Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
File:                     GRk80M-5OVmJNY4DljEs-7HIj_4.mft (raw, json)
Hash identifier:          OFPC0uPWpY5LCSIlqFroYQtxbKKexHkdoCs4DZXk5Fo=
Subject key identifier:   C1:55:00:8C:AB:20:C5:F2:B2:24:41:27:86:52:58:9F:FE:17:E6:6D
Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE
Certificate issuer:       /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
Certificate serial:       01962E61A08D7B61EB670898F1D882E4D463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft
Manifest number:          15F5
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: 7pztvUDezwt3ZSHLohSTcy0jFYM.roa (hash: uP/w6/w3g1+AZjMv77F/dMcv4FObFdLOts1JHnWbc4w=)
                          2: 9cCaXcK75qwXToQ5rHbDFvdojAo.roa (hash: JnwmcE1csbpWIbMirSMSBZCkyMsM8LbTWv+Omb8dpSU=)
                          3: GRk80M-5OVmJNY4DljEs-7HIj_4.crl (hash: V6gNMKap//Wg0OStN01K4/epFeO/Ewz66W2nvR9Q/rs=)
                          4: O2A95fKA1A2XI5zokqy2M5EQluY.roa (hash: l7DaeRNWKyhpILryPmDUINT37G9okCmuQyW2gonVmu8=)
                          5: yqhpAot3xi6epn6ENDWr8uOqyio.roa (hash: kICDDy+hxEl81swZp9LVJwlGqZNulN1S7VyaDfHwQvg=)
                          6: znLjuZU6WpEe1QGkBQ0SoMfeRiY.roa (hash: ekCbGxN69x7n2ObmHPqmahZOZDHrZ5nwpqDY3ITziLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a0:8d:7b:61:eb:67:08:98:f1:d8:82:e4:d4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=c155008cab20c5f2b22441278652589ffe17e66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:02:67:5a:fd:4c:f1:f7:0e:74:47:1d:38:db:
                    5c:78:ba:8e:60:b1:0a:08:8c:d7:ef:99:1e:72:ab:
                    4d:7e:c2:38:01:71:e5:f1:60:e0:4d:05:74:5b:e5:
                    c0:80:c3:03:d1:d5:02:ea:b9:07:95:b9:28:bf:28:
                    37:80:cd:87:98:0e:55:4c:5e:62:93:7a:06:ba:29:
                    d2:2f:27:b4:cb:8b:a1:4b:93:47:15:ab:20:1e:3c:
                    ec:ae:ba:bd:6d:90:db:0d:36:9a:d8:2c:7b:ef:6a:
                    4b:cc:78:0c:48:c9:8f:4e:67:23:92:44:b5:b3:37:
                    30:5d:1d:d0:72:c0:f8:18:03:86:69:e4:bb:9e:56:
                    41:fa:26:68:06:6e:20:ae:ba:e2:51:f1:b8:bc:ff:
                    9e:72:bc:6b:02:8d:36:02:3d:d8:28:2e:12:7b:87:
                    85:71:a0:5a:8b:b4:56:f1:9f:79:09:2f:fe:3f:aa:
                    5e:26:05:6a:d3:af:ed:2a:a1:25:35:0c:5d:c0:38:
                    97:64:40:23:82:7d:78:80:9d:ae:c9:3d:8c:c7:90:
                    9c:97:85:92:f1:63:f9:bd:f0:b3:27:33:92:bc:ce:
                    e3:a7:3c:12:51:68:6c:13:65:06:d6:90:77:d5:43:
                    86:c2:df:5e:5c:57:95:9f:4a:c6:eb:92:6f:3f:6b:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:55:00:8C:AB:20:C5:F2:B2:24:41:27:86:52:58:9F:FE:17:E6:6D
            X509v3 Authority Key Identifier:
                keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:fe:3e:99:45:d0:19:c2:1b:a1:62:cf:84:b9:37:d7:44:fb:
         c0:18:1b:da:67:38:dc:0d:f2:35:36:92:3d:09:61:22:98:37:
         be:04:da:81:da:2f:c7:96:4e:52:86:17:4b:fb:fe:be:76:04:
         b7:56:b6:52:90:b0:bb:b6:86:e6:53:67:a4:f9:51:6a:49:98:
         0d:cb:8f:27:1c:cf:77:03:b7:b8:3c:1f:c5:4e:70:ff:cd:b4:
         c2:df:a0:d1:80:ae:8a:9c:79:79:d5:7c:6f:7a:89:d4:9e:c6:
         24:dd:26:96:71:e3:04:23:8d:ed:98:6d:67:7b:b5:9c:11:74:
         e2:52:2a:50:02:82:22:89:ac:72:48:50:9b:2e:23:56:a5:39:
         d7:6f:78:5a:32:c3:d4:c1:a0:16:66:b0:8a:f3:23:c0:b2:ae:
         5a:67:bb:58:b1:41:c4:a4:23:1b:fc:a7:45:77:fb:a0:15:00:
         6e:f5:e1:94:bf:1e:7f:40:3f:be:e4:3e:40:97:2e:2f:b0:33:
         17:8c:9f:7b:ba:6e:35:be:da:78:a0:9c:af:39:2b:8e:6c:84:
         c5:e7:c1:3f:27:e9:d6:b0:a6:b4:0d:23:13:46:dd:31:b1:63:
         23:aa:91:83:38:da:0f:9d:aa:4f:5f:41:1b:b7:2e:dd:db:de:
         0b:c8:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----