Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
File:                     GNtfz9wY74Qh4mUfGybBZaAdU_E.mft (raw, json)
Hash identifier:          kHOGqKqWUAMKV5Qk+6AQd2t25ABbFXQvWQzWCRtARqE=
Subject key identifier:   0D:39:90:2C:04:38:EF:0F:17:63:B8:81:AA:91:00:B2:4F:EE:9F:DE
Authority key identifier: 18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1
Certificate issuer:       /CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
Certificate serial:       01962F064A1E8ED73F75B6CBEB06C7464E85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: GNtfz9wY74Qh4mUfGybBZaAdU_E.crl (hash: L/Xmg0MLnnAMSV7QgtOfqHF95sI07C0I4O5xevGyKpk=)
                          2: H0c0iaohuwDRjCnDKysbTdg-WUw.roa (hash: Zx3G3ayX4XbzK0AXVUgC4/4zmj6zDADWp3kxeG6+h7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4a:1e:8e:d7:3f:75:b6:cb:eb:06:c7:46:4e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18db5fcfdc18ef8421e2651f1b26c165a01d53f1
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=0d39902c0438ef0f1763b881aa9100b24fee9fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ee:5f:21:04:b0:bf:d7:b9:75:2e:3a:42:44:
                    ef:a4:91:09:3f:ec:6f:44:cf:48:dd:f9:a7:e3:fb:
                    74:9f:7e:f0:3c:1f:d8:60:7b:f7:f4:46:11:7a:35:
                    8f:fd:9e:e8:3a:43:ee:7a:23:b3:ab:8f:1b:0d:32:
                    5c:f4:47:71:52:1c:60:a6:9c:be:21:1b:68:44:8d:
                    53:97:11:7d:c8:86:9d:e1:63:e3:fe:85:e3:62:79:
                    5b:84:c0:f0:1a:f2:9e:95:17:90:de:65:c9:8a:7f:
                    ae:2f:b9:30:f3:a7:f7:88:bc:0a:c0:b4:01:a7:82:
                    33:59:24:d9:4f:0a:9f:4d:a2:ac:56:69:a9:b8:29:
                    bd:e2:71:85:53:5d:3e:b9:eb:55:b6:5b:88:72:08:
                    ad:a2:e8:34:71:d1:f3:3c:05:67:d1:f1:00:b0:ec:
                    b7:7c:e2:d9:1a:c1:70:a2:25:15:2d:c8:98:dc:50:
                    8f:88:6b:6c:4e:3e:8b:11:12:09:7a:4d:81:26:6c:
                    74:c9:6c:c4:08:1e:a2:0d:d8:c1:bc:58:c5:11:fa:
                    74:6e:19:51:eb:e6:84:48:ef:c0:33:07:9d:da:b0:
                    d6:9f:25:8d:48:c2:0a:74:c6:84:f0:e2:e3:7b:c7:
                    17:1b:b9:ae:8f:04:6c:07:d6:32:a2:60:a5:9e:6b:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:39:90:2C:04:38:EF:0F:17:63:B8:81:AA:91:00:B2:4F:EE:9F:DE
            X509v3 Authority Key Identifier:
                keyid:18:DB:5F:CF:DC:18:EF:84:21:E2:65:1F:1B:26:C1:65:A0:1D:53:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNtfz9wY74Qh4mUfGybBZaAdU_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6c3cd4-5896-425e-95db-ffed50baa0da/1/GNtfz9wY74Qh4mUfGybBZaAdU_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6e:50:1d:4d:fa:72:55:27:9b:5b:d7:09:c5:14:60:08:01:
         a8:a0:e1:c4:16:1e:97:5c:de:dd:44:e3:0d:15:0f:95:2e:b7:
         ce:70:56:3d:49:21:2c:a6:e9:58:4b:40:f4:f8:9f:5f:6a:da:
         08:79:7b:2e:31:55:63:2f:d9:57:9a:19:82:62:f1:e1:0d:50:
         04:a9:3a:2a:b8:3d:ce:46:4a:ae:b6:14:2f:64:91:05:36:bc:
         a8:0b:38:e1:c6:c3:00:ff:8a:8d:2a:5c:16:84:2b:83:b9:48:
         57:7a:48:1a:ad:9e:48:35:ff:81:39:5e:dc:64:ab:97:56:06:
         5b:c6:71:ba:a9:aa:3d:50:ca:dc:56:e5:17:b6:39:bb:23:b3:
         07:cc:b4:b4:b1:16:03:a6:4c:63:33:8a:c1:73:1b:b0:fd:df:
         a6:01:83:c6:65:a9:68:1d:6f:ac:e4:29:69:b0:96:a0:66:9d:
         ac:e6:74:f1:b2:a7:b3:85:ea:05:85:17:b2:52:66:eb:e9:98:
         27:ad:63:e9:d3:df:74:c6:5c:ed:c4:16:3e:d0:7c:97:db:d7:
         77:80:10:55:e8:0d:21:dc:fe:5e:d1:e9:d7:d2:b5:cb:0c:a5:
         18:01:a2:d7:da:25:13:22:2b:3e:c6:25:9d:04:eb:5e:4c:9f:
         cb:79:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----