Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
File:                     GWa02kiR-4CQGCvDO0m1liT8nZs.mft (raw, json)
Hash identifier:          avB8HESlIw2qaP4jMZ2lDPoC4bKiPSDJ6TsIOQaiK08=
Subject key identifier:   44:9F:D3:BE:5A:14:37:AF:75:34:31:F6:68:AC:3D:06:08:8D:03:0E
Authority key identifier: 19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B
Certificate issuer:       /CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
Certificate serial:       01962E999D2564C21F07DABFC6E60F29C5A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft
Manifest number:          13D6
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: GWa02kiR-4CQGCvDO0m1liT8nZs.crl (hash: fdxupdHRITBuVG2fgTC2TBeK9deFCFos4c3sqgHH86Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9d:25:64:c2:1f:07:da:bf:c6:e6:0f:29:c5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1966b4da4891fb8090182bc33b49b59624fc9d9b
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=449fd3be5a1437af753431f668ac3d06088d030e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:27:da:d9:f2:d6:a5:49:bc:67:45:64:c0:
                    39:3f:d0:c5:26:a9:30:2d:f5:84:13:24:d1:04:5f:
                    90:c2:76:b0:b7:94:19:cf:9c:d5:3a:41:40:be:d2:
                    4b:0c:b3:b6:1e:fa:bd:8f:11:ad:32:7f:15:85:c7:
                    65:a7:a8:2a:97:0d:1c:c6:3a:43:2b:26:a8:ed:f8:
                    9e:b4:dc:cf:ff:90:47:38:a3:39:b0:f6:a3:cc:cb:
                    9f:b7:af:45:56:63:f8:fc:9f:72:34:8e:8e:4b:0e:
                    9a:a6:23:40:64:98:cd:f6:5f:be:70:82:b8:45:75:
                    da:c2:bd:82:f4:b3:3b:8f:b4:8d:93:08:f1:87:de:
                    c3:a3:9d:7f:9b:b7:2b:63:fb:78:ba:33:67:6b:50:
                    b3:22:3c:31:a4:67:e5:8e:f9:d5:f8:9d:47:80:11:
                    32:3d:95:70:30:f8:60:63:0a:70:28:59:4b:32:ff:
                    22:b5:0b:30:21:95:d4:b0:21:c3:8d:7b:ff:1a:59:
                    6d:a2:e9:ca:d4:7e:9b:73:30:23:fc:3f:f1:6b:20:
                    26:3d:fd:5b:c3:ad:8b:78:45:e5:0d:e5:2a:d0:bf:
                    57:02:2b:3e:af:2e:9a:e6:cc:53:8e:11:a4:87:d3:
                    ca:ba:2e:09:c0:cc:f0:b8:69:f6:d8:32:7b:2c:9f:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9F:D3:BE:5A:14:37:AF:75:34:31:F6:68:AC:3D:06:08:8D:03:0E
            X509v3 Authority Key Identifier:
                keyid:19:66:B4:DA:48:91:FB:80:90:18:2B:C3:3B:49:B5:96:24:FC:9D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWa02kiR-4CQGCvDO0m1liT8nZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/413e91-acfe-47e1-add2-79d5b46d9c0e/1/GWa02kiR-4CQGCvDO0m1liT8nZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7c:7c:25:93:d8:f2:cc:e4:85:da:75:a2:19:36:b6:94:50:
         89:85:e6:e7:88:b6:2d:a5:42:c1:f3:0c:d1:c9:ca:5b:62:d4:
         82:67:fe:09:00:71:b0:70:dd:c3:5a:55:cb:15:48:34:83:05:
         f9:b3:38:ec:df:ce:be:2e:4e:24:7e:02:ad:cb:49:6c:30:ab:
         dd:ed:54:bb:20:8c:09:bd:08:a3:ab:4c:c6:76:c8:9e:45:b9:
         58:73:d7:79:51:83:29:6f:35:67:86:c5:bc:a6:6a:22:b5:96:
         c2:51:6e:f6:39:ab:d6:53:ea:7f:ce:bd:54:c6:58:eb:e4:ba:
         cd:14:53:1b:2f:67:d3:80:8a:4f:48:78:e1:96:c9:87:3e:e8:
         5e:68:a2:e1:e4:bf:fe:41:3f:36:54:1e:98:5e:cc:ae:ef:35:
         0f:7f:3a:48:03:6a:26:ee:a8:4d:03:d3:f0:02:fb:78:48:bd:
         46:e9:ce:24:26:f2:85:d0:93:eb:cc:7d:9c:16:94:1a:df:a6:
         9f:91:e5:2d:de:0d:a9:d0:39:08:aa:a2:20:cb:d5:64:91:40:
         f9:93:ca:b4:58:02:a7:f0:9c:2f:e0:98:39:a3:cb:6c:d0:53:
         f3:20:01:b6:d2:e6:09:a3:be:41:e6:63:88:d8:37:11:4e:f8:
         b5:20:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----