Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
File:                     GPkZTU3X1Le3d8kgB55AHTolM7Y.mft (raw, json)
Hash identifier:          GD+pamXvcyyGn8eQ/zCRIeMCJwh1DRsGhf4+T9/z9cI=
Subject key identifier:   D1:5D:EE:6F:2C:7C:CC:CC:24:11:3B:A0:98:CA:11:BD:89:E9:13:DD
Authority key identifier: 18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6
Certificate issuer:       /CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
Certificate serial:       01962F07122F319616C7797F0FC6459EE6B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft
Manifest number:          0150
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: GPkZTU3X1Le3d8kgB55AHTolM7Y.crl (hash: nUJqO6KZ1JQRByXBnNYz2FYUmL2KH4LKdsq7PSH1nLc=)
                          2: tGnfBpcM9WdZcGTV2u32zJOiBt8.roa (hash: gFwI+sP0Z829K3A/AxDldH8I51IlzJyC6UwEbaoL6wI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:12:2f:31:96:16:c7:79:7f:0f:c6:45:9e:e6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18f9194d4dd7d4b7b777c920079e401d3a2533b6
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=d15dee6f2c7ccccc24113ba098ca11bd89e913dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:21:09:4e:f6:a4:ac:28:59:9d:a8:8c:af:
                    be:17:81:f4:89:8d:d3:32:90:be:8a:6e:63:85:51:
                    d0:30:25:11:06:bb:ed:e7:b2:d9:86:86:ca:d0:4c:
                    80:bc:c1:17:d4:1e:07:b3:fd:d7:81:50:9b:3a:72:
                    cb:f8:22:75:1a:8b:d3:7a:15:5d:d7:d5:5b:35:c1:
                    9b:5d:65:6c:45:7b:40:6d:94:2b:a3:78:8c:b6:1d:
                    f1:60:24:2c:07:05:39:8a:41:01:04:2d:bf:db:a7:
                    c1:82:76:e4:3f:b0:41:dc:a5:c0:ea:33:d8:74:9e:
                    2f:d1:8e:6e:f3:73:54:dd:0f:7e:7f:b9:6f:02:15:
                    2e:ee:f6:74:72:c2:30:8b:15:d0:a5:0c:11:76:24:
                    95:0d:45:b0:76:26:18:42:fe:f4:ee:fb:cb:e3:de:
                    20:5e:ee:cc:37:67:b2:4a:d3:18:47:92:a5:c4:21:
                    c5:02:a3:43:fb:2d:41:49:cf:b4:d7:d8:01:18:9f:
                    c7:a8:f3:5f:d3:27:c5:06:d2:6a:1d:63:d3:d8:b9:
                    a1:00:c8:6e:34:af:df:78:b5:f4:c5:ef:50:e2:c7:
                    86:a7:bb:5b:17:1c:c7:10:50:a1:9e:67:92:6d:9d:
                    f2:53:fc:0e:0f:cd:3d:31:aa:de:34:ae:6d:39:7e:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5D:EE:6F:2C:7C:CC:CC:24:11:3B:A0:98:CA:11:BD:89:E9:13:DD
            X509v3 Authority Key Identifier:
                keyid:18:F9:19:4D:4D:D7:D4:B7:B7:77:C9:20:07:9E:40:1D:3A:25:33:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPkZTU3X1Le3d8kgB55AHTolM7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d2c689-ec36-4edf-96f4-38995f24b1ef/1/GPkZTU3X1Le3d8kgB55AHTolM7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6a:3f:71:ac:30:ad:c9:19:48:09:5b:58:dc:87:48:05:62:
         38:bf:e1:ae:51:88:70:38:9d:d3:e7:d5:5d:e6:3f:af:14:11:
         62:b7:e7:c3:42:53:05:f6:49:1c:26:d3:f2:ab:0f:1b:df:cb:
         f4:e6:64:73:b3:73:d5:98:e3:95:3e:68:c5:d8:56:f6:ab:2f:
         43:fd:12:e3:6f:1c:7d:7f:d6:bc:1b:4f:b3:e8:25:c0:a4:4e:
         5b:54:51:92:bd:1c:3b:b5:30:92:15:13:2c:94:61:10:96:7e:
         ab:10:5e:6a:52:48:61:a3:4e:6f:d2:16:22:99:6e:50:ad:7b:
         db:bd:7f:83:f3:d7:8b:12:19:66:ef:6f:ec:78:6c:9b:1c:03:
         6e:cd:4d:86:b0:e9:d1:b3:95:12:1a:d4:cc:49:b6:bb:8c:1b:
         88:a7:5e:1b:cd:14:06:77:be:80:95:8d:d1:26:4e:52:5f:8b:
         96:3b:ec:94:80:e0:be:43:70:d0:94:3d:69:61:1e:18:74:85:
         6a:69:c7:c8:88:04:d8:ad:6d:cf:db:ca:57:61:e2:cc:28:b6:
         36:1b:a4:51:24:13:17:59:e8:18:e2:b9:84:f0:01:61:74:05:
         d2:5c:f3:dc:05:9e:82:25:99:86:69:c6:93:47:4a:8a:50:9d:
         27:c0:42:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----