Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
File:                     GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json)
Hash identifier:          inkPpEvK3iVwzYm80S0MTzNTk8/8YRneDJ/QeZatPJo=
Subject key identifier:   83:45:CB:32:87:88:28:43:BB:0C:95:F3:3D:31:0A:91:1D:46:A9:2D
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Certificate issuer:       /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial:       01962E99914BDF1B95164AFDC6806A90C602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
Manifest number:          1503
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: 1JOZ7dbb5H6duThfeMsJ0JbBk7I.roa (hash: 0Pd6o8RRKlvvsS/YlVCGhUpZijHcF0bp4ry/V9YxdXE=)
                          2: 8cLxwhiwZ15o52IG0lIcBm8BfIQ.roa (hash: PFZiPiXQsPniAQ08Y5K+gzotL1tE/fkVxovwe7IBhnM=)
                          3: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: rs4KXNTpY37HBxwpifdoD7n3Kub93NUXEa6H7/F62nw=)
                          4: IUhjeSZNLRuDHaFdnLWNCkDEtoA.roa (hash: 7mHS1yKQvcVUsvgxBWbk52TGnvHhH+IlGhrKPQMDS/Q=)
                          5: Jfkb9wIjflJ9g_nlBWaCF6laiWU.roa (hash: /ljWZ+p/6L9vGqqgT4FUCtEB1Y8qOikrC1+ICoRutK4=)
                          6: eSjPZbIfbzV_-2dY3DLb0TWTSdM.roa (hash: AL9fqh7ceKqnHM3PxeRD473MOSaIbFz8D+64dfZV0bI=)
                          7: shcI5ksCijvvRLID7bxpTU4Ek38.roa (hash: 5j6UIvbPGZk819fhFv2lIK9RILlN83FerZg8FUEwxJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:91:4b:df:1b:95:16:4a:fd:c6:80:6a:90:c6:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=8345cb3287882843bb0c95f33d310a911d46a92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:6e:20:d9:a0:f9:a5:d5:25:b7:59:9a:2d:
                    19:55:a2:bb:e0:4c:ee:3d:72:c6:f7:56:d4:04:cf:
                    71:ee:c8:d4:b3:af:2f:8e:20:69:dc:05:ba:eb:45:
                    03:c8:34:8b:4c:35:c9:56:3e:cf:24:63:19:69:0f:
                    dd:50:4a:89:92:e2:38:f6:f0:d8:7c:45:57:3e:83:
                    2d:c6:df:e5:7a:7d:79:cc:2c:9e:2b:f5:ca:ca:4c:
                    7d:32:40:35:e3:9a:22:8a:99:bb:ec:7d:57:c1:ad:
                    46:8c:c2:cf:da:d2:f9:be:15:11:0f:38:ab:77:93:
                    29:5f:b1:31:c6:b5:40:46:25:f0:a3:55:de:55:ca:
                    e2:6f:b1:4a:c4:62:d3:a8:69:fc:b9:4f:cd:4a:2b:
                    56:0c:de:11:a5:0a:12:49:3a:76:e1:0a:57:7f:e5:
                    4c:50:f1:ce:51:74:9c:cd:ce:15:45:9a:d1:b4:55:
                    6a:fd:6f:74:3a:0c:ab:09:6a:13:c5:ec:5f:4c:03:
                    0f:15:df:6b:13:0d:77:fe:04:f5:aa:53:c1:4a:ac:
                    6a:f5:ce:71:14:b5:c8:b2:29:5a:57:f9:e3:d6:a2:
                    b2:b8:a9:39:40:05:43:5d:4b:d8:94:23:f4:f9:26:
                    4f:d5:cc:42:41:33:23:12:6b:bb:82:83:07:87:5c:
                    a5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:45:CB:32:87:88:28:43:BB:0C:95:F3:3D:31:0A:91:1D:46:A9:2D
            X509v3 Authority Key Identifier:
                keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:ef:d4:55:6b:34:6f:6a:79:80:25:04:15:df:07:9a:83:
         c7:16:20:bc:b5:ab:99:2e:b9:e4:93:65:3c:f3:bb:51:01:f2:
         bb:c4:3e:63:8e:28:36:a4:55:59:d3:51:97:62:34:06:36:bc:
         f1:3a:d2:f5:0f:97:fb:eb:94:d0:8f:b0:7e:b5:6b:ee:4e:0f:
         41:45:a6:b8:fc:28:87:e1:db:8a:16:a7:bc:d6:28:b6:6c:dc:
         c0:9e:bf:58:24:83:a5:3d:5c:94:10:c1:4c:88:dc:ae:0b:9b:
         f1:bb:0f:f0:a4:bc:7a:c6:7a:bd:a4:d5:92:dc:32:c5:1a:e7:
         97:fd:2a:74:dc:6c:e6:02:5f:39:7b:85:7a:21:50:0c:ea:3d:
         36:10:ab:73:22:bb:ab:78:16:f1:f6:67:67:c2:54:1d:38:3b:
         4e:cf:bb:fa:87:b1:87:37:97:fe:51:e5:b5:68:e1:22:c3:7c:
         f2:26:21:3c:69:3d:15:4f:89:7a:b0:79:18:a2:f0:67:48:ef:
         48:c9:11:80:7b:69:f4:d5:4c:2f:b1:0e:09:3c:c2:46:94:5c:
         c4:75:f1:9a:59:94:d4:97:19:e3:ca:da:d6:15:04:9e:f9:74:
         58:b1:a5:c1:93:9e:a4:32:05:d2:0c:a6:6c:89:80:f4:52:6f:
         a8:bf:29:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----