Subject key identifier:   71:BB:59:01:F0:07:3D:F4:F9:39:9D:2E:0C:F7:6D:57:1E:F7:87:E1
Authority key identifier: 82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1
Certificate issuer:       /CN=8293905afa134944f0630c949f3abda40646dac1
Certificate serial:       01962E2ACAE9906FD26B1E513E9FA21284B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl (hash: GtIcFFQfwreQ30mXvgLu2dAKbN0hVODrfPQiU2sIwvs=)
                          2: xqh-TDqxA6PFl_pLopVGhxzgy70.roa (hash: PFQ4rC1LE7WPTBJwr+kRgUbb+SgESq5u6lAAWw+3gVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ca:e9:90:6f:d2:6b:1e:51:3e:9f:a2:12:84:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8293905afa134944f0630c949f3abda40646dac1
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=71bb5901f0073df4f9399d2e0cf76d571ef787e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:99:96:aa:19:b0:a4:e8:9a:be:57:2c:37:
                    dc:79:1b:cc:07:b4:ad:be:b1:b7:e7:f2:f9:62:05:
                    d4:f6:73:3c:e4:c8:31:77:b8:df:cf:bc:38:4a:82:
                    c6:d6:2e:8b:e7:80:74:95:45:1e:28:8d:f5:aa:1b:
                    c7:ba:6d:8b:63:4f:e3:0e:a0:a2:45:7d:8b:e0:f3:
                    f5:50:df:cb:d0:e2:02:b1:ef:5a:a6:45:92:cf:9d:
                    e2:25:04:45:2d:3b:54:4b:ce:53:c1:66:da:37:3e:
                    90:23:03:dc:8a:43:bf:db:6e:74:20:0d:1a:81:09:
                    ee:7c:8b:c6:dc:8e:3a:a9:c6:74:fc:06:63:6f:7e:
                    c5:ef:3a:50:6e:76:15:b1:05:89:db:9a:91:22:61:
                    94:3b:34:f4:73:43:83:11:a6:1b:58:8e:40:9a:d0:
                    95:ff:a2:fa:b0:cc:69:76:2f:d8:a2:64:e1:ee:a1:
                    30:c8:81:b5:27:81:6f:06:7e:d2:c4:cb:1c:e8:69:
                    15:26:59:a5:d9:59:e4:7c:bc:3c:50:e8:9c:ad:d8:
                    2d:39:73:e6:38:a7:17:49:66:83:97:8e:f3:5f:70:
                    e4:e6:6a:5e:f7:a2:b8:e2:8c:11:5d:72:a3:7c:24:
                    b4:02:64:95:c9:5e:1c:9b:1b:04:1a:07:42:2e:14:
                    ae:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BB:59:01:F0:07:3D:F4:F9:39:9D:2E:0C:F7:6D:57:1E:F7:87:E1
            X509v3 Authority Key Identifier:
                keyid:82:93:90:5A:FA:13:49:44:F0:63:0C:94:9F:3A:BD:A4:06:46:DA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gpOQWvoTSUTwYwyUnzq9pAZG2sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/e1c373-64f8-4226-9044-81095a13b9de/1/gpOQWvoTSUTwYwyUnzq9pAZG2sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:f3:3d:1c:83:44:bf:56:61:df:74:ea:e9:e7:43:c1:de:
         64:9f:10:e6:12:60:d7:7e:e3:04:3e:a9:63:51:39:04:e0:8e:
         3f:ee:0c:42:dd:dd:ed:bb:7c:7d:53:1b:2c:92:65:b4:31:54:
         0d:e0:01:2e:b8:c7:52:75:ab:dd:69:9d:66:d6:da:65:f9:e7:
         1a:6f:6d:d7:e9:4d:7d:74:10:f7:8f:49:ec:a7:74:6c:81:3e:
         b9:d9:c0:df:66:ed:f5:ae:72:a3:80:42:a6:05:ae:8c:40:ee:
         fc:ef:9d:64:bd:ab:0c:c2:86:2d:d6:80:c2:ea:65:0f:c0:3d:
         f0:21:66:1e:e3:1f:6b:6c:f1:5d:a2:69:29:76:89:5e:a7:47:
         06:41:8e:b5:d9:ed:74:76:e1:20:b2:9e:c8:c8:a1:15:7e:70:
         e3:7d:d7:66:ee:8d:8f:6c:61:f6:0e:dc:d1:02:63:0a:45:0d:
         26:1a:1e:94:17:2a:aa:80:f4:57:76:2a:5f:41:17:50:26:24:
         25:4d:6e:28:7b:1b:a0:a2:a1:c6:0f:a2:9c:e5:93:20:5e:70:
         31:24:6f:6f:06:dd:a4:8a:09:40:c5:2d:60:61:29:02:8b:88:
         99:de:be:da:39:5e:6b:7e:4b:47:ba:a9:33:1f:46:f7:bf:e1:
         b2:54:d8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----