Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
File:                     G87kBAWu-22hejQO7xWc6cTRgyI.mft (raw, json)
Hash identifier:          tVLu+IuP6TEiq0WmGHuTLHcgTg288OP5Fc5n0V68xOk=
Subject key identifier:   31:F1:AD:F9:77:A5:D8:57:29:C1:A6:A5:5D:AC:24:5F:31:92:49:6D
Authority key identifier: 1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22
Certificate issuer:       /CN=1bcee40405aefb6da17a340eef159ce9c4d18322
Certificate serial:       01962DF3C43B7D34BB0B33CE285BF42A4A3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft
Manifest number:          1202
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: 4fR3vxw-OSsx-wmaMltn3WnnQ1U.roa (hash: XDgHbRopCRJdPkCexKqjsGW1UsqeJHsTtWZ2Q7eQaYM=)
                          2: G87kBAWu-22hejQO7xWc6cTRgyI.crl (hash: fUT/sUIq7IREMatwxNaHGmnFTFxOh6ckE9rUntfpPvQ=)
                          3: WUaj5fwvjt0_9HK-qsCluQyKqkc.roa (hash: bCbUT6py99S1l6vvJQ6Daw8EC7HqPQHAWbdn9H3Yo0c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c4:3b:7d:34:bb:0b:33:ce:28:5b:f4:2a:4a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcee40405aefb6da17a340eef159ce9c4d18322
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=31f1adf977a5d85729c1a6a55dac245f3192496d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:39:35:70:68:e1:c2:8f:b4:bc:2b:31:2f:3d:
                    0c:30:ba:68:e1:86:96:bf:17:48:86:e0:69:d7:ba:
                    09:30:5e:e7:0e:19:cd:6c:94:f2:8f:40:9c:84:ea:
                    d8:44:2b:d2:3e:43:3e:4a:1c:35:44:25:d3:3a:8c:
                    8d:19:eb:44:36:72:05:52:7d:28:8b:26:0e:d2:2e:
                    b6:56:56:48:59:59:b6:c7:57:cf:e1:bd:04:7a:9b:
                    f6:12:e8:49:85:f3:3e:9b:43:33:a1:16:68:f7:c2:
                    61:95:6a:a6:e3:aa:37:24:d7:9d:67:2f:61:a2:45:
                    ef:51:94:3c:0f:f2:37:db:9b:05:29:50:31:4a:3d:
                    8a:8f:77:3e:cf:37:0f:57:fa:49:bb:f1:df:6a:da:
                    aa:4b:f6:4f:bb:b8:2d:b8:e7:6d:1e:59:8b:eb:c5:
                    f9:23:1f:63:82:b3:c7:f8:3a:d3:34:98:13:99:67:
                    0b:d1:7e:fc:cc:c4:03:e2:89:d9:21:19:f5:bd:3f:
                    b5:06:14:72:ff:a4:d5:a3:fd:0a:ad:7e:fd:19:fa:
                    1c:e9:12:39:60:b4:db:c4:17:2d:4e:d3:b0:58:3a:
                    93:60:be:41:16:99:14:2e:01:f5:3f:7e:c0:99:82:
                    40:ef:6d:5c:9c:61:ca:2f:c2:07:3e:8d:a4:08:6b:
                    d3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F1:AD:F9:77:A5:D8:57:29:C1:A6:A5:5D:AC:24:5F:31:92:49:6D
            X509v3 Authority Key Identifier:
                keyid:1B:CE:E4:04:05:AE:FB:6D:A1:7A:34:0E:EF:15:9C:E9:C4:D1:83:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G87kBAWu-22hejQO7xWc6cTRgyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/af89d8-8c35-4c8c-b15d-7e46ad748484/1/G87kBAWu-22hejQO7xWc6cTRgyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:71:1a:7a:34:29:68:5f:13:d0:c8:76:f3:70:50:75:f6:8e:
         e4:ae:37:9e:d7:7b:12:f6:45:27:8a:e9:0c:2e:8d:5a:ca:db:
         95:ad:09:bb:3c:90:42:45:1c:fa:fc:0c:af:9b:fb:3f:3b:d4:
         90:a3:d2:2a:13:45:f8:da:da:55:13:bb:32:eb:24:dc:38:2f:
         3b:89:f6:d7:da:34:10:ff:5a:62:0b:bd:5a:4d:57:f5:8e:6f:
         f7:30:b0:de:cd:03:6b:16:99:0f:89:a4:36:8b:53:41:90:4c:
         89:e9:41:58:ed:c6:80:72:a0:5d:9f:22:b7:3a:e8:8c:9f:7f:
         69:46:a2:7d:57:1c:bc:75:56:43:32:0c:98:01:ee:a4:d2:b5:
         bc:e4:0c:33:7b:21:ad:c3:2d:3c:fa:e8:93:e7:80:02:24:95:
         fc:03:81:d8:32:4e:5a:52:5c:fa:ee:f3:59:87:19:d5:2c:e1:
         b5:d8:79:d1:dc:6e:63:3b:ee:ce:50:0d:e7:b6:55:f7:a3:cb:
         34:1c:e2:30:69:da:97:51:8a:fb:95:3c:03:9b:2a:7b:21:b7:
         a5:9f:51:f6:d3:fd:26:f0:7a:2f:f6:5b:b4:ef:e4:8b:41:7d:
         20:76:ae:b6:4a:5e:f1:f8:a5:54:60:03:36:4b:fd:3a:ba:47:
         c2:62:16:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----