Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File:                     glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier:          IXqHoBaynW7ZSI33QZRF9xJGFpIW3bWdUrGtWZu2RjA=
Subject key identifier:   44:BD:BB:10:A7:73:19:5C:64:98:17:F5:D1:39:DC:80:F4:0B:FA:FF
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer:       /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial:       01962F3DE61EF66ED1AE074EE629F8C7784B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: nw3SSK8Sl+ks2+MQLTLzS6FDmh2rbCjGBeKRx74waqo=)
                          2: lygkTHxgqLrXi_NYi2LGSmuJ5cc.roa (hash: EDppdotPGzU8AEyK2ttWShj720ebWYgwK1fN9Apgm7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e6:1e:f6:6e:d1:ae:07:4e:e6:29:f8:c7:78:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=44bdbb10a773195c649817f5d139dc80f40bfaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:4c:ff:c8:39:bf:1f:37:5e:fc:40:68:86:
                    7d:05:c6:ab:d5:69:4e:56:67:51:f9:c8:6d:ff:4e:
                    39:79:ea:a2:9c:0e:d1:73:7d:d8:d9:22:be:aa:df:
                    2f:be:7c:bd:b2:71:83:c0:ac:fa:92:61:de:df:f8:
                    d3:96:34:40:66:83:80:07:c9:84:8a:a9:18:4c:5a:
                    41:63:06:20:ea:8f:68:ab:19:0c:90:ad:01:99:3c:
                    72:71:01:a1:9b:bb:43:3c:81:53:eb:28:66:89:1c:
                    77:6e:80:98:22:b1:66:3d:ae:32:30:00:7b:02:7a:
                    cd:08:6c:67:65:b0:e9:09:79:7e:30:46:f1:04:27:
                    51:92:18:5e:0a:4b:3b:4f:25:3d:83:2e:a1:c8:8b:
                    b3:3f:d3:f8:d1:fa:94:01:f4:19:3e:be:95:54:1b:
                    0d:a3:06:d7:61:7f:b6:50:19:66:8c:dc:82:cb:9b:
                    cd:02:c4:ac:d9:3c:e9:f9:0e:77:b7:14:2c:8f:c2:
                    9e:de:31:a1:e8:1a:b9:01:35:03:7d:a3:0e:41:28:
                    38:f4:1a:69:0a:d4:68:61:87:33:42:5b:77:d6:dd:
                    09:42:80:42:6f:93:62:7f:07:b2:52:4b:c1:cd:5d:
                    4d:32:bd:01:17:e0:c5:9e:23:50:4d:83:26:6a:fe:
                    9b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BD:BB:10:A7:73:19:5C:64:98:17:F5:D1:39:DC:80:F4:0B:FA:FF
            X509v3 Authority Key Identifier:
                keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:11:b7:45:d5:5f:46:2d:df:2f:66:62:5f:39:61:55:4d:ea:
         2f:60:fb:0a:a3:27:bf:0d:44:05:4d:28:1b:33:ce:03:3b:b0:
         e7:48:57:e4:a3:c7:c8:ce:9d:11:9d:c5:f0:be:cb:5b:e6:2e:
         9d:e1:2d:08:7e:a4:16:7a:44:62:c2:71:4f:04:9a:cb:70:28:
         68:0e:68:f6:5b:b1:43:3b:4e:81:7b:a6:ec:4d:3c:e4:29:00:
         2b:cb:84:ff:10:ea:83:a4:99:5b:a6:5f:77:d1:8b:de:a2:6c:
         33:ec:e0:fe:14:56:88:85:ac:bc:23:09:73:af:08:31:cf:32:
         f7:f9:18:60:00:62:97:8d:ac:71:a1:df:1b:4e:2f:ca:5d:e1:
         ee:eb:74:ae:2f:17:d3:3d:af:5c:da:69:c7:96:cd:37:4a:12:
         ff:42:6e:ce:29:01:45:37:4b:82:48:ba:b4:2e:23:32:2b:39:
         90:56:8e:c5:ea:d7:16:72:cd:64:8f:2a:d7:1a:e8:89:54:62:
         0b:54:06:3e:b1:f1:e0:5f:89:eb:54:03:75:ae:09:ce:67:62:
         6c:47:c7:cb:f3:2f:57:bf:e8:ea:c6:58:22:6d:b8:07:5b:a7:
         2b:ae:b4:6a:b7:7a:f5:2a:5c:db:fc:d2:ff:33:34:9d:61:6c:
         ee:95:80:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----