Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
File:                     gFBQT0sXdugLitn4s1bmE7WFs1o.mft (raw, json)
Hash identifier:          +d1WVamFEGaKNBLrDz9zzxMkNvgelUuIxZCSYCTqLs8=
Subject key identifier:   C7:3D:37:8E:83:3C:D1:CF:C4:47:58:89:46:72:76:B5:3C:4B:8A:BC
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Certificate issuer:       /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial:       01962E61805EFEF01771C0B5630A44A58F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft
Manifest number:          100D
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: Yk_mB5Br41Nhda13vL3dksE5LgU.roa (hash: K0LuZJCRzNJs5Bjbkimkjj4nwWKGnFgBw0hG+qjP3AM=)
                          2: gFBQT0sXdugLitn4s1bmE7WFs1o.crl (hash: Ccj4GZbLSfkzrLmgDy1znEJi+oSgJHt/KrL3D0E3jSo=)
                          3: lkCjPKHQ8Kw51UGG5Fx-gWmfZeo.roa (hash: IrYEpIdSCLf/ZAAdJvK3O7zC/ibmRmQLp4sdzgkQJvg=)
                          4: mRlLG-5kU_wBciWClXIVvCGQxeE.roa (hash: ZuSklCsUXIbLUEwi1a/wPQy/93NYaA4MC8miFKmm96c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:80:5e:fe:f0:17:71:c0:b5:63:0a:44:a5:8f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=c73d378e833cd1cfc4475889467276b53c4b8abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:7a:80:6b:94:e1:f9:0c:8c:ee:1d:1a:b0:
                    11:cc:b6:b2:4d:00:d1:73:ef:9f:c2:18:09:96:af:
                    79:36:e5:7c:91:4e:73:c2:0f:a0:5e:72:a3:ec:4a:
                    80:b6:8f:b5:4c:31:ba:13:d7:97:ee:e6:bd:5b:f7:
                    08:5c:51:6f:73:24:11:ce:d0:48:bb:5f:da:c9:8d:
                    4f:26:e0:7f:52:66:b0:91:46:ca:34:b8:9d:77:68:
                    5b:3a:08:24:35:76:e4:a3:24:b4:61:21:70:5c:e4:
                    f5:59:60:8e:ef:58:f5:8a:7d:9a:37:2e:c1:dd:d5:
                    2d:24:98:eb:51:5d:e0:89:38:e7:40:12:53:12:c8:
                    ca:80:63:b8:45:89:e4:01:ac:94:37:d5:29:94:f7:
                    a2:ea:d9:9e:7d:6a:8d:65:74:bb:9f:fb:4c:cf:da:
                    5c:ed:5a:9e:3c:8a:f6:e5:e2:5b:ef:a7:c5:ca:48:
                    de:80:4b:66:cf:dd:bf:7e:4c:3f:eb:1b:ed:ac:30:
                    dd:85:44:df:08:bf:98:a4:19:f6:86:4f:65:b7:11:
                    e3:64:86:86:6e:34:33:b6:af:4e:34:24:a7:c0:a1:
                    87:bc:e8:22:01:73:04:06:33:c9:82:dc:e4:ca:f1:
                    d2:8d:8e:64:59:ed:97:21:20:30:a5:31:c0:1e:28:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3D:37:8E:83:3C:D1:CF:C4:47:58:89:46:72:76:B5:3C:4B:8A:BC
            X509v3 Authority Key Identifier:
                keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:41:f8:9e:98:37:43:37:91:af:e6:ac:ad:c3:93:b0:c4:c8:
         c0:75:ed:06:9a:e3:06:5c:a1:09:c6:94:ca:6f:52:46:af:79:
         cd:f8:65:fc:d8:57:5b:a8:a4:7a:e2:db:5c:bd:eb:b4:a3:c9:
         86:94:1a:1c:c0:7d:82:e0:d7:0a:4f:8b:da:56:ec:99:f6:7d:
         c9:fa:01:2c:c5:96:45:f3:c2:4c:0b:19:aa:5f:73:fe:11:bb:
         b3:90:ce:89:70:8e:ed:02:18:d6:fe:51:a0:5e:48:1d:86:47:
         cb:5e:a8:53:2c:76:66:fb:49:13:8b:c2:18:25:36:a3:bc:dc:
         aa:34:aa:de:e8:2e:16:fe:21:fe:86:cc:95:1a:67:ce:13:59:
         1a:8b:00:35:7e:4d:ca:9d:58:20:b4:22:98:f4:51:ef:4b:f6:
         2d:ec:c6:c8:58:c6:28:59:cc:55:03:f7:2a:f7:1a:a7:65:d2:
         e9:d8:bf:07:d8:53:16:c8:be:87:11:dd:49:b5:9d:4e:32:3c:
         c7:86:d4:ae:e6:59:b8:12:8f:5c:e4:0a:f9:e7:84:9f:a0:b3:
         29:d2:36:e5:e2:9f:3a:da:06:6b:d9:39:53:20:01:15:d6:bb:
         35:36:e3:ad:2c:0c:ba:91:92:ca:6f:1a:6f:f1:0c:62:75:af:
         89:26:fb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----