Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
File:                     GVmXqL_GmLjrnoco7K8SpSezV98.mft (raw, json)
Hash identifier:          dwjeHjHu+os9/U/NPIv7PDDQPhH/ocR4xeULTRuw7tA=
Subject key identifier:   6C:7A:77:03:DD:73:98:8A:D3:92:87:D1:76:18:D9:4A:FE:C0:50:88
Authority key identifier: 19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF
Certificate issuer:       /CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
Certificate serial:       01962FAB4B9583A2E3EE09945F43352697FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft
Manifest number:          07F0
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: GVmXqL_GmLjrnoco7K8SpSezV98.crl (hash: 5/Zn6+rW5yWVA4CaaT/UDhI+0nSv9B52Ywe6AFHkRTA=)
                          2: xSRj9AL7LP2z8yZaMDfviXxDydk.roa (hash: 2o2eUqaQbQdiuk4n3UmnVUKsg19YQAtxvu//olNpHNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4b:95:83:a2:e3:ee:09:94:5f:43:35:26:97:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195997a8bfc698b8eb9e8728ecaf12a527b357df
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=6c7a7703dd73988ad39287d17618d94afec05088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:50:7c:f9:d6:37:33:dd:2f:c5:0f:a9:50:
                    ee:6c:89:be:b8:44:ba:24:af:b4:cb:de:be:07:1a:
                    71:99:99:7e:8d:e6:08:a7:68:df:de:e9:a3:cf:61:
                    d2:30:2c:ec:1d:61:4f:84:92:c2:3a:3c:42:b6:68:
                    ed:3f:d6:90:33:49:c1:fd:03:7b:da:d5:1f:ac:89:
                    a1:9c:ef:33:6e:2f:1f:15:76:68:6e:f0:e3:9c:be:
                    a2:65:97:6b:5f:c8:0e:c5:3c:3a:c8:9b:69:c0:89:
                    11:89:ac:ac:f9:77:6a:3f:a0:c1:ec:ec:5d:ab:61:
                    f3:51:09:54:00:ab:a0:fe:8b:3f:59:bd:1a:59:82:
                    a8:5b:ad:ac:b5:61:02:97:0c:55:7b:24:7f:12:cd:
                    78:21:53:38:ef:df:76:6c:5b:c1:a0:1a:90:1c:28:
                    46:b6:15:1d:ff:24:36:1b:c5:30:bb:fd:e4:93:54:
                    dd:3e:ae:91:aa:2e:db:5c:e6:f5:8a:04:8f:63:eb:
                    28:c4:11:eb:ef:ee:f0:5d:f0:90:a3:c7:50:de:4c:
                    9d:17:8f:35:51:da:6a:77:fa:cf:3a:a2:94:b5:aa:
                    f7:1e:aa:e4:98:40:ec:6b:d3:38:f4:70:f8:eb:a2:
                    d2:e2:68:f1:39:cb:9e:9b:76:30:d8:76:be:33:16:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7A:77:03:DD:73:98:8A:D3:92:87:D1:76:18:D9:4A:FE:C0:50:88
            X509v3 Authority Key Identifier:
                keyid:19:59:97:A8:BF:C6:98:B8:EB:9E:87:28:EC:AF:12:A5:27:B3:57:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVmXqL_GmLjrnoco7K8SpSezV98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6cdb63-9cfd-4984-877e-09210212714c/1/GVmXqL_GmLjrnoco7K8SpSezV98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c8:8a:ab:e5:48:17:28:e5:4c:f2:e9:b2:ac:0f:05:83:49:
         e1:27:7c:a0:48:cb:d1:1e:0f:24:19:78:6e:16:54:26:1b:b3:
         bc:86:a5:90:5f:8b:59:0c:2f:25:f7:87:79:a7:d5:37:a4:65:
         a8:bc:38:48:50:82:98:55:d7:31:e2:a3:4c:c2:e2:e0:8e:a6:
         90:05:d2:ae:39:98:66:ad:f4:c9:2e:17:8f:ae:3e:fa:88:e3:
         15:97:3a:6e:6d:e4:74:a0:dc:04:1e:ac:66:d2:be:27:1c:4a:
         2b:81:9a:ca:7b:19:a3:e9:c8:ed:b9:c6:77:aa:bc:e5:2f:15:
         81:40:75:fa:b0:ef:2b:f1:d6:52:72:5e:0a:77:a3:32:f7:34:
         e8:fb:ac:5a:42:53:5d:bb:52:8a:8c:0f:b5:d9:87:ac:8d:ae:
         05:06:d9:94:e5:81:b9:2b:68:ec:88:db:a2:5e:60:8f:70:10:
         94:f3:96:d2:bc:58:7d:a6:bc:41:1a:ab:2d:09:57:54:34:33:
         66:f7:81:db:d8:f8:ac:27:e0:33:c6:16:d4:db:00:fc:e8:34:
         00:f6:a3:b6:66:76:d8:ac:c9:b7:27:1d:96:f6:40:d5:4f:13:
         33:2d:13:54:0b:12:89:27:41:55:eb:a7:42:e3:e6:ca:e1:b4:
         a4:74:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----