Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
File:                     giapl0ECulgiFxiL5tSdh3bTvrs.mft (raw, json)
Hash identifier:          B6fG340lGnu1ipSScX4LVtE2xG8qsFljhTlxbOVeXII=
Subject key identifier:   7A:BA:DB:89:EE:9E:84:3A:B1:31:64:2B:23:B2:B3:A9:75:BA:00:49
Authority key identifier: 82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB
Certificate issuer:       /CN=8226a9974102ba582217188be6d49d8776d3bebb
Certificate serial:       01962F06C71643CE6B8A93E16DC1C45C0493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft
Manifest number:          13DB
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: bHa5FimsimJ7r5ToFYrryDiB-9M.roa (hash: fOdUqsDSfmPIMyaQ7PWVxrcyqzptZELP3xikWCnwSh0=)
                          2: giapl0ECulgiFxiL5tSdh3bTvrs.crl (hash: PurAjswP9FF7NpBKwWtMygjLgzG2BQnJpJteKzP2cEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c7:16:43:ce:6b:8a:93:e1:6d:c1:c4:5c:04:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8226a9974102ba582217188be6d49d8776d3bebb
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=7abadb89ee9e843ab131642b23b2b3a975ba0049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:c3:47:3d:7a:26:45:0c:7b:ad:62:18:f0:
                    75:a0:19:c2:3d:85:02:2d:d0:01:79:62:d1:a8:63:
                    85:bc:38:77:14:35:ab:89:5f:92:5a:05:4d:bc:d5:
                    f5:41:40:ff:51:01:e7:0f:70:b6:f4:19:c8:66:a0:
                    f2:49:8e:0e:b1:db:6b:4d:b8:ab:6a:68:aa:cd:1c:
                    e3:9d:02:63:86:79:a6:e6:f5:fc:e9:65:c9:be:a5:
                    b3:72:91:33:25:bf:b8:d3:ce:cd:63:80:93:93:e3:
                    33:98:8c:60:37:ff:64:30:03:a6:fa:d0:3d:20:66:
                    c6:63:f1:63:b8:3c:8e:93:91:56:71:cb:8c:00:89:
                    92:88:44:e4:09:13:ba:6e:f5:d2:4e:0e:f6:92:30:
                    39:ac:30:87:1f:04:35:33:74:2b:95:7e:bc:d8:fd:
                    4a:ce:b0:65:6e:fd:59:68:29:56:fd:20:ff:f3:64:
                    75:52:77:f0:ff:47:18:22:85:43:4b:f3:49:42:77:
                    0e:70:b8:a5:fa:96:b7:b5:35:c0:c2:0b:da:84:f6:
                    7b:d9:fd:01:e4:2d:50:41:4c:28:de:e4:aa:16:1d:
                    c0:69:7a:16:99:7d:6e:f5:83:c0:0e:bb:13:59:e5:
                    82:fb:70:f6:b8:13:38:28:b7:ff:5a:ec:b4:a3:01:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BA:DB:89:EE:9E:84:3A:B1:31:64:2B:23:B2:B3:A9:75:BA:00:49
            X509v3 Authority Key Identifier:
                keyid:82:26:A9:97:41:02:BA:58:22:17:18:8B:E6:D4:9D:87:76:D3:BE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/giapl0ECulgiFxiL5tSdh3bTvrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/35477f-80d0-4ea4-bbde-767b72eb407b/1/giapl0ECulgiFxiL5tSdh3bTvrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:10:ae:85:13:be:bf:f7:47:2b:45:9f:05:30:4d:00:34:
         71:1e:da:2c:fd:cb:c4:3f:84:07:96:cc:8f:af:f1:2a:0b:1e:
         29:24:76:5a:af:cd:b6:9d:a0:31:76:7a:41:42:aa:e0:0c:b7:
         02:54:bc:e5:24:61:17:f4:f7:67:4e:54:73:f5:d9:47:a8:6f:
         8b:67:5d:05:95:c6:8c:6f:47:16:17:ed:35:7e:10:67:be:e4:
         ca:8e:e5:bd:52:f2:cf:fc:04:6b:85:70:eb:1e:f0:64:53:99:
         a2:c7:32:f9:4b:a6:d1:35:23:b5:88:a6:3d:79:e1:ec:ca:91:
         fb:61:c9:2c:a0:10:c1:b8:8a:19:9a:2e:81:b2:48:a7:8e:12:
         80:4f:a1:24:b6:61:fb:20:03:2d:8f:9d:64:15:28:2d:31:ae:
         11:b2:2b:d3:5a:24:19:c8:73:55:7b:1b:cb:59:4b:55:09:1e:
         21:19:19:e2:e9:cb:47:d6:c9:bc:7f:c0:5c:6b:9d:6e:7c:33:
         de:07:75:66:1f:a6:f4:08:35:62:c1:1d:6e:6f:e7:e5:8d:79:
         83:18:30:7a:8b:57:8a:77:a0:a7:89:20:a1:d6:2e:cf:d5:02:
         54:b2:ef:a8:4f:5a:7c:c3:5e:4e:f3:9e:5a:b4:af:26:1e:f1:
         57:c4:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----