Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File:                     G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier:          bIpAQ4ZyLScitHoIm7SCaCrZUoVaix6ndSrur+NytHM=
Subject key identifier:   BC:92:BA:9D:51:91:2E:53:46:06:52:40:5D:E9:1E:8C:5F:F7:73:24
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer:       /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial:       01962E990D4EF37333B3259CB642EC153502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number:          09AF
Signing time:             Sun 13 Apr 2025 10:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:44 +0000
Files and hashes:         1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: XmV0JobH76qgER6+JlSfnZHnnUXzMz7FFI1UzD/ykcw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:0d:4e:f3:73:33:b3:25:9c:b6:42:ec:15:35:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
        Validity
            Not Before: Apr 13 10:01:44 2025 GMT
            Not After : Apr 14 10:01:44 2025 GMT
        Subject: CN=bc92ba9d51912e53460652405de91e8c5ff77324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:15:d8:79:c2:07:cd:ff:4a:5c:90:05:40:
                    63:c3:cf:b8:74:06:26:4d:67:16:15:9b:24:16:a5:
                    38:50:0e:72:6c:a5:1a:38:8c:48:31:be:07:93:cd:
                    d8:01:10:9b:52:66:95:cd:83:1d:9a:9c:28:48:84:
                    68:33:09:0c:e4:4d:37:ff:03:98:31:69:1f:50:01:
                    70:d3:ed:4f:e4:66:95:55:cf:cc:bc:57:d7:d6:83:
                    43:4d:43:63:f0:e8:30:83:04:c7:fd:95:2f:77:5d:
                    38:ca:9a:69:ad:83:df:d0:47:e1:b6:b2:75:d2:d3:
                    d4:ad:28:25:0c:e8:9c:27:d8:11:bd:4b:f1:ee:a1:
                    ab:90:1b:4c:c7:b7:a6:a6:d8:f5:2b:e3:7c:9c:a1:
                    de:9d:7b:3c:5b:23:15:25:f8:42:d5:03:c2:aa:01:
                    69:b2:a1:25:ca:8c:30:ff:97:0b:95:57:32:55:87:
                    a8:2b:bc:66:49:ab:fc:57:00:22:92:89:bd:e1:98:
                    e6:6b:a2:f2:fb:a4:19:96:34:b2:45:8c:8f:c9:fd:
                    19:ad:2f:0b:2c:38:c1:c1:e9:d0:c5:2e:49:0f:40:
                    d9:83:18:5e:71:4d:0e:18:ab:16:c5:c6:c2:99:af:
                    99:9a:4d:ac:9c:52:9c:38:ef:06:09:fb:56:50:f9:
                    76:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:92:BA:9D:51:91:2E:53:46:06:52:40:5D:E9:1E:8C:5F:F7:73:24
            X509v3 Authority Key Identifier:
                keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:70:b8:4f:1e:e7:d8:d0:3e:05:5f:87:ab:8d:62:01:77:da:
         a3:fd:77:42:de:94:b9:e9:0a:14:ab:74:f1:25:57:d8:ab:be:
         6c:f2:39:d3:0a:55:15:54:06:b4:c9:c0:6f:29:1c:14:31:11:
         55:1b:d9:2e:6e:1a:fe:be:1a:3f:70:e7:9f:79:64:95:db:28:
         e0:bc:c8:ba:67:74:6e:89:7a:d0:5e:2f:b3:30:0a:d1:3b:15:
         61:93:28:08:57:2f:46:89:fc:b6:16:d4:b6:61:b7:ba:11:a0:
         a4:bb:d0:e1:b2:b4:3b:86:05:61:cf:2b:53:b3:f3:9c:e1:50:
         53:f4:e6:7e:48:ce:05:8e:ec:8d:f6:85:d3:b9:d0:ed:00:65:
         6f:37:ad:8a:66:20:8f:9b:03:37:d1:89:86:70:f3:10:b1:93:
         34:36:f9:d2:50:51:3a:2d:83:1d:32:71:7e:0e:5d:bd:91:0e:
         19:0d:4f:48:96:e0:bb:79:5b:34:e5:bc:e5:32:78:9d:85:1b:
         1e:37:27:58:2d:20:c6:c4:51:f5:39:01:04:5e:cc:0f:b7:43:
         75:74:cf:fe:b7:44:46:b2:7d:85:a9:04:b6:b7:e9:1c:e2:66:
         bf:11:eb:ad:02:fd:50:b3:da:fe:6d:77:8d:20:a7:02:65:57:
         b4:67:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----