Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
File:                     GtTMzv5VxeIjqbMgW5OKPRyehtU.mft (raw, json)
Hash identifier:          YK7TGq8nwqaR3/5WNKrkGDWtflapEp7lQnvaK+ruFaI=
Subject key identifier:   B5:F2:BA:A9:B1:01:87:EC:FA:02:A4:FD:FD:EF:1F:12:97:4C:7D:6C
Authority key identifier: 1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5
Certificate issuer:       /CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
Certificate serial:       01962F0676E7AF5DBE5A72A13D72B511BF61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft
Manifest number:          11CB
Signing time:             Sun 13 Apr 2025 12:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:14 +0000
Files and hashes:         1: 7lJrTTIO2zooVSl7zZp_UO3NA2A.roa (hash: ob9QTWC/tQoW4XviSigFRT+IWVM+wZzBVH2/SY3oV7I=)
                          2: GtTMzv5VxeIjqbMgW5OKPRyehtU.crl (hash: EMcjLTEg5tIJ5So+/FgupmaZFiZ50oo0z+xNYlr0/uA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:76:e7:af:5d:be:5a:72:a1:3d:72:b5:11:bf:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad4cccefe55c5e223a9b3205b938a3d1c9e86d5
        Validity
            Not Before: Apr 13 12:01:14 2025 GMT
            Not After : Apr 14 12:01:14 2025 GMT
        Subject: CN=b5f2baa9b10187ecfa02a4fdfdef1f12974c7d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:4d:e7:40:6d:82:ec:36:43:3d:a7:94:83:
                    81:80:63:1f:86:28:26:e4:76:8d:36:8a:fb:c9:1d:
                    a9:a6:74:82:9e:b0:3f:31:f3:2f:95:80:27:e8:e1:
                    d8:73:0b:9e:24:6c:08:86:30:6e:5a:97:b4:9f:31:
                    88:e9:0a:3b:07:8f:a6:3e:3b:5e:11:77:f5:74:8e:
                    d5:dd:3b:14:eb:b5:dc:0f:25:b2:4e:8e:aa:66:9e:
                    d1:ee:57:9d:e1:21:98:6e:b4:5d:cd:9b:a6:51:51:
                    a6:44:d7:02:46:e3:81:a5:90:66:a1:13:e7:e0:14:
                    0c:7a:4f:c3:38:af:19:8f:52:47:c3:ba:ff:e9:91:
                    9e:3d:75:ba:58:c3:8e:42:51:02:3b:2c:31:7c:f9:
                    0c:11:de:b5:d6:26:d9:b5:b5:0b:2e:b1:6c:8f:0d:
                    02:91:93:a8:78:02:8b:74:e6:2b:98:50:c8:9c:3e:
                    82:06:74:30:ad:c2:30:79:e4:b3:70:b8:e3:06:af:
                    6e:82:e9:25:06:4d:82:d3:1a:9f:f8:fc:f8:24:23:
                    f3:e3:18:89:f6:32:c0:a0:19:f3:66:e7:3e:db:48:
                    99:c2:45:dc:2c:63:cc:d6:a7:4b:c4:fc:ad:ff:0d:
                    f7:38:22:74:c0:f8:b6:b3:0d:2c:e9:dd:22:c1:ae:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F2:BA:A9:B1:01:87:EC:FA:02:A4:FD:FD:EF:1F:12:97:4C:7D:6C
            X509v3 Authority Key Identifier:
                keyid:1A:D4:CC:CE:FE:55:C5:E2:23:A9:B3:20:5B:93:8A:3D:1C:9E:86:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtTMzv5VxeIjqbMgW5OKPRyehtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d23870-74c7-4a84-90ec-c32036750e36/1/GtTMzv5VxeIjqbMgW5OKPRyehtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d6:f0:20:ea:0c:d7:8d:3c:f6:1f:18:af:ee:9d:e1:7e:87:
         aa:fd:ea:6a:5b:24:db:f0:d7:cf:74:81:d6:96:bb:a9:8b:4b:
         a9:4b:d1:8a:f6:f5:81:53:31:2d:f8:9f:56:a5:d7:f2:b3:5e:
         d2:99:00:8c:cc:69:59:16:93:a3:42:ff:4d:ac:c8:40:5d:68:
         eb:c2:86:d5:fb:6d:90:53:f3:5b:1b:a6:d6:3e:9e:cc:09:35:
         f7:fd:3a:80:83:1a:db:a4:5d:bc:ae:de:47:90:f7:ac:4e:3b:
         96:00:ef:a6:76:9c:08:b8:c3:b9:96:f8:4c:2b:7b:9b:ee:ec:
         7d:17:29:0c:af:fc:16:10:d9:3a:70:19:b4:a3:4e:b4:f5:3f:
         49:ae:3e:3a:04:72:86:17:19:a0:41:43:f5:6e:1e:29:b3:a2:
         05:61:9e:44:c4:d8:39:91:a3:50:15:7b:37:92:66:e2:8b:5e:
         7c:34:b6:b0:26:7f:b5:08:78:f9:bd:2a:96:29:bb:5f:0b:fc:
         5c:62:56:27:f9:30:c5:af:43:bf:3e:c6:89:e4:92:1f:74:96:
         da:75:1a:88:d8:d0:bb:ce:03:f8:82:ab:c4:46:06:ae:2a:a6:
         0d:21:74:4d:42:29:44:9d:42:d9:8d:d6:2e:76:af:d9:59:89:
         e6:35:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----