Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
File:                     GVc7IITN9G7hzNKC36O49rfqcmw.mft (raw, json)
Hash identifier:          fxfg3qp0fVOOxO1EBSly58zkp0ZVOSHovRfah8wt8UM=
Subject key identifier:   D6:C7:9D:FD:FB:F8:C6:71:56:7F:58:D8:35:6B:E6:9E:84:CA:6D:28
Authority key identifier: 19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Certificate issuer:       /CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
Certificate serial:       01962F3D9612F410DE066665068981ADF4F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
Manifest number:          1229
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: GVc7IITN9G7hzNKC36O49rfqcmw.crl (hash: Q2+qOoBH39cNxdm3h9bbpJwWeijcVRt7lxWur7ARQfU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:96:12:f4:10:de:06:66:65:06:89:81:ad:f4:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=d6c79dfdfbf8c671567f58d8356be69e84ca6d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:b9:f9:1a:83:20:11:1a:38:fa:d1:cc:c8:
                    13:8c:90:ef:4e:d7:c7:9b:c9:eb:1d:b8:81:e1:ca:
                    34:dd:f6:4f:8c:38:db:50:06:fe:5c:36:c4:38:f6:
                    85:c4:76:fe:fa:bb:67:c8:2d:f9:87:44:07:13:9a:
                    24:a7:dc:4b:b8:ed:ee:b6:a5:c8:73:27:e0:3e:a9:
                    69:c3:15:85:06:e2:93:2f:89:e6:c1:32:0d:7a:9c:
                    0a:f2:2d:99:ed:62:5d:99:8d:e2:eb:f1:ca:8a:f8:
                    5d:b5:de:e4:34:1f:1c:20:16:a7:0b:9e:08:d5:34:
                    79:7b:8c:1d:1d:ca:8c:cf:a5:c5:6e:a8:2c:96:52:
                    85:1e:43:7c:97:99:40:51:03:98:99:af:38:da:05:
                    a5:af:be:70:5e:c5:4d:d5:da:00:58:70:a5:9d:4e:
                    b4:1b:0b:dd:18:60:60:97:11:1c:04:b5:0a:a6:1b:
                    86:69:d2:08:fa:4b:69:b2:4c:50:98:05:0a:54:23:
                    9c:f4:c0:04:16:88:2f:36:c1:21:41:df:09:53:9f:
                    e2:b0:f9:8b:10:e9:b1:d4:61:1e:f2:5e:c0:15:dd:
                    cb:a1:3f:88:9e:56:d3:bc:81:8e:d2:c4:bc:cc:7a:
                    1a:c6:0f:e5:de:fc:71:03:ef:3c:3a:7a:e7:1d:a4:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C7:9D:FD:FB:F8:C6:71:56:7F:58:D8:35:6B:E6:9E:84:CA:6D:28
            X509v3 Authority Key Identifier:
                keyid:19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:0c:b3:78:99:64:f7:01:ac:6b:e5:46:48:4f:88:23:04:
         91:10:e8:63:28:64:ec:d7:72:f4:e5:c1:c5:92:37:23:a8:04:
         92:00:90:92:62:e8:2c:7f:26:9c:d1:e8:cb:90:31:53:01:e9:
         4c:f0:00:6f:65:1a:ad:20:0c:ce:d3:f4:34:18:51:49:d3:d5:
         08:01:40:2f:5b:3e:f5:e7:d7:9a:a7:88:bd:70:74:17:fa:8e:
         b4:52:2c:52:81:94:74:9c:65:07:c4:b7:0b:28:b5:31:b6:be:
         0c:f3:bb:06:59:b9:13:e9:8e:b9:43:38:d9:5c:1b:cf:23:ef:
         d0:07:77:b0:3b:7a:47:3f:18:d3:a9:9e:a3:23:f3:e5:19:3b:
         28:14:68:b9:5e:a6:59:c7:71:81:96:97:62:30:89:96:6f:eb:
         64:df:f4:6a:f4:ee:f9:61:7b:a2:99:0a:e9:10:8a:40:ef:91:
         e6:8b:7e:b4:a3:25:1a:b4:9c:bf:62:18:fe:0f:82:88:3b:85:
         1f:84:95:1c:ba:5b:0f:1c:6b:32:99:78:82:6f:ac:84:28:06:
         68:30:81:33:e0:5c:65:54:d9:48:30:62:15:56:da:5f:31:a3:
         dc:a8:a1:cc:61:ab:a6:40:87:46:7f:9e:d1:5b:ac:23:d7:94:
         4e:03:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----