Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File:                     GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier:          YY4Nu0jVdmIVzW7u3/4IZm0QK39N73xCUxl/ozd8fIY=
Subject key identifier:   45:59:73:BB:9B:4B:1D:CD:65:5E:09:72:69:08:94:88:B2:69:C1:01
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer:       /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial:       01962FAB12E0C1AD14C630D2C15516029A9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: 68Bt9UfzhwRArUkZRHVCmNcBw7/067Yjthi+YZcBPdU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:12:e0:c1:ad:14:c6:30:d2:c1:55:16:02:9a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=455973bb9b4b1dcd655e097269089488b269c101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:68:8f:66:9c:99:9c:18:50:23:7e:f9:dd:
                    4a:7b:e4:37:7a:c1:5f:ae:da:df:68:26:e4:65:42:
                    7a:fd:d2:60:ae:af:77:f0:a3:c2:6f:40:f1:a2:2f:
                    9c:7a:4c:ac:08:8a:9f:bb:28:05:4c:94:94:cb:67:
                    23:4c:00:5c:22:8b:b1:1c:39:fd:d0:2f:fe:ad:8a:
                    d3:f3:2e:e2:64:3f:8d:cc:f5:63:26:49:60:05:aa:
                    69:9d:68:ee:9e:ea:92:d3:a9:c2:0c:ef:81:6a:bb:
                    68:25:ab:f8:03:f6:a3:ed:91:8c:a4:e7:fe:5c:75:
                    50:84:98:00:d8:e1:c3:81:6f:b6:47:c8:41:6d:a9:
                    9d:ca:6d:bc:d3:c1:e1:f5:78:9e:76:8e:93:c1:5f:
                    a6:5d:57:e4:7a:b2:b5:c8:78:a9:e7:10:df:52:c3:
                    6e:80:66:09:0e:7b:95:93:58:6a:38:08:ec:f7:b6:
                    87:d1:f0:78:82:ce:c1:11:5d:cc:9d:80:b1:30:33:
                    fc:ee:d2:e5:17:f2:69:a7:89:7d:35:e4:2d:8c:54:
                    0a:1b:36:ab:a8:3f:4a:82:24:91:17:ff:77:05:bf:
                    74:76:01:ec:5e:22:49:33:67:7f:18:9a:0b:3e:8b:
                    5f:c1:a8:b6:2f:90:f0:a6:1e:88:a5:69:f1:07:fc:
                    9e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:59:73:BB:9B:4B:1D:CD:65:5E:09:72:69:08:94:88:B2:69:C1:01
            X509v3 Authority Key Identifier:
                keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:78:f2:a1:52:84:1f:3a:c5:3f:b5:b5:2a:b3:58:c9:41:
         ff:e5:1b:9d:f8:8b:f9:bc:4d:4a:c4:1d:21:4a:42:ff:45:20:
         37:50:7d:8b:81:b6:70:5a:72:f3:af:66:d9:a8:01:df:e4:8f:
         50:35:8a:14:6f:43:d4:d6:9d:27:ac:12:d3:64:ee:52:27:d4:
         27:9a:75:1b:86:2b:9b:b0:21:78:e5:68:65:cc:c7:21:5f:84:
         58:f8:6d:57:04:6f:74:76:da:21:3b:48:60:a6:45:2d:da:ba:
         9a:84:41:62:79:be:01:c7:26:be:7a:76:2f:a0:ad:cd:73:5a:
         f7:cf:61:b2:84:d2:1a:d5:aa:49:6c:92:0d:37:f7:4c:b8:c1:
         30:46:f4:db:2a:97:14:4d:3a:f3:4d:24:d1:0d:5b:e7:06:a4:
         5e:73:49:02:a4:bd:db:57:55:59:7e:e2:e0:f5:62:59:86:0f:
         51:e0:7b:93:b7:1a:68:f5:90:3c:8d:3d:ef:eb:ea:e4:a6:7a:
         b2:48:71:30:c7:e0:13:2a:39:98:70:6a:c0:86:a6:4e:04:09:
         1b:86:59:5e:a0:c5:d0:23:63:3b:fd:ee:d0:13:36:4e:b7:74:
         57:09:65:d2:e6:88:93:23:a1:bd:13:66:73:3e:8c:b5:70:a4:
         bc:0b:ca:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----