Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
File:                     GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft (raw, json)
Hash identifier:          QqU482RSzT+E8Nc54193MAtNDxKBecaZNy2IyQW6/0c=
Subject key identifier:   97:8D:68:2C:4D:20:87:00:A8:C0:78:5D:FC:20:90:CD:61:7B:C8:53
Authority key identifier: 1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12
Certificate issuer:       /CN=1a228183490ac6b2523dbfcc087c13816f9c2612
Certificate serial:       01962E9892F785ADC55F4A0F8D82D40A29B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: FpuR0y9APVvFEzZNqfMzupE3ra4.roa (hash: GpOZZgRFNoAGIu1wspT0GzMUn0LG62S5x4bgRa8l/A4=)
                          2: GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl (hash: hhSckJXDQMSai1XfSsdzLQxrPGLlVESWcoXv3Z4qY0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:92:f7:85:ad:c5:5f:4a:0f:8d:82:d4:0a:29:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a228183490ac6b2523dbfcc087c13816f9c2612
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=978d682c4d208700a8c0785dfc2090cd617bc853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:bb:42:8d:a1:1d:24:6a:eb:d5:9a:33:a9:
                    c7:4d:f2:88:bb:07:a0:d3:a1:95:79:bc:0e:db:f1:
                    41:ff:cd:c0:e4:5b:bc:16:fb:3f:d9:de:1e:32:1f:
                    f9:31:38:59:84:71:15:87:5b:e0:66:ec:4c:d3:5d:
                    5c:1e:22:c1:f6:20:ce:60:76:e9:f3:63:a1:ed:79:
                    23:e3:27:f5:22:bf:67:76:b4:37:c4:8f:64:a8:39:
                    39:c1:9e:dd:89:c3:c7:7a:5b:30:ca:c5:4e:5c:41:
                    21:95:8a:7b:6f:a6:4a:da:ca:5b:14:58:12:a5:cd:
                    24:b9:4f:07:db:12:84:22:5a:ac:42:08:92:62:ed:
                    75:5a:61:a2:55:d2:68:74:73:b4:59:f4:e2:1e:a6:
                    14:18:34:c3:9b:f1:e6:1e:15:e5:20:d4:60:71:73:
                    ec:8f:64:5d:9f:1d:21:ed:a9:e8:02:79:67:16:f7:
                    9e:9a:35:64:68:7f:84:e9:fb:f5:70:d5:15:db:2c:
                    0b:05:1a:d2:53:8e:f6:9d:7a:55:b7:d0:f8:93:60:
                    bc:84:4f:eb:a4:3a:c2:b6:71:bd:2b:3a:1c:b8:44:
                    26:45:42:b7:d4:34:b9:17:06:75:59:d0:b2:4d:c1:
                    1e:49:f1:82:af:d9:90:e7:8a:36:d9:6d:40:ca:77:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8D:68:2C:4D:20:87:00:A8:C0:78:5D:FC:20:90:CD:61:7B:C8:53
            X509v3 Authority Key Identifier:
                keyid:1A:22:81:83:49:0A:C6:B2:52:3D:BF:CC:08:7C:13:81:6F:9C:26:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiKBg0kKxrJSPb_MCHwTgW-cJhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/96106f-3da3-4a67-bb3c-69c4e8533521/1/GiKBg0kKxrJSPb_MCHwTgW-cJhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:1b:dd:ad:fc:5e:2b:27:f0:b9:62:a0:60:6a:e4:8a:08:32:
         4a:22:1f:75:61:99:a7:77:d5:36:35:50:bf:41:3f:81:4e:71:
         65:c0:1a:db:6e:f3:16:e5:d6:3a:9d:15:06:f5:30:53:d6:c1:
         cf:23:af:ab:8e:58:c1:fa:6d:34:39:30:71:1c:0f:ed:3a:be:
         43:9b:9b:43:76:63:83:68:0d:aa:67:f0:54:7e:e2:84:29:db:
         f3:81:49:df:98:06:8c:d2:88:3a:23:08:1c:dc:66:53:a2:49:
         45:8e:79:79:9f:c8:58:d3:ee:61:c7:47:04:9b:fe:0d:e6:1b:
         80:00:54:23:38:fd:8b:29:23:60:a1:da:c3:28:0d:cf:82:9a:
         7f:53:4b:31:d2:6d:39:38:d3:87:01:d4:45:20:56:e5:03:69:
         de:6e:62:38:e3:71:b1:b2:c8:b1:59:f1:21:59:84:ab:fc:20:
         b1:73:7f:ba:3e:81:d6:98:76:b9:ee:ff:66:ff:ac:5e:4d:af:
         75:63:67:83:bd:7a:52:a4:1e:5a:e6:54:b3:9e:aa:cf:99:0c:
         5d:e0:ff:e5:23:e9:17:c5:dc:4e:9b:1c:49:15:8b:59:f7:78:
         ae:c8:59:ba:02:ee:5f:6c:16:5c:9b:cd:76:37:23:c3:af:cd:
         5f:18:e0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----