Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
File:                     GXSZvpe8wyf2Tp64xCOUUIygbWU.mft (raw, json)
Hash identifier:          GNthX04fzv5rdER5G0vlHCjrMKP0C2kMKLO75Jn1N9Q=
Subject key identifier:   A2:F8:83:86:ED:E4:85:5D:D8:41:6E:29:08:D9:AF:D6:27:77:B2:25
Authority key identifier: 19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65
Certificate issuer:       /CN=197499be97bcc327f64e9eb8c42394508ca06d65
Certificate serial:       01962ECFD57E623890A9B7C9BEF839806E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft
Manifest number:          0B40
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: GXSZvpe8wyf2Tp64xCOUUIygbWU.crl (hash: Et7TvfGRl2w59HHiBmUmuDL/GjYTrn1yRpfVApZGSLQ=)
                          2: sotFwW0dd18jhlgGMEoNrnqopP4.roa (hash: gVSt/FfSJjyB1+rQ4tB9A+DWP4ec6C61j3+zsQZbog8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d5:7e:62:38:90:a9:b7:c9:be:f8:39:80:6e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=197499be97bcc327f64e9eb8c42394508ca06d65
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=a2f88386ede4855dd8416e2908d9afd62777b225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:7a:f7:7e:3c:66:98:b2:6d:f1:8a:7b:a1:
                    7e:3f:e4:59:3e:0e:9f:c8:3e:e7:12:a3:65:73:29:
                    ba:ce:27:c8:15:07:0d:31:b8:fe:63:58:34:2f:d6:
                    e9:95:d7:33:70:8e:46:9d:85:db:8b:46:af:43:f3:
                    36:d9:17:77:6f:c0:02:96:00:9e:fd:88:7b:0b:1a:
                    e6:3c:0d:d7:93:32:56:7d:e5:32:b1:90:d4:b8:00:
                    2b:24:77:0e:a4:2f:b9:a5:ca:9d:8a:82:87:92:ea:
                    9d:2e:66:db:15:41:33:c0:0f:30:1b:08:72:38:79:
                    d1:e1:f5:37:5a:54:ea:8e:69:0c:97:3c:96:38:d1:
                    d4:1a:98:ea:8b:85:d0:8f:d3:a9:99:7b:3c:3e:e5:
                    8c:9e:b8:16:ca:e2:9f:dd:a8:8f:36:ba:a1:f7:32:
                    db:12:13:56:1f:f7:28:eb:46:f8:73:ee:09:71:af:
                    43:00:cc:eb:8f:d6:8e:b7:0b:d7:7a:b4:48:f6:df:
                    d7:7b:60:1b:51:51:a9:58:6c:33:e2:43:8a:8a:99:
                    cc:a7:8e:db:9b:46:74:36:fe:d2:e6:d4:29:bd:ad:
                    f8:1e:2b:2b:06:87:45:12:17:dd:9f:ea:e2:47:ac:
                    b5:02:a5:94:39:2b:f0:75:b9:9d:45:f5:26:85:a7:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:83:86:ED:E4:85:5D:D8:41:6E:29:08:D9:AF:D6:27:77:B2:25
            X509v3 Authority Key Identifier:
                keyid:19:74:99:BE:97:BC:C3:27:F6:4E:9E:B8:C4:23:94:50:8C:A0:6D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXSZvpe8wyf2Tp64xCOUUIygbWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6a900a-8b5c-407b-a094-898036734878/1/GXSZvpe8wyf2Tp64xCOUUIygbWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:92:18:8d:08:82:16:70:99:86:e3:05:77:ae:b2:a8:24:c8:
         58:b6:83:d6:dc:87:fe:ce:38:51:a1:73:4e:f3:f0:c4:ec:4e:
         10:02:c5:03:c6:be:08:ca:f5:2d:2e:af:37:e8:02:d4:c1:2e:
         2f:ca:e9:69:3a:f8:97:a3:91:3e:5f:10:04:39:95:0e:02:0a:
         6e:67:cb:35:a5:22:2e:60:77:5d:63:6b:b8:15:28:28:98:fc:
         06:3d:25:67:c9:e6:48:e6:59:9e:d8:82:63:01:5c:d7:29:36:
         f7:e8:bb:76:e5:ad:4c:d5:0a:63:86:66:77:78:03:0e:e7:d2:
         63:32:e6:57:5f:d2:6f:c6:80:83:20:27:de:56:b6:56:c3:d6:
         d7:82:f4:be:64:1a:3a:e1:1d:ff:05:db:1b:f5:09:d3:85:66:
         0c:d2:c2:96:2f:08:3f:70:a3:31:49:7e:d4:06:7f:66:14:a6:
         e1:e7:bb:0a:cb:4f:eb:08:e3:03:4a:ad:53:54:41:41:c5:5d:
         1a:f1:d5:7d:0e:39:d7:84:6b:d1:db:75:5f:1e:e2:41:8a:ec:
         46:c9:ce:ef:a2:16:c0:89:36:b1:33:c6:5a:8c:35:46:b8:dd:
         01:16:51:ea:72:ac:10:4f:56:b2:f7:38:6b:a9:56:02:9f:47:
         c7:6a:53:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----