Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
File:                     GgWAKcls4or4AY1X-PpAMSYVG-Y.mft (raw, json)
Hash identifier:          whDosfHjL+BwA8H45+zI8B0pJswaZf4ASDFj6A0UN4U=
Subject key identifier:   AD:7F:3F:EC:E8:E3:63:15:93:23:D6:1A:34:6C:81:44:60:0B:E1:09
Authority key identifier: 1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6
Certificate issuer:       /CN=1a058029c96ce28af8018d57f8fa403126151be6
Certificate serial:       01962ECF58CE5F3B07518D855581E3B98D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft
Manifest number:          067E
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: GgWAKcls4or4AY1X-PpAMSYVG-Y.crl (hash: gHwgJZ8zBnqA+kZjt6BuX2GHGvcEedeobEMrnKogysQ=)
                          2: i3e8wCKSQ41m2OIaVF9MlCgeLgA.roa (hash: 4qgbTrajbEXgLsjqzkg5VgJTQJvi2U7RCx9bgextP3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:58:ce:5f:3b:07:51:8d:85:55:81:e3:b9:8d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a058029c96ce28af8018d57f8fa403126151be6
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=ad7f3fece8e363159323d61a346c8144600be109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:ff:dd:33:04:dc:ee:fe:5f:c9:66:94:37:
                    3a:c5:51:a7:8c:16:9e:41:0e:a6:0b:9a:ad:f3:37:
                    97:e0:bc:87:30:b4:91:6c:62:5e:d6:4b:68:13:72:
                    f5:cf:c0:9e:a3:55:a9:4c:48:ea:4f:9c:ee:ca:a2:
                    69:e3:a3:5a:e1:0d:e3:f7:75:83:31:86:29:d0:42:
                    2f:ca:f1:68:6c:72:94:ba:82:0f:97:3c:91:67:5d:
                    e9:d8:b9:e6:58:2f:6d:9d:d9:55:f1:f0:2c:e9:38:
                    20:31:f8:d6:06:6e:60:24:e9:7f:6d:59:c9:e2:9e:
                    e1:c2:00:8c:3b:e4:3a:b6:fd:1a:88:9d:6b:9f:32:
                    8e:48:43:ff:2d:71:a1:21:df:b8:a1:03:b6:4a:a2:
                    2d:41:bb:c3:ac:19:07:e8:a3:7e:3c:77:a4:90:b0:
                    15:86:e0:42:53:86:8d:46:20:a5:39:c2:6a:d4:95:
                    e5:52:05:08:2b:8f:85:ea:d4:09:30:da:d4:35:e8:
                    74:14:13:3d:d1:b2:23:cf:4b:fd:c1:a7:08:50:d3:
                    83:fe:c7:a3:42:88:9e:fe:4f:f0:0e:92:cd:de:02:
                    29:25:7d:2a:81:37:87:f6:fd:b6:25:6d:a8:36:51:
                    e3:b5:9e:f3:0f:eb:2b:9e:a7:f3:93:5c:91:cf:38:
                    4a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7F:3F:EC:E8:E3:63:15:93:23:D6:1A:34:6C:81:44:60:0B:E1:09
            X509v3 Authority Key Identifier:
                keyid:1A:05:80:29:C9:6C:E2:8A:F8:01:8D:57:F8:FA:40:31:26:15:1B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgWAKcls4or4AY1X-PpAMSYVG-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/09e320-a3b6-45cb-87c0-22839766960a/1/GgWAKcls4or4AY1X-PpAMSYVG-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1f:4c:ee:b1:87:ce:01:9d:f9:e0:6e:76:ad:0f:ff:f4:ad:
         0f:d8:92:a4:eb:dc:02:f2:0d:4f:80:18:7e:53:81:d7:18:88:
         33:23:9c:72:23:ab:a9:f8:2d:2b:e3:b3:b3:22:f5:4d:87:2d:
         31:a1:78:0c:05:de:49:59:89:c0:3c:80:46:58:ee:ff:d9:f4:
         be:62:12:2d:96:0a:a1:96:03:49:db:f9:f8:ef:e1:ff:e4:f7:
         78:59:d1:21:0e:e2:05:39:0b:08:d1:9a:7d:37:cb:49:1b:9c:
         3e:e4:51:98:df:6a:50:15:83:7e:72:40:56:3d:4c:2c:04:0b:
         57:73:43:74:53:bc:37:d2:74:d7:34:8f:eb:c3:ef:7f:fd:57:
         1e:ae:3d:1c:67:f2:b2:f6:ab:e8:3e:b0:84:b7:aa:07:7d:04:
         1f:6e:59:98:3e:8c:0a:ab:86:d2:14:15:04:17:40:e2:f5:22:
         b0:7c:5e:6d:69:47:16:66:7e:bd:32:8a:53:55:cc:db:51:26:
         36:d5:3f:fe:93:da:27:31:fd:e3:5c:62:3b:32:fd:30:2c:f8:
         c1:cd:59:05:19:59:07:be:3b:87:60:dd:5b:77:47:97:d5:39:
         0a:99:f0:fc:39:3a:b0:8d:97:0f:a0:e8:b2:a4:5a:55:01:92:
         87:61:25:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----