Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File:                     Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier:          EuPaR6vi2WX3OORhHeMge7CQNjn4YEpiYshPtgWu0CE=
Subject key identifier:   EE:3E:6A:08:DA:D4:F5:7D:32:42:26:1B:17:81:F9:06:19:C2:10:27
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer:       /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial:       01962F3D387F2F9FA13EB531D442D41723D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: 0Z08996oiFC92/U1aJ4BKV2pixuxh43Bc2eMK76KDuQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:38:7f:2f:9f:a1:3e:b5:31:d4:42:d4:17:23:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=ee3e6a08dad4f57d3242261b1781f90619c21027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9f:2b:b9:5b:5b:6b:99:4b:c5:be:40:89:90:
                    97:8f:5b:f5:a6:b4:f1:4f:94:97:48:bc:c6:2c:dc:
                    5c:21:1d:de:4d:93:6c:56:ea:d5:8c:3c:48:90:6a:
                    16:f2:38:17:a8:a3:7e:94:58:1a:41:82:67:e6:40:
                    a2:3d:2e:10:67:68:52:97:d6:64:11:b5:41:16:9e:
                    98:d9:d8:0c:3d:35:3f:11:68:88:18:61:40:06:95:
                    60:95:0a:d6:5e:8a:ad:01:d9:1a:2d:41:ca:09:c6:
                    5c:c5:e9:cb:16:4a:9c:b7:e1:78:d5:b6:3e:b8:27:
                    db:63:2b:81:a5:e1:28:f1:6d:81:89:3f:97:aa:4d:
                    b0:59:2e:d3:d9:ae:d8:4c:f4:83:f5:f9:44:79:49:
                    63:49:a5:f5:a9:5a:99:02:76:78:8e:00:0b:bc:e0:
                    1d:5a:ed:2b:a4:71:82:17:df:2f:56:1a:c6:c1:47:
                    ca:c1:87:d6:aa:fc:63:09:7b:b6:eb:ed:08:c0:2d:
                    bf:64:7e:86:2b:c9:40:1f:53:7f:2b:65:c2:1f:3e:
                    90:9d:56:df:b6:00:0d:bd:e5:ea:1c:a5:cd:4f:05:
                    d4:fc:6f:1f:12:1b:bf:98:13:ab:43:50:41:9a:df:
                    bb:bb:f8:f2:4f:a3:b5:75:ef:95:e4:45:a4:b5:d2:
                    d6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3E:6A:08:DA:D4:F5:7D:32:42:26:1B:17:81:F9:06:19:C2:10:27
            X509v3 Authority Key Identifier:
                keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d0:d3:a3:ef:f4:d9:3e:8e:f5:c3:66:a4:64:3b:42:f4:97:
         50:4e:22:32:56:62:9a:f8:3b:cf:91:8d:6f:6f:1d:9b:24:99:
         bd:8f:c5:54:6f:3b:ef:21:cf:3c:51:91:16:06:96:45:36:66:
         76:a0:2c:86:a3:82:40:bf:88:56:bc:bb:ed:55:32:98:39:e4:
         65:c1:5f:92:61:86:09:61:ca:c0:36:c0:50:1e:c3:86:79:ac:
         b2:3d:8f:45:e9:a0:05:e0:0d:9b:28:33:b0:d8:b1:c0:34:52:
         e1:e7:94:cc:56:08:86:ed:72:35:eb:df:04:34:19:55:0a:7d:
         d5:1d:c5:e7:49:79:ec:4a:0d:f9:4c:e1:c5:2e:55:80:7b:7e:
         b2:95:50:18:2b:d3:ec:70:df:61:64:cb:1f:c8:cf:f3:ad:fa:
         70:09:46:9f:13:d8:a4:d2:87:34:41:df:9c:b1:38:6d:c3:98:
         94:3d:3c:28:8d:3b:42:ea:7e:09:61:c2:2f:41:3d:cb:22:94:
         48:31:e6:eb:24:23:8e:9b:3a:b1:50:a7:5f:53:ee:d8:50:be:
         32:57:7f:f9:f3:4c:d2:d5:88:88:41:20:d4:a2:08:6d:08:07:
         e9:51:f3:ca:d9:cd:5e:d0:65:18:2b:06:a2:2f:79:55:6a:40:
         4e:61:05:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----