Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
File:                     grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json)
Hash identifier:          nMl6x6N2Pysu82CiyO16WfmWWdPw3Gp8AGH29VN+w/8=
Subject key identifier:   61:DF:EE:BB:2D:EF:40:96:78:ED:66:4E:3D:27:98:13:2B:FB:9C:73
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Certificate issuer:       /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial:       01962FAB9DCFF94537440D2161F6B5B95895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
Manifest number:          0A5D
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: ThgJs3kNUc1TJ0Jibz63Md7g8RA.roa (hash: D2au3KjqostxFd8JOgURC1OsvCTG2y74Gi/MCmrs9II=)
                          2: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: Z06dwmn81GMTsMgORNqXilSV0Fbf1z18+GDKsVN7TKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9d:cf:f9:45:37:44:0d:21:61:f6:b5:b9:58:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=61dfeebb2def409678ed664e3d2798132bfb9c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:8c:a0:1d:00:c9:b4:ab:1f:92:0b:a9:e4:
                    ae:9e:32:18:ec:5f:b1:31:ce:73:e3:4d:79:46:dd:
                    f2:37:89:c1:b9:24:cc:67:75:c7:00:c8:d1:67:0e:
                    0e:8d:52:e7:db:a9:87:8a:e2:b9:cc:86:bb:1a:65:
                    73:cb:15:6f:6c:45:ca:64:fa:be:ad:5d:d8:8a:8c:
                    4b:ff:fe:a6:be:07:97:5c:fd:e2:fa:40:eb:ee:2f:
                    53:9d:6c:c4:e2:30:1c:17:04:6b:1a:32:6e:c1:4f:
                    54:86:95:89:f2:dc:31:08:4f:00:88:05:8d:9e:70:
                    9e:59:b4:2e:da:e3:ad:70:3a:61:ec:6d:3d:1e:2d:
                    4b:d5:a2:db:fc:0c:6c:01:8b:0d:7e:b5:c1:8e:6d:
                    d6:ad:fa:14:2f:36:4f:5a:f4:5f:6d:3d:d6:07:42:
                    f0:a3:31:6a:34:44:38:53:f2:85:6f:dc:15:2e:73:
                    8e:cc:88:11:d7:ac:00:0c:c1:37:3d:5d:19:a3:f0:
                    fe:93:1b:1a:de:70:11:d1:35:1e:4d:4f:a3:c1:32:
                    b5:9e:a6:3c:72:cc:ce:b9:34:2a:03:06:be:ec:e3:
                    9f:84:b5:83:c7:5e:44:72:00:db:77:6c:86:0a:eb:
                    14:8c:f3:94:44:0b:47:c7:66:5e:17:a2:96:b1:40:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DF:EE:BB:2D:EF:40:96:78:ED:66:4E:3D:27:98:13:2B:FB:9C:73
            X509v3 Authority Key Identifier:
                keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:ea:e8:08:fe:16:8c:5b:d5:e4:25:84:ec:eb:a1:f4:bb:24:
         0e:89:bf:d2:89:2c:11:71:a4:1d:c0:f1:85:44:c8:aa:6e:76:
         3e:09:1a:af:35:92:7e:66:3a:6a:2d:6f:69:c8:65:3a:5d:4d:
         5a:d2:bd:2b:58:a4:1e:c0:15:bf:0e:dc:3a:7f:77:8d:0e:a3:
         7d:a2:62:0f:04:24:7c:2f:3f:7b:9e:6a:97:69:f1:21:ee:17:
         1c:08:d6:a4:56:9e:cf:b9:59:03:fa:09:43:07:2c:27:58:c3:
         65:9b:d7:52:44:3d:4e:ec:a4:de:e5:c9:16:0c:e2:70:ce:3c:
         9f:1c:c2:8a:63:dc:50:b7:c4:ca:47:c4:5a:46:4a:38:46:fc:
         39:42:f5:3d:43:cb:c5:c4:ac:5e:7f:09:85:e3:09:ad:2d:33:
         42:a4:ac:da:3d:4a:8a:34:b4:23:c0:39:5a:cd:da:81:03:0d:
         05:b9:e4:36:55:aa:f7:6e:09:c3:72:d2:8d:16:04:85:ce:b3:
         c3:0f:b0:9a:09:ab:81:93:68:d4:23:fa:9e:20:73:c4:7e:0f:
         9e:f7:9c:a3:c0:9c:c2:50:5d:1f:56:23:af:ea:51:a2:2f:08:
         6a:52:33:23:eb:9e:9d:df:55:73:b6:9f:a3:de:8b:c0:d5:93:
         2b:34:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----