Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File:                     grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier:          ZwkpqNSrFcf+obtURAv0V+4BJyyB+IEFs40h6gKoZks=
Subject key identifier:   C2:B4:AB:4D:83:33:86:B0:5F:35:A8:21:56:0C:7A:E2:B3:A9:11:AE
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer:       /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial:       01962ECF9E06C380CBA69218458BA7C4B2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number:          1459
Signing time:             Sun 13 Apr 2025 11:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:20 +0000
Files and hashes:         1: Ia9_Al1piqnyn_Z0TB3In4a8pMA.roa (hash: ZdxPt8zq+Sls/weJBLKFV4PNPGZ9d0PtlTR0s1gNMLE=)
                          2: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: BMMaC6Ffqx+cxoKt1YWRPxG9pX9dq6TosR3pJC05mWQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9e:06:c3:80:cb:a6:92:18:45:8b:a7:c4:b2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
        Validity
            Not Before: Apr 13 11:01:20 2025 GMT
            Not After : Apr 14 11:01:20 2025 GMT
        Subject: CN=c2b4ab4d833386b05f35a821560c7ae2b3a911ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:1c:30:0f:c5:86:7a:12:ea:35:3c:03:ff:
                    3d:a4:64:16:dd:51:18:72:57:be:fe:cf:98:58:df:
                    e2:e2:62:5d:3e:7b:6e:fe:dd:d0:09:49:6e:1e:7d:
                    16:1a:ac:d4:d0:38:07:d5:81:2b:1f:92:fc:3a:3e:
                    f5:af:6d:ce:09:68:ef:1e:6f:49:5b:4a:57:69:a4:
                    61:f4:14:50:18:eb:f3:bf:78:96:96:79:01:c3:d4:
                    8e:73:c2:92:6a:26:c5:24:70:a2:ea:9c:23:6d:45:
                    53:4a:93:a1:ef:09:73:6f:21:f7:10:86:cd:d4:68:
                    78:52:ad:41:22:4f:97:f2:32:c1:f3:12:b8:95:8b:
                    2c:93:43:51:c6:ff:b7:29:ea:57:dc:35:fb:19:8c:
                    5f:32:fc:69:51:50:87:f3:aa:19:6c:9f:17:df:ca:
                    ae:64:60:e7:e2:52:f8:f8:ff:ca:3d:07:1c:3a:55:
                    33:5c:cc:ec:bd:15:be:dd:1c:bc:4f:67:7a:62:1b:
                    2a:d2:e7:9d:2d:90:11:6b:59:84:61:32:43:25:5a:
                    28:3c:71:e4:85:0b:2f:aa:e8:08:59:c1:39:74:88:
                    4b:48:62:de:e1:6a:14:af:9f:59:90:1f:de:2f:bf:
                    0f:b9:62:97:88:6d:b8:88:0e:ef:4e:62:55:37:3d:
                    ed:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B4:AB:4D:83:33:86:B0:5F:35:A8:21:56:0C:7A:E2:B3:A9:11:AE
            X509v3 Authority Key Identifier:
                keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:04:a0:87:4e:00:55:13:94:89:db:65:61:c3:ad:ee:c4:5a:
         9b:eb:17:3d:73:58:12:e4:33:6a:82:ba:ba:d5:3f:1d:f3:27:
         f1:93:be:5c:be:9b:f8:e3:3a:9b:5d:e5:7d:35:f7:54:4f:75:
         04:58:50:2e:09:d7:73:39:20:c7:b6:dd:bb:aa:f8:cc:ac:1b:
         e8:04:0b:38:d8:d6:3f:66:82:09:0f:f0:27:38:9b:35:15:d7:
         69:f0:3e:cc:a4:ed:55:ac:64:17:ec:e2:76:49:21:8a:b3:b4:
         86:85:9d:18:91:a3:f9:c9:af:cc:0e:54:a9:89:27:e0:8a:c2:
         03:68:e9:bc:7e:de:cf:79:83:c0:bc:41:f7:07:e9:28:01:89:
         ff:08:0e:97:92:2d:f8:9d:5d:83:7f:8a:6f:e4:40:b1:3c:fc:
         c4:b8:12:ce:c2:64:03:84:6b:a0:49:d4:1e:c3:8a:2a:b8:b1:
         bd:82:9a:66:b3:41:f9:29:2b:0b:3a:d5:bc:18:d9:54:8a:fa:
         46:e6:3c:12:78:50:c1:62:21:02:7c:ef:d7:3e:85:e0:b0:82:
         cf:99:36:b9:da:57:10:a0:81:03:3a:c0:e3:a1:bc:e4:b1:2f:
         b3:6f:35:97:33:e0:8c:b1:84:29:35:01:1a:fa:da:89:07:f3:
         ab:69:56:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----