Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
File:                     GB5NYIFS_CRK__ui3HK4UbGbJSc.mft (raw, json)
Hash identifier:          uGNudIXsH61GnBk68qzMyhxl9ezvOVw7v+28eDQw+x8=
Subject key identifier:   93:CD:DE:9E:81:49:D3:3B:8E:D5:6D:93:04:BE:BA:EA:F9:52:3C:B9
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Certificate issuer:       /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial:       01962E99A45723AE5BBEE2AA37CE1702DB0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: 3SDO9hGSLXcvKio5nucfHtpBZqo.roa (hash: UySF852N3LzIIXg+WlqkSuDwnOKj/L9pAk/WjttqTkE=)
                          2: GB5NYIFS_CRK__ui3HK4UbGbJSc.crl (hash: mwhMfByhZElO1CFKEtBpd0Cleq0wfTOTYo81EUJpci4=)
                          3: QYv8HyZwcR2EgwyDNXO4DNm4alY.roa (hash: 4y8aidT7cf46oC9Rb8MtLIG+06WpyEeua6nqGV7vmw0=)
                          4: t3Zx6p1wvn7jY8kHjzfJnnc7eNg.roa (hash: OLIfG4z0xwuSo4+uWrBPz+WPutgwTrYoDXIoHunSp5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a4:57:23:ae:5b:be:e2:aa:37:ce:17:02:db:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=93cdde9e8149d33b8ed56d9304bebaeaf9523cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:6e:19:59:f0:4e:b4:6b:7b:e9:2a:58:6d:
                    81:0a:59:ae:4c:21:3d:3b:61:d5:9c:67:ae:dc:24:
                    be:30:22:76:c3:9e:e9:11:e3:3b:5a:c9:9a:43:7c:
                    53:7e:6b:d0:af:76:39:c4:b1:40:e7:f2:17:b0:07:
                    e1:94:44:f3:b1:c5:7d:b8:6e:d3:11:09:ca:48:6a:
                    a1:8f:80:f5:5e:20:8b:3d:b2:0f:d8:83:69:6f:f2:
                    2b:3d:64:21:6d:4f:1f:db:1d:98:f6:54:93:18:36:
                    0d:d0:a2:f7:23:19:6d:b9:1b:8d:f9:e8:f9:0d:e7:
                    97:20:79:a4:26:a1:46:c3:fa:7a:e7:89:bd:8d:22:
                    4f:f4:78:5c:4b:ca:33:66:b9:01:ea:ed:c2:87:5a:
                    95:3a:41:37:e8:f2:31:2f:cf:9a:db:18:d8:0a:fa:
                    8f:f2:02:3f:4a:45:bc:88:51:2f:c9:07:1d:cf:5e:
                    78:dd:82:67:d4:92:26:e7:d8:ef:8e:3f:d8:28:9d:
                    ca:52:15:5f:d3:f0:58:fc:10:7e:6a:03:eb:69:38:
                    7a:b1:4c:fe:24:a6:eb:58:21:10:d2:a0:cb:ee:17:
                    7c:c8:ae:ba:bb:eb:01:c2:fd:e1:72:35:22:be:17:
                    d8:37:a2:eb:4c:9f:bf:66:80:a0:d5:cb:b2:be:fb:
                    93:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:CD:DE:9E:81:49:D3:3B:8E:D5:6D:93:04:BE:BA:EA:F9:52:3C:B9
            X509v3 Authority Key Identifier:
                keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e7:ed:3e:a6:54:39:90:21:2a:74:0f:b9:43:f8:7c:96:96:
         9c:97:7e:35:f2:db:c4:18:90:6f:e3:c6:64:d9:26:ec:ee:3a:
         25:97:a4:cd:1f:a0:69:5f:ba:c9:78:79:d0:00:3a:5c:e7:c6:
         77:90:61:3b:2a:8c:65:b7:a3:ac:ea:9b:c3:29:91:02:a7:6a:
         29:db:e5:c6:c6:1c:da:db:08:d3:65:34:f0:89:44:c6:e4:54:
         63:fc:e1:05:36:76:ec:c1:c7:22:75:e7:f2:8d:3d:40:50:19:
         37:71:4b:91:d7:f6:64:9b:8b:d1:64:34:bf:fb:09:7a:77:a1:
         73:6f:c5:5a:ed:c3:57:0d:61:00:5a:d8:df:d6:a4:76:19:e2:
         35:07:7b:e8:40:b2:c9:0b:75:90:1e:33:af:7a:2c:b7:0f:19:
         fd:07:68:2e:6d:a6:7a:60:c1:d1:f3:fa:eb:d6:d7:27:cc:66:
         cf:82:d5:ac:a1:9f:c8:b3:94:0a:e2:33:be:3c:8b:11:f3:75:
         fd:f5:39:53:28:9f:a5:c3:da:84:8f:fe:41:c6:90:b6:f8:9d:
         79:85:78:6e:43:eb:8b:9b:91:41:1d:78:59:d2:b7:d3:7a:27:
         eb:14:17:0b:62:59:67:d4:31:d6:5f:66:52:47:ee:0a:0a:29:
         3b:42:ea:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----