Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File:                     g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier:          ZRSZyaYjVmqu1bamVAIkWYdkoppdnDCSerb2BF4z218=
Subject key identifier:   7A:62:FF:6C:08:C8:73:32:03:2E:78:0B:5E:00:C5:53:6F:43:68:73
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer:       /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial:       01962DF3E05AFE8B011B8E19FE935FBDC8E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number:          0B58
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: 1-eVtiZIJZtejkcxnJZbMOuqtkvM.roa (hash: /dozujzBruht/lOgqwCLtQNFBrpieolWDy5kZ5Mel3s=)
                          2: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (hash: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=)
                          3: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: xAZUQKrDdSXR2wG1QBaMrIwqdDnCIioWclMaLv5tjow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e0:5a:fe:8b:01:1b:8e:19:fe:93:5f:bd:c8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=7a62ff6c08c87332032e780b5e00c5536f436873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:43:5e:31:68:d9:f5:50:27:4b:18:a9:25:5d:
                    51:87:86:9a:f8:f3:de:1e:e0:88:b9:b2:9d:3d:12:
                    9f:ad:5f:e7:1b:5d:69:3e:e6:15:57:1c:c5:13:5a:
                    fe:05:00:c2:bb:ac:8a:1a:56:7f:56:55:ff:63:36:
                    69:0e:ba:dc:74:2a:91:fd:09:b4:5a:af:b0:7d:de:
                    0b:f6:68:d0:71:44:85:d6:ed:7e:92:b3:e5:a4:20:
                    72:c3:6a:22:76:2a:6c:3b:81:73:32:a5:6a:de:ca:
                    49:23:38:20:22:f6:76:bf:e9:58:e7:9b:03:89:1c:
                    0a:bc:a8:61:a3:26:05:14:10:e7:e1:5c:c9:df:70:
                    f3:20:bd:83:12:e1:ad:ff:ce:4a:a4:c0:9e:d1:2a:
                    4e:9b:cd:40:2a:6c:ea:6e:5c:00:1d:1c:c4:85:5e:
                    2c:91:6b:6f:88:44:12:95:91:7a:bd:6d:b9:59:09:
                    25:fb:c2:53:0e:fc:4d:9e:33:d8:f2:53:33:83:0b:
                    90:f1:fe:6f:ce:20:b5:87:4f:99:6c:61:05:f1:17:
                    c8:2c:47:4c:b8:3c:5d:90:b7:f2:37:90:f7:29:1a:
                    ab:f5:6b:ff:36:9c:8d:3e:15:2a:56:ec:ae:8f:ad:
                    2e:8d:e8:f5:ca:16:07:a4:6f:dd:a5:79:37:aa:94:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:62:FF:6C:08:C8:73:32:03:2E:78:0B:5E:00:C5:53:6F:43:68:73
            X509v3 Authority Key Identifier:
                keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:27:4e:13:63:ca:18:37:b7:b9:0b:7d:58:83:5c:78:bc:3c:
         68:ed:af:37:8b:72:6c:be:cb:a6:3b:88:76:6d:a3:93:c5:26:
         29:a1:36:ef:45:c5:61:14:64:2c:10:8a:d3:5a:76:d5:bb:f6:
         8e:1c:83:d2:66:2f:f9:79:91:2a:65:5f:1a:c5:53:5f:69:27:
         80:8c:91:de:35:12:bd:81:8a:49:52:fe:41:b1:cc:75:be:d8:
         08:e3:bc:a2:06:c5:13:28:ac:a8:e4:1b:c5:dc:71:b5:d8:78:
         7f:f3:47:da:76:e4:d5:9d:19:bc:6b:68:dc:fd:01:6e:a2:ce:
         2b:45:83:12:6b:23:12:54:05:7a:b7:3a:56:89:bc:3b:85:12:
         59:9a:b7:98:c7:31:91:b2:74:80:10:3a:70:cf:1b:10:9c:e0:
         75:4d:ee:5c:27:44:5e:92:d8:5e:52:af:09:59:a2:5c:48:05:
         f9:18:01:c3:17:2e:18:a1:fe:f9:ce:d6:65:77:96:64:6b:75:
         27:2c:ec:89:8b:98:f0:c9:3f:02:7e:97:1f:d3:7b:78:3f:b5:
         3d:b4:b7:d0:c4:88:b3:44:6b:64:ea:43:52:fb:46:96:46:53:
         19:0c:c7:63:72:31:24:7a:58:26:82:71:2a:5a:9d:24:20:fb:
         e5:a8:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----