Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
File:                     kGIGOModg1ZQ4I3c82PxB4m1MFc.mft (raw, json)
Hash identifier:          +h8McOeXSob0kKMerv9YEY2xmRvUFiWjqB19Xuu/MeM=
Subject key identifier:   97:B7:74:89:D0:F0:F2:20:5E:28:AF:FE:70:91:FD:D0:54:3F:B1:F1
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Certificate issuer:       /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial:       01962FAB4111D774F44F1C2B0C7917113A6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: 1YWYnMlB7bNjXZ-mR2gEvtLN3Bc.roa (hash: iv4yYaqxX9/BpncOJNi6FP4hgIeS1SbHKqiyIfxcth4=)
                          2: 4CDjeVRMh18gOoZFQB0kG87F3Ac.roa (hash: iS2zUZpr0OcJtSkJuXKr1ZglVEc7UdAcxQ+F6PuEqkI=)
                          3: CDG-7PWVVdm5Z7h-n4Ap6W6lHRg.roa (hash: 7yd+Jrhn2cJ3wJGfKqF6or4RqCKrwJRg13HNF9MQpQc=)
                          4: Kr-1FkX8isznu7LNjpkGbo9RXAQ.roa (hash: Nkup561eSF2a1lVSMy8ZbGKlbupLimNEQbbUAaz0DIc=)
                          5: Qxvf4dambUM4wGGmpG65pgeoc3M.roa (hash: dkmpKTZscpBI0IsTqLbisMD9yO7kEmJGfj1/YKPtkuc=)
                          6: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (hash: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=)
                          7: SkASK4zN7bPehdagCz89JkwUfsA.roa (hash: d1RW1sYrndntlpLL9/PiKBPVX2QhXX5rJ7D+z0FCw9w=)
                          8: kGIGOModg1ZQ4I3c82PxB4m1MFc.crl (hash: tC3fFJ8Ne2Xa8W/onuEQ2Lwa8Ot0cX3T0qlY/cKQMC8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:41:11:d7:74:f4:4f:1c:2b:0c:79:17:11:3a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=97b77489d0f0f2205e28affe7091fdd0543fb1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:dc:4a:9d:15:12:11:32:cf:ad:8b:be:33:
                    81:11:da:d6:6f:e2:5d:ca:c0:cc:40:97:cb:f3:a1:
                    c0:f4:fc:99:22:89:81:3d:b0:56:f1:e6:b6:f2:e6:
                    6e:fe:2d:c7:0c:54:4e:68:49:53:65:e2:03:be:e1:
                    ea:38:d2:db:b1:66:02:d7:c1:d6:a8:0a:8b:42:25:
                    96:54:f1:66:25:59:0e:57:2e:09:ac:ed:26:34:18:
                    bd:08:a8:62:7d:8d:3f:4f:ce:e6:f0:5c:1b:d9:3a:
                    2e:22:0d:b8:16:9b:04:35:cc:fd:69:02:2f:60:dd:
                    3d:9e:5d:eb:21:4e:00:96:77:12:1d:f8:e7:05:06:
                    76:5a:89:46:6e:41:d7:dd:21:b9:94:f3:c5:d2:f0:
                    58:77:33:d0:c4:33:11:6f:2f:3b:f4:cd:71:28:2e:
                    ac:a5:37:84:1a:06:17:f1:05:e1:ec:a9:65:62:0b:
                    46:35:02:8c:dc:6b:41:80:a3:05:33:2e:17:a8:5f:
                    3d:6f:35:bf:eb:c1:97:40:29:d3:70:c4:0f:9d:59:
                    cb:77:40:b7:10:7a:e0:10:a8:af:5b:b1:76:95:34:
                    5e:94:db:56:d6:73:1a:d2:3a:f9:6e:02:80:c6:fa:
                    f5:0c:6f:bd:ca:3f:0a:56:22:e7:90:f5:d9:e8:76:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B7:74:89:D0:F0:F2:20:5E:28:AF:FE:70:91:FD:D0:54:3F:B1:F1
            X509v3 Authority Key Identifier:
                keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:41:d2:16:bc:b7:f3:d3:1f:0e:45:a1:5c:20:35:a6:3f:
         1e:c8:cb:36:92:88:b4:ee:22:d4:70:53:ba:d3:be:54:f6:c4:
         74:5f:4a:da:7a:b7:16:b0:8b:dc:8b:45:0e:b3:bb:68:36:ae:
         9d:8e:b9:5b:a9:f0:92:35:f6:eb:e2:54:ea:e9:a1:a5:ce:f1:
         0c:a3:71:1a:6a:08:35:86:e2:8c:04:62:e8:08:3d:3f:59:6b:
         e9:40:bd:cb:e5:39:bd:7c:41:a4:4b:38:66:36:50:75:dd:b3:
         8f:3f:6d:26:e4:4a:68:23:b8:95:0c:b4:b5:52:52:55:d4:88:
         d2:a4:43:ac:41:d3:68:d7:b8:04:33:c1:40:6b:be:02:6d:28:
         71:53:0f:10:4e:64:5e:6d:fd:c5:94:5c:5c:ba:80:ba:69:af:
         86:fc:fb:4d:2a:6b:0c:40:76:48:dd:9f:b1:70:96:26:24:fc:
         58:e6:f2:49:c9:9a:40:f9:5b:a2:68:ae:7d:94:49:33:fc:98:
         15:bf:b1:f7:aa:ef:61:fe:85:31:96:a9:2f:8e:44:2c:1d:17:
         52:35:0b:23:bd:50:ee:3f:9d:c4:4a:56:47:50:82:37:b6:ac:
         93:62:bd:dd:09:e4:2f:53:5b:f1:13:f6:68:55:3c:28:44:77:
         43:85:b7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----