Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
File:                     GtwAk8WviUz1ILWTbjCyFQkN6fg.mft (raw, json)
Hash identifier:          0NpTcLcHqh54r30c3xn0V1Gj/zRheDCVCJyIzpan7Bc=
Subject key identifier:   B8:32:A8:D8:65:F2:0E:0F:13:67:CE:1B:C9:A4:59:76:79:17:BE:F9
Authority key identifier: 1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8
Certificate issuer:       /CN=1adc0093c5af894cf520b5936e30b215090de9f8
Certificate serial:       01962DF3BB1AD93E919C79FC3841132B0A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft
Manifest number:          0CAF
Signing time:             Sun 13 Apr 2025 07:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:09 +0000
Files and hashes:         1: GtwAk8WviUz1ILWTbjCyFQkN6fg.crl (hash: cKbSQjGqgiqzXaREyaacUvjSz4rjRJl7+FqQmzg9p58=)
                          2: UJ4olMWApP7MwaE2AnHAAWvvURE.roa (hash: j8yhG+CkxtZBOA9heOK1DNmQYHzy/3/vJayn7f/Unnk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bb:1a:d9:3e:91:9c:79:fc:38:41:13:2b:0a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1adc0093c5af894cf520b5936e30b215090de9f8
        Validity
            Not Before: Apr 13 07:01:09 2025 GMT
            Not After : Apr 14 07:01:09 2025 GMT
        Subject: CN=b832a8d865f20e0f1367ce1bc9a459767917bef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d1:06:79:eb:d3:f6:27:df:52:a9:45:38:94:
                    df:62:e7:00:68:79:d4:1b:d4:48:20:03:80:56:1f:
                    cd:c9:64:7d:ae:19:66:5d:91:ed:c9:80:14:0b:15:
                    7a:67:b5:1b:a0:8b:3d:01:78:d8:c0:5f:9b:ee:1f:
                    45:2e:6e:e8:1a:a5:b1:19:69:48:c6:78:0d:a5:76:
                    83:69:6a:6d:73:53:b4:95:fa:86:f4:f5:57:f9:1f:
                    d5:13:65:9c:0b:69:e4:66:dd:67:c4:3c:62:e6:d6:
                    a2:b6:ef:0f:df:e8:e4:e1:a0:32:fe:8e:0c:93:61:
                    92:1e:fc:2c:cf:83:36:83:50:1a:0f:7b:ba:8f:fe:
                    97:2f:d2:07:17:a9:b5:bd:09:34:01:8c:a9:2c:45:
                    b0:93:f6:a6:41:d4:29:f8:14:1d:b0:69:46:47:14:
                    aa:e2:a0:dd:b8:7e:4a:d3:3d:25:10:c7:85:a5:42:
                    a2:03:a6:9c:03:c6:ec:d5:04:e5:38:fa:5e:bb:27:
                    32:06:63:d2:81:d0:79:04:5b:f5:d4:b1:90:62:e3:
                    f1:79:e5:7c:c5:a5:40:35:08:31:d9:ca:1a:1a:79:
                    8d:9c:a3:7a:49:f6:e4:2c:87:34:2b:1b:85:e1:4c:
                    e3:6c:40:6e:c8:4e:57:ad:7e:cd:ba:11:31:3f:48:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:32:A8:D8:65:F2:0E:0F:13:67:CE:1B:C9:A4:59:76:79:17:BE:F9
            X509v3 Authority Key Identifier:
                keyid:1A:DC:00:93:C5:AF:89:4C:F5:20:B5:93:6E:30:B2:15:09:0D:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtwAk8WviUz1ILWTbjCyFQkN6fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6b60ed-0c46-4873-91fe-f5948c716e16/1/GtwAk8WviUz1ILWTbjCyFQkN6fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:26:88:af:e6:f3:90:ca:e0:30:b2:ae:f0:8a:f6:ea:c6:56:
         37:2a:5c:c6:dd:70:a6:94:8f:a8:a0:5a:c2:7e:43:bd:14:0b:
         90:0e:17:86:95:27:5e:ae:21:e9:5e:df:82:2b:27:d2:6e:a0:
         05:49:d9:99:32:5a:6d:3f:b9:53:ef:0c:e3:d9:b5:ba:53:c6:
         15:bd:db:68:df:02:77:52:27:57:d2:9e:a1:47:86:89:b9:44:
         84:a2:72:71:5d:a1:32:2b:4e:d6:fd:f4:b7:fb:1d:65:3e:40:
         99:ea:be:86:ee:35:d6:ed:5f:b1:d1:63:d0:b1:0b:6f:81:53:
         05:da:6b:c0:a3:c2:f1:7a:d1:4b:bf:26:16:3c:f7:09:83:9f:
         1f:58:27:4d:1d:f9:f0:f2:44:4b:05:86:85:a1:e8:4c:0c:a7:
         4d:ec:b5:65:96:53:d5:33:f5:7b:78:f9:36:4a:29:0f:58:12:
         c8:0f:6d:47:ce:86:37:93:28:89:1d:84:11:04:33:2a:67:1d:
         87:9b:90:88:8d:8c:54:29:51:5b:2b:0e:50:51:11:fc:f9:b6:
         eb:ca:2e:2f:a3:59:00:69:36:dc:97:af:80:cb:e8:50:45:dc:
         69:89:c4:1c:1f:6c:17:b8:8e:13:a9:36:e7:f6:d2:35:32:c3:
         c0:00:91:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----