Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File:                     G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier:          1a1ITAhqsQsZvyiIoIb73VcD/3ayFH6duulTSOw3/ik=
Subject key identifier:   6F:AF:AB:54:FB:AF:33:30:6D:6D:C1:08:2C:C3:0C:81:D8:48:8B:65
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer:       /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial:       01962ECF701D0543FD8BB097442B10046456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number:          0716
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: ohpDcT20pcy7WQMxjIKdrx3df4mkM471/jL3d4smceE=)
                          2: sEHEZJdyZNM4H5KyWrunH6ae2rs.roa (hash: 2fdDOMvINX/MZk3ZnK4mtn0JneFrVoF0x/0pmTQHlWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:70:1d:05:43:fd:8b:b0:97:44:2b:10:04:64:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=6fafab54fbaf33306d6dc1082cc30c81d8488b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6e:64:e7:46:23:92:f0:41:bd:a0:b1:6d:e1:
                    31:e2:aa:10:97:d9:9d:d2:b3:3a:19:68:f5:83:5b:
                    f4:0e:f9:7e:31:2d:69:a3:e8:a5:14:28:67:cc:fc:
                    3c:c7:a8:ef:9d:b9:98:60:32:78:67:6a:6f:f6:7f:
                    26:7a:98:ad:88:96:48:0a:91:5b:f9:48:ba:19:7a:
                    51:1c:92:6a:f3:c8:81:01:0c:08:cd:9a:72:cc:90:
                    9f:12:80:cf:36:b5:25:f5:20:32:1d:5b:e4:71:29:
                    0a:4b:71:4b:43:d3:24:5b:45:83:68:f3:06:86:8f:
                    51:a7:a3:c5:4a:6f:cf:ad:c2:11:7f:c8:fb:5a:2e:
                    65:24:b7:70:cb:69:04:37:fb:65:89:22:2f:b2:78:
                    0e:b9:43:ad:01:84:9a:ed:4d:75:c0:38:22:46:78:
                    26:b7:01:f4:24:31:32:6e:6c:55:13:b1:57:5c:80:
                    69:4f:21:27:52:cd:7d:31:d8:ea:61:2c:83:9b:3c:
                    bf:fb:ef:65:81:27:5c:d7:40:5a:79:cc:d1:10:de:
                    3e:11:12:c7:36:6b:69:03:81:04:2d:fb:08:4a:13:
                    07:ed:6a:0e:0c:f6:75:64:09:42:cb:21:cb:64:38:
                    f1:2e:33:23:8b:63:59:c3:2c:47:bd:5e:5a:eb:04:
                    0b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AF:AB:54:FB:AF:33:30:6D:6D:C1:08:2C:C3:0C:81:D8:48:8B:65
            X509v3 Authority Key Identifier:
                keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:0c:9c:2e:b4:bb:6d:31:02:fb:06:7a:56:d0:d7:67:15:fc:
         05:7c:f0:3c:03:31:2a:ef:06:37:ff:08:2f:49:50:fc:99:c7:
         3a:ec:c7:8c:d6:72:22:6f:70:05:e6:2e:27:a5:e9:1a:38:50:
         51:fc:6d:ee:85:e2:f8:4e:59:30:45:62:a4:59:33:2f:ba:48:
         49:1f:ab:79:e4:90:cc:cc:50:a5:a2:1b:ab:89:fe:c3:b5:fc:
         f4:f1:dd:a5:a7:a8:48:57:50:fd:97:2c:3a:bd:f4:fb:9e:b6:
         ad:1a:6d:a6:9c:6a:a4:5a:41:f5:55:0c:8c:de:43:cb:fc:63:
         43:a5:7e:2c:46:ae:f0:30:71:ce:83:2c:f2:7e:5e:65:94:a0:
         6a:e0:50:a1:8f:6e:c6:1b:13:a3:73:09:b9:52:3e:84:dd:7e:
         64:17:43:8d:59:93:a1:e5:e3:c4:5e:a0:49:12:bf:27:eb:23:
         fd:0e:eb:03:0d:15:8c:a4:77:73:f7:76:c9:69:d4:a8:db:2d:
         a3:bd:bb:99:3a:f8:f8:18:9b:70:c9:b7:ed:0c:ae:70:27:39:
         c7:9a:c1:e3:b1:64:1a:34:ce:a4:85:24:82:60:3c:e5:d7:11:
         b9:f2:ce:10:a1:4f:47:0a:dc:af:7e:66:91:24:e6:f9:21:f9:
         8c:e7:13:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----