Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File:                     GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier:          HwQwCv3qPGw/MmTIH/eXgwpmyILdeDyMP1fOCdhqCvA=
Subject key identifier:   52:B0:7C:A3:12:9E:94:6F:FF:AE:86:3C:97:7A:62:CD:7F:95:A6:34
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer:       /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial:       01962F74BFB744EE6CDEF4ABB39802B20909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: WW5ZWMgPSXvK11//WOEXrCBrbGVKk4O/T+nSE7jY7Ms=)
                          2: fMjdAQm5WWjX107kmWjwWyD5LwQ.roa (hash: l0N+np95OzXLgeVPAbMAHAftw2B/8U/CKLsG00LUnV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bf:b7:44:ee:6c:de:f4:ab:b3:98:02:b2:09:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=52b07ca3129e946fffae863c977a62cd7f95a634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:4c:4d:f2:35:2a:9e:ca:f2:26:72:71:df:
                    03:b8:17:6e:61:af:5b:e9:18:94:87:f2:55:bb:20:
                    d2:c6:29:6b:a4:b8:e0:f8:3f:80:98:ff:bc:38:f1:
                    0c:5a:dd:24:0a:70:d5:b3:4d:9c:ac:2f:f2:a1:89:
                    89:5c:ab:ca:e4:4c:24:11:49:ce:f5:51:e1:2e:1c:
                    55:1f:2d:a7:1f:17:44:57:19:7a:31:ff:84:a0:4f:
                    0b:5d:95:7d:b8:ee:1f:fa:de:78:05:26:a9:bf:c5:
                    d3:27:f3:9e:84:9b:c7:8e:8a:b7:88:a4:fd:00:bb:
                    6c:eb:e9:10:41:e8:78:85:a7:c2:9d:b8:c2:46:76:
                    27:e5:2c:50:65:c7:3c:2e:ef:cb:f1:d5:a3:18:56:
                    c7:f6:87:bc:5e:ff:22:23:8c:13:6c:dc:a2:22:6f:
                    7a:a5:f1:89:11:34:0f:71:e2:6d:d9:28:20:45:c6:
                    88:11:c7:62:c3:c4:a0:7e:10:c6:c1:1f:1c:50:90:
                    10:a1:19:d9:aa:d6:76:84:93:a4:14:bf:52:a8:7b:
                    c1:3e:61:be:4d:58:bb:06:6f:f9:10:9d:a6:c0:0b:
                    c4:73:f1:36:96:72:88:76:6e:d5:36:2a:98:e3:9b:
                    1b:98:14:82:a9:67:3e:21:e5:63:14:57:0b:3f:a0:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B0:7C:A3:12:9E:94:6F:FF:AE:86:3C:97:7A:62:CD:7F:95:A6:34
            X509v3 Authority Key Identifier:
                keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:35:ce:c3:6e:c7:d1:27:2e:c4:8d:54:de:24:6b:9f:d2:78:
         92:82:31:e8:1f:ec:57:a8:5d:89:cd:5d:f9:7f:a1:06:e6:8d:
         30:d5:a1:15:ba:ca:09:a7:0f:f3:7b:82:19:30:6f:43:be:17:
         a0:27:9b:32:a4:a5:02:56:a1:4c:f0:a2:90:7f:aa:4e:23:9e:
         90:a3:d1:5f:86:ea:c2:f2:15:fa:4a:a4:37:77:20:44:9c:08:
         8d:40:02:eb:6e:93:83:80:a3:4b:ec:a5:42:16:96:36:68:37:
         bf:ee:f4:c9:ba:c0:fe:f2:54:e5:39:e6:72:8b:41:6e:a6:ec:
         32:be:78:78:c4:cf:4f:62:f2:34:81:51:98:f9:c8:f9:c0:dd:
         7f:0e:96:cd:ed:5d:fb:9a:a8:2d:db:f8:b0:c2:9f:68:c9:38:
         30:44:9b:b5:bb:93:15:e2:e5:1c:5b:de:78:f4:af:23:9f:d2:
         90:b1:68:4a:26:f2:7d:59:e5:ed:4b:4c:d9:c9:ab:f3:bd:30:
         40:65:ff:22:14:ea:68:f0:b9:c6:b0:fd:58:69:85:00:f6:ea:
         b7:f6:0d:da:84:43:97:d3:a2:9a:65:fe:88:86:1c:eb:db:ab:
         86:81:cd:52:3d:c5:0f:3f:83:77:ca:af:b1:b2:db:4a:f4:ff:
         8c:e5:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----