Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
File:                     G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft (raw, json)
Hash identifier:          MLSn/6RN3XxfDYM6ZSrIegqTpIWH7B/q+tYkIZ0T1os=
Subject key identifier:   01:DC:7B:B8:F5:FA:E3:E9:C4:C0:7A:B3:4E:FD:03:24:8F:B9:39:96
Authority key identifier: 1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27
Certificate issuer:       /CN=1bebd33d4cd45465efa50faa824fb812c4173a27
Certificate serial:       01962E99BED77D3AD4DC77F7440A3F43AB4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl (hash: XtgxfeYlgJxmFdNrO+drmuYB4Fwc76oWWRodRaXiLzU=)
                          2: h-vjilG4zsTOTFr8jyiuNr7YOYQ.roa (hash: J1qho6qvh9PzDmhMh26kyKPFY1m2ydeARTE83gY+gJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:be:d7:7d:3a:d4:dc:77:f7:44:0a:3f:43:ab:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bebd33d4cd45465efa50faa824fb812c4173a27
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=01dc7bb8f5fae3e9c4c07ab34efd03248fb93996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:cb:17:f6:da:3b:6b:24:0a:17:9c:45:4f:
                    30:2c:d8:1d:2a:08:27:f8:9e:f0:41:f1:20:d8:32:
                    7c:f5:a2:5e:4c:49:01:f3:50:6c:c1:17:00:d4:11:
                    52:1c:d8:ab:e7:5c:07:df:45:6c:ec:69:f5:eb:6b:
                    4d:dd:06:ae:8c:8d:78:24:e4:1f:56:3b:53:39:e6:
                    51:0b:57:f2:71:60:d6:7e:7c:00:30:7a:1d:4c:c2:
                    2b:97:78:19:14:ee:f5:21:4b:46:8c:21:8d:1e:b9:
                    21:e0:19:b8:d5:9e:3b:ba:c0:66:c2:a7:79:53:84:
                    39:e3:9f:fa:4e:5c:f7:46:cf:76:fc:db:6a:63:73:
                    c0:67:4b:68:11:d8:76:ff:67:ad:88:27:6a:1c:bf:
                    a3:2d:02:d2:f3:b9:61:04:ef:d6:c3:14:4f:61:1e:
                    fc:1d:a8:16:09:f4:b5:a2:c8:f7:bc:58:16:fb:68:
                    07:b9:f9:12:88:0c:40:ab:a0:10:b5:46:32:eb:ee:
                    df:c9:11:67:13:89:bb:7f:48:62:a6:b9:f7:52:5b:
                    c6:d2:a7:d8:f1:0d:c0:1d:a7:83:cd:75:e9:0c:d8:
                    0b:46:61:57:71:63:2d:4d:d0:63:72:cb:9a:0f:17:
                    fe:a0:83:6c:c7:59:d2:68:39:36:77:e5:40:bb:b7:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DC:7B:B8:F5:FA:E3:E9:C4:C0:7A:B3:4E:FD:03:24:8F:B9:39:96
            X509v3 Authority Key Identifier:
                keyid:1B:EB:D3:3D:4C:D4:54:65:EF:A5:0F:AA:82:4F:B8:12:C4:17:3A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-vTPUzUVGXvpQ-qgk-4EsQXOic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1e7b02-889b-4a53-a509-8ab5eb558473/1/G-vTPUzUVGXvpQ-qgk-4EsQXOic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:07:98:b5:de:1b:be:59:39:71:b7:75:81:82:fe:9f:80:d4:
         3b:46:3b:fd:d6:f0:1f:93:0b:c1:e7:30:26:23:96:a3:47:f0:
         de:55:26:7d:c0:74:5d:ff:3a:b9:a1:88:77:be:e0:ea:8d:83:
         89:af:7a:12:4e:c9:09:ed:50:23:39:b8:11:77:7d:5e:26:69:
         a6:7c:f6:4a:95:95:e0:67:05:59:b1:67:be:ec:91:38:66:7b:
         cc:2a:f4:33:e7:ed:db:ae:32:9b:3e:4f:ab:75:82:c3:82:4c:
         2f:19:9a:cb:4a:62:e1:74:ae:ba:0f:93:68:99:73:b9:9c:4e:
         03:b8:6b:e5:20:c3:a4:56:e3:51:36:ba:dc:6f:c2:1d:8d:5c:
         41:de:05:90:af:d8:f4:a0:d4:28:12:d6:19:31:09:15:27:32:
         50:ba:61:e1:4f:61:b9:b6:d5:de:a9:bf:3c:bb:95:7e:16:8c:
         54:ea:92:33:3d:96:dc:5d:01:a6:88:1c:94:39:77:c3:f5:6a:
         b6:5e:c7:11:15:89:00:da:ca:66:d1:c2:92:21:82:bc:bc:9a:
         55:9c:51:d5:45:b6:12:fe:da:b3:4b:2a:c6:d9:77:34:6f:1c:
         4b:96:d3:a0:97:f9:32:6d:3e:56:26:bf:13:28:ea:84:7b:d9:
         0b:7a:a6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----