Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
File:                     GJiU_9B_W6Edxlvzj9lexByK944.mft (raw, json)
Hash identifier:          ig7ijpeDPF3esDkw1OMhdu+E67qPkc849DpFb1w5KrE=
Subject key identifier:   0D:D4:A6:F0:06:F0:CD:4F:49:BB:D8:D9:FB:47:4E:19:91:08:CB:C6
Authority key identifier: 18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E
Certificate issuer:       /CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
Certificate serial:       01962F74711ED7768598F231A32E9C6DA847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft
Manifest number:          1223
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: GJiU_9B_W6Edxlvzj9lexByK944.crl (hash: l2dikmrz0OOGVfgsxtNdIHjBWQw5Kydmu3B4MV8I450=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:71:1e:d7:76:85:98:f2:31:a3:2e:9c:6d:a8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=189894ffd07f5ba11dc65bf38fd95ec41c8af78e
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=0dd4a6f006f0cd4f49bbd8d9fb474e199108cbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cb:4d:48:b7:58:8d:47:0e:df:2f:6b:1e:fb:
                    2f:0d:91:8a:ec:b7:fd:9a:41:c5:b8:9a:c1:91:6f:
                    c9:d6:cf:95:db:88:1f:5a:c6:9f:1c:15:9d:bf:b9:
                    07:e0:9b:10:ba:48:67:aa:3d:16:9f:ed:88:2d:ec:
                    d8:c2:c0:91:38:24:bb:5b:ed:91:2a:ae:e1:2d:fa:
                    78:5f:0f:45:ee:15:f4:d3:e0:c3:5c:8b:14:65:a9:
                    5f:f6:e0:71:76:f7:7d:f4:b9:76:7f:de:d3:04:e2:
                    f0:fd:89:37:1b:d9:2b:54:00:23:28:dc:f8:d8:4b:
                    c0:6d:9d:61:5c:13:13:f2:e3:86:38:10:bc:fe:75:
                    55:ba:4e:82:4f:c2:05:58:c5:7f:1c:65:3b:e6:78:
                    d9:70:f4:0b:32:76:ad:3c:c2:c1:b5:f5:3d:0a:fc:
                    e1:7d:d6:ae:de:90:c6:94:06:6c:db:7e:63:66:81:
                    37:64:96:5b:bb:83:05:8f:1c:5d:65:6d:6b:3b:23:
                    a0:62:27:1f:dc:d4:67:9f:85:96:8a:90:5f:c9:e7:
                    8e:aa:e9:17:b5:fe:7b:5e:64:b1:fb:ac:e8:9e:a5:
                    55:59:5d:f6:5c:c9:d9:23:93:0b:25:fd:d7:23:d2:
                    6a:8e:28:de:bb:d2:8f:07:81:e3:ce:02:e7:72:e3:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D4:A6:F0:06:F0:CD:4F:49:BB:D8:D9:FB:47:4E:19:91:08:CB:C6
            X509v3 Authority Key Identifier:
                keyid:18:98:94:FF:D0:7F:5B:A1:1D:C6:5B:F3:8F:D9:5E:C4:1C:8A:F7:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJiU_9B_W6Edxlvzj9lexByK944.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523473-1fe0-4e7e-9455-ccc9b337cca0/1/GJiU_9B_W6Edxlvzj9lexByK944.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:eb:99:1b:2e:18:43:4b:13:b1:44:a0:4e:e2:ab:89:18:c5:
         ac:a8:14:ad:22:9d:cd:18:c9:2b:56:f9:16:9d:46:96:10:01:
         03:82:35:25:dd:72:4c:1b:6b:3b:d8:93:92:85:55:dd:e5:06:
         e8:e9:1a:2e:d0:84:9d:0c:1e:b8:77:a0:97:55:ce:e9:81:31:
         58:00:44:79:4b:49:72:06:f9:f3:77:e0:f1:6b:9c:37:38:4e:
         95:cc:b9:89:4e:9d:ce:35:be:b7:8b:7e:75:c1:04:76:75:9e:
         fe:e7:a5:60:b4:cf:4d:c3:80:83:86:0a:02:34:c9:8e:15:52:
         89:4d:39:fa:c5:1d:0d:0f:fd:11:d8:b8:31:cb:b2:e2:e4:51:
         1f:97:52:c9:78:b6:16:6d:93:9f:3c:73:57:f7:43:f6:81:13:
         9f:32:6f:15:ff:31:91:e3:78:be:e7:30:f7:68:df:4b:a3:2b:
         c9:a8:7e:06:aa:56:00:3c:90:10:57:77:f0:fb:ee:91:4f:96:
         dc:7f:84:be:9d:29:af:76:d8:de:65:20:bd:74:8e:45:93:7e:
         c5:de:e6:7a:a9:a2:ee:ce:41:d0:c1:8f:cb:02:42:34:f0:a6:
         3e:79:a5:c9:20:63:bb:c5:3f:75:54:01:cc:e6:62:92:99:2e:
         bb:92:ba:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----