Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
File:                     GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft (raw, json)
Hash identifier:          w40tNb3ujvZDNazAM4m7yMhiRJTF/dD/Q7u173fAM5Q=
Subject key identifier:   C1:E5:6E:E7:98:56:E7:C1:6E:F9:F8:59:7D:9E:3B:80:4F:69:3E:CD
Authority key identifier: 19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4
Certificate issuer:       /CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
Certificate serial:       01962F3D56E811119977930772CB1D63819F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl (hash: wVqTu37YYb0RtOLBQgavmPMxX0DG/6eTUunkkSrDb+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:e8:11:11:99:77:93:07:72:cb:1d:63:81:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1999a42600fb640beb5e33d0eab8fe4e95311ce4
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=c1e56ee79856e7c16ef9f8597d9e3b804f693ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d6:e2:c7:09:fd:34:c6:73:a4:8a:2d:4f:db:
                    26:6b:bb:80:5a:3a:53:67:a3:16:d0:08:c1:92:e3:
                    61:9d:49:02:81:69:10:c8:ff:f5:0a:86:d0:b2:75:
                    13:6b:d0:76:ba:b8:e9:bf:97:5d:9b:51:43:d3:7a:
                    32:71:9c:07:38:05:cf:9d:e3:03:07:c9:f2:3e:3b:
                    d9:92:35:05:d9:a2:35:35:ad:d8:5c:7c:6d:cd:b8:
                    eb:30:8c:2c:98:87:e0:69:4e:77:df:84:e7:d0:6e:
                    50:ac:c7:e8:b1:8f:03:f8:8b:0c:8c:aa:05:b1:e0:
                    c1:04:d6:4e:4b:50:1d:85:6c:aa:f3:62:a2:2e:cb:
                    9f:2f:28:eb:d0:af:cc:ac:0b:7a:be:d0:33:38:e2:
                    60:30:55:0d:1a:b7:4f:ac:c8:6c:4e:c6:fd:e3:b5:
                    8c:ba:e9:df:74:82:31:57:4e:78:af:54:04:8f:05:
                    1f:3a:c0:0a:01:14:83:07:a7:bd:dd:c9:7d:57:a5:
                    d7:fc:f7:c8:2e:ce:bc:b3:bf:eb:7d:9f:91:25:13:
                    93:ae:02:3e:1f:71:a6:72:73:40:d6:da:8c:e1:21:
                    8b:0c:88:5b:1d:ae:f5:20:9f:25:c9:46:ab:22:8b:
                    eb:ce:61:39:0e:40:e9:fa:68:e5:5e:d7:db:f8:a0:
                    81:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E5:6E:E7:98:56:E7:C1:6E:F9:F8:59:7D:9E:3B:80:4F:69:3E:CD
            X509v3 Authority Key Identifier:
                keyid:19:99:A4:26:00:FB:64:0B:EB:5E:33:D0:EA:B8:FE:4E:95:31:1C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a91608-c322-41fb-9b00-c54014e1c29a/1/GZmkJgD7ZAvrXjPQ6rj-TpUxHOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ce:b5:5d:fd:38:2d:38:7f:76:09:de:1a:61:e5:f0:24:72:
         05:28:c7:3e:64:5a:52:51:80:e6:56:b1:c9:fb:2f:ef:1a:af:
         e7:6d:43:e5:dc:da:95:bd:ff:02:c2:b6:3d:ac:c3:92:06:8f:
         ef:40:19:14:4d:2d:09:aa:57:14:c9:0c:a6:62:6c:d5:4c:48:
         24:b4:cb:9b:ed:ca:32:4a:41:5d:4d:53:47:90:dc:ce:20:8e:
         ae:66:48:cd:f4:f0:6b:e3:42:f6:55:ef:e8:b4:1a:67:f7:f4:
         eb:61:23:82:41:c6:e6:39:90:e2:90:67:82:58:37:84:5a:3b:
         b1:6a:61:a6:86:77:e8:8b:35:af:34:e1:3d:3c:24:79:53:47:
         62:88:db:9e:99:46:68:7f:80:df:de:d9:a1:cd:d0:0e:a0:62:
         a8:3f:7b:a1:89:74:ee:e7:6d:f5:8f:0e:f5:bd:8c:e4:8d:64:
         c4:f4:4c:20:b6:77:a5:ed:8a:cb:30:54:e0:62:66:69:70:b8:
         45:96:37:43:cb:17:e7:ce:91:e7:cf:ea:bc:7e:d7:b5:59:20:
         c5:9e:ad:bf:49:0d:db:66:07:1f:36:95:26:08:7c:64:61:56:
         83:21:f8:ce:51:1e:a9:12:27:0b:d7:46:e2:ae:48:38:08:df:
         68:8d:d9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----