Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
File:                     gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft (raw, json)
Hash identifier:          PV/GNrMaVMqfvrFVD1OYDwKwHIuWSaBMHT6usJM4MkM=
Subject key identifier:   87:FA:6D:77:D0:80:16:0C:13:51:09:B5:D7:7F:01:0D:43:FC:F6:33
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Certificate issuer:       /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial:       0195E121FC35A71E1DE04CFE4E7166493499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft
Manifest number:          14CD
Signing time:             Sat 29 Mar 2025 09:00:55 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:55 +0000
Manifest next update:     Sun 30 Mar 2025 09:00:55 +0000
Files and hashes:         1: NxiHrRFmOKs6DxSydD2sJuXQJK8.roa (hash: iNvcUhlJ9Yd5axlJbt+P6uyRKrZKBuBqEJ75zpPuiMk=)
                          2: gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl (hash: VM6U/CQWf5UAxxJfTIFT1b1OQ9+v1Tk9EjQP6pX6aCs=)
                          3: pHamM_FeTuziFQi2w75B0pezcGY.roa (hash: YLgRRlx24P8L2COTLzTtp0xHAktWAujjPd4Z7/lgx3w=)
                          4: xeyOvAZB2wYubEBDAwwO-ACwssc.roa (hash: wLCrfhwnMuWinvjbmYmO6BBiu2MJDTwxPjX1u35nOMc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:21:fc:35:a7:1e:1d:e0:4c:fe:4e:71:66:49:34:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
        Validity
            Not Before: Mar 29 09:00:55 2025 GMT
            Not After : Mar 30 09:00:55 2025 GMT
        Subject: CN=87fa6d77d080160c135109b5d77f010d43fcf633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:30:c2:23:bc:e8:fc:23:bf:3b:be:15:62:1b:
                    ba:a7:bf:11:ba:20:22:cc:a9:5a:ba:ac:f2:d4:1b:
                    fd:fd:c2:6c:05:4e:26:f0:7b:0c:9f:fd:7f:51:30:
                    0b:ab:53:aa:55:55:c4:73:18:38:42:58:b3:33:95:
                    7e:e6:37:b1:f5:84:7d:e5:a9:c8:6b:4c:b0:69:f7:
                    11:b4:e8:b2:92:4d:59:4e:b4:53:7b:71:4e:bf:93:
                    c7:67:47:81:bc:79:08:6f:67:7b:d2:bd:c3:56:77:
                    82:73:61:7a:ec:39:af:04:81:be:d0:38:3a:b2:0b:
                    46:71:14:63:ec:26:6b:70:0b:d7:be:51:2b:c6:af:
                    e8:5a:10:91:1d:8a:19:af:21:b6:60:d3:3d:c4:fe:
                    84:88:c6:47:b5:ac:89:4a:bf:eb:1b:5e:e3:1f:d4:
                    5b:05:57:f3:f4:27:9e:8f:97:2a:68:c0:bd:83:8f:
                    11:eb:f8:a1:af:5b:43:85:aa:68:0a:50:37:22:39:
                    65:e1:4c:38:15:00:17:bc:ba:2a:60:c4:53:72:b9:
                    08:f7:7b:09:e2:cd:52:10:fd:dd:ae:56:65:0e:d2:
                    e1:df:65:ba:78:38:23:15:e0:35:35:59:7c:6a:2c:
                    ab:93:e3:af:bb:0e:7e:5e:c7:13:d7:f8:a1:9c:7f:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FA:6D:77:D0:80:16:0C:13:51:09:B5:D7:7F:01:0D:43:FC:F6:33
            X509v3 Authority Key Identifier:
                keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:98:97:86:27:b7:9d:11:f1:44:64:60:9a:34:ad:27:af:ee:
         73:3b:f5:b2:cc:c4:98:c9:81:6b:6e:d4:ee:43:e1:ee:ee:0f:
         ab:86:b1:19:4a:08:36:29:d6:84:22:0d:88:89:09:c9:55:93:
         20:c4:2d:da:9a:21:7d:ac:bc:da:e7:a8:26:dc:70:5f:f3:0a:
         e8:f5:37:35:05:a7:1e:ba:ad:2b:59:12:40:2a:56:d6:a4:14:
         0b:f6:02:5a:0d:83:23:b0:f8:fc:f7:fb:8f:af:3c:c2:0f:d4:
         d9:4a:ad:b5:df:3e:bc:72:5f:72:2d:e1:d4:bc:ea:35:be:8f:
         1c:f7:50:e5:6a:54:5a:88:fc:27:57:e2:13:31:00:f4:e1:e4:
         d3:77:9c:c1:cd:3c:ac:f8:2d:53:65:99:fc:5b:94:7b:1b:90:
         2d:5b:8e:9f:d6:bf:da:d1:08:85:b5:64:ec:72:fe:3e:b3:b5:
         61:56:32:d6:06:1e:5a:fb:31:c6:be:5b:06:7b:ed:76:57:13:
         29:f9:73:b2:06:87:17:f9:9b:09:9a:18:70:d8:9b:90:51:39:
         a4:ba:21:aa:59:1a:6d:ff:f9:01:11:0e:a3:3c:4a:fc:f6:06:
         5a:32:1c:e7:65:5d:0c:af:43:8b:e6:13:87:cd:d3:25:ea:27:
         06:a7:8d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----