Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File:                     GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier:          8FK0/E6od88SPt4xBiu0EO8U+0toyT1lPUaDJ215HXo=
Subject key identifier:   A1:79:70:13:71:60:D2:06:FB:29:B6:39:84:CB:F3:F4:D1:89:ED:53
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer:       /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial:       01962F06DF660D4AF9DC46BD466A7E91DFC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number:          0648
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: V24kxbYn+I82BdanAKUdehlOrq/9FMA4R4EPMw8DmdM=)
                          2: MBByOIj39pYIect2LdRi3wnM4oc.roa (hash: tdzNEKUZ3mXK0KXsFeqcPam83cZmJKXuHjjqHDm2aqU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:df:66:0d:4a:f9:dc:46:bd:46:6a:7e:91:df:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=a17970137160d206fb29b63984cbf3f4d189ed53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a6:27:43:af:ad:de:f0:65:e1:67:e9:42:0e:
                    a6:13:dc:d9:41:13:b9:d3:4d:c0:71:40:c1:7c:b0:
                    29:f3:f0:4c:e0:bf:f6:a6:d3:82:59:e6:24:06:82:
                    08:93:b0:b3:b7:53:99:62:9a:ad:6a:ca:6f:f3:6c:
                    bb:36:ee:9b:5e:58:6b:48:52:e5:0f:09:bd:a6:b4:
                    d7:a2:4d:0c:a7:09:8e:ee:99:41:bb:04:d7:de:dc:
                    a0:79:66:23:9d:f7:d4:06:f1:4e:50:88:34:dd:3f:
                    97:c7:86:35:96:c4:94:9e:2a:c8:1a:b9:11:2a:1a:
                    68:a3:d9:9b:52:72:3c:2d:8c:bf:5c:02:ce:0e:c6:
                    19:41:3a:5b:3a:51:2a:4d:80:79:2e:15:22:68:5c:
                    9a:6f:10:a6:ac:69:f4:23:d2:10:59:16:a0:6f:c4:
                    a3:16:76:78:a7:da:25:22:ad:03:5d:d0:04:b0:66:
                    46:bd:3f:6d:5a:a5:03:ef:93:74:9c:60:1b:b7:12:
                    0b:e2:3e:6f:f0:7e:e9:4d:18:70:e8:30:79:ed:a6:
                    ff:5d:da:a5:e7:60:d9:14:9b:7a:4e:55:1e:f3:e0:
                    5c:78:95:b3:9b:bc:aa:82:54:20:54:7d:4f:de:58:
                    97:5b:24:2e:e3:8a:2c:40:3f:8d:c3:4f:1d:38:da:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:79:70:13:71:60:D2:06:FB:29:B6:39:84:CB:F3:F4:D1:89:ED:53
            X509v3 Authority Key Identifier:
                keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6a:af:79:21:75:11:9e:1e:c4:97:ea:7a:e7:fa:4a:10:44:
         17:d5:f7:ef:92:e5:39:92:e7:fb:b2:e0:36:ba:a4:55:96:01:
         e1:d2:65:6c:41:62:48:a7:1f:9f:cf:ff:ae:b2:13:d3:74:f5:
         ee:36:e6:9e:0e:f9:9b:24:07:92:41:65:09:71:6c:dc:80:50:
         ec:7b:f2:be:5b:e0:20:7b:aa:b6:90:47:d1:87:a7:7b:78:4b:
         27:5a:dc:b5:a6:d9:5d:43:ec:c4:18:38:b4:40:8c:f5:a2:58:
         e4:2c:2d:b5:14:66:d1:c5:05:8e:3e:fc:77:04:08:a9:6b:19:
         21:91:47:c7:b2:ba:24:04:79:5b:03:b5:f0:43:1d:c0:dd:61:
         eb:75:22:6e:66:8d:d1:64:96:01:5d:09:c9:ee:18:05:69:97:
         d1:60:6d:6f:40:35:92:f9:e4:a4:d5:6b:74:fa:86:aa:86:b2:
         ae:1c:24:cc:11:3d:ad:0c:cf:98:10:c5:24:74:95:38:83:72:
         52:b4:64:70:46:4a:24:65:99:92:c1:fc:02:3f:4a:63:56:c2:
         08:34:9a:e3:5e:5f:80:67:0e:98:c5:ce:31:5a:80:b0:ff:bd:
         39:f9:8c:f4:6e:c4:6f:c0:40:c9:b7:a6:a3:3c:ab:d4:e3:91:
         59:99:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----