Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
File:                     CGavQlqz051zN8KxJdOVk62RwdE.mft (raw, json)
Hash identifier:          X9GnC+aV7vSmw/huCN7qi7vVWFUAjfbiciIpcdh4+LY=
Subject key identifier:   25:82:AE:83:E6:11:C7:E4:79:3B:6D:69:3A:F9:1B:F2:0E:32:7E:36
Authority key identifier: 08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1
Certificate issuer:       /CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
Certificate serial:       01962FABB7EE495147043970FC237A630A2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft
Manifest number:          14AC
Signing time:             Sun 13 Apr 2025 15:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:44 +0000
Files and hashes:         1: CGavQlqz051zN8KxJdOVk62RwdE.crl (hash: s6SfEqyWGoct2eJO46aRiXCe7aB6XeSxduTVJ3b7g5c=)
                          2: iES_pxayPYvKM2VsJ1VR6S1Y-14.roa (hash: KOw/juW2aWKQOcDJJ/zgm59PsAQEDCbakk4yB4V2D1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:b7:ee:49:51:47:04:39:70:fc:23:7a:63:0a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0866af425ab3d39d7337c2b125d39593ad91c1d1
        Validity
            Not Before: Apr 13 15:01:44 2025 GMT
            Not After : Apr 14 15:01:44 2025 GMT
        Subject: CN=2582ae83e611c7e4793b6d693af91bf20e327e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9c:45:60:80:39:f7:2d:b3:ec:e6:3c:be:16:
                    fc:86:1e:75:e5:eb:59:f6:d1:7f:11:3e:6e:9e:a4:
                    fd:6e:85:cd:cf:47:05:5a:26:ce:6c:bc:a7:29:95:
                    85:a8:f9:2a:6d:73:05:c6:f3:04:6f:56:1c:34:65:
                    80:8b:cc:61:a7:99:b0:d5:8a:93:4c:29:64:dc:83:
                    7d:76:53:68:cd:3c:58:dc:4e:69:04:e9:5a:e9:14:
                    17:99:6c:e4:a7:6c:73:26:21:2f:87:6e:a2:2f:81:
                    f9:f9:78:3f:17:96:ba:57:da:40:d5:6b:3d:ff:4f:
                    3e:48:db:4c:c0:24:95:c7:bd:a1:bf:d7:45:a1:a3:
                    52:e0:fe:a6:29:4d:48:bc:94:05:a1:fa:0b:ce:29:
                    6b:6c:9c:39:2a:58:cf:08:8c:4c:d0:89:e9:09:5f:
                    9e:20:0c:7f:d3:11:32:b6:1d:b7:a2:44:8e:a2:8e:
                    b1:70:7c:ae:6a:5c:c1:75:d1:dd:15:dd:38:3d:d6:
                    b0:ca:08:ee:c2:af:75:d4:16:93:14:ed:22:7b:f6:
                    db:65:6d:70:1b:2c:ff:e2:b5:77:9e:38:1c:29:80:
                    ee:56:8b:76:47:9e:28:32:c1:0b:00:dc:53:9b:c8:
                    bc:71:18:8b:f9:07:2b:c9:77:55:a7:3d:12:26:01:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:82:AE:83:E6:11:C7:E4:79:3B:6D:69:3A:F9:1B:F2:0E:32:7E:36
            X509v3 Authority Key Identifier:
                keyid:08:66:AF:42:5A:B3:D3:9D:73:37:C2:B1:25:D3:95:93:AD:91:C1:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGavQlqz051zN8KxJdOVk62RwdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/39b8ad-e653-4ccd-828c-b7eb12998b35/1/CGavQlqz051zN8KxJdOVk62RwdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:11:c7:c7:c2:2c:91:59:fe:f7:d4:e5:9a:b6:29:f9:d0:00:
         ed:be:23:44:3d:98:73:a0:41:a1:32:3f:e5:a1:81:14:78:c0:
         ce:34:82:3d:2f:fc:04:fc:69:d0:39:e6:5f:98:87:d7:57:b8:
         aa:ad:f6:34:1f:87:56:dd:15:2a:a1:bd:c0:69:24:04:30:4b:
         51:4d:41:50:d8:49:ff:15:7b:bc:25:5b:a4:08:5b:05:cd:f5:
         6e:3d:8d:dd:50:30:08:d4:29:99:2d:3d:11:9b:0a:eb:38:2c:
         59:41:20:9a:2d:62:e7:26:36:83:dc:90:dd:a8:9c:44:40:d8:
         e8:a2:43:80:d0:24:a3:32:71:32:80:87:1f:c7:78:fd:51:cd:
         91:ee:2d:71:6c:c9:22:52:4f:72:5e:ba:dd:64:a5:0a:2c:16:
         8d:9f:e3:6f:21:32:cd:2a:af:54:93:27:a6:66:68:de:0b:7e:
         fa:19:6f:26:a3:7d:2e:2b:d0:a6:86:2c:5c:03:72:31:f4:76:
         b2:ad:18:05:1e:5b:d7:7f:27:f1:8e:26:bd:17:bf:0b:98:06:
         b6:04:00:d3:21:69:df:b1:4e:f7:56:e0:d5:dd:96:21:3e:85:
         07:b1:a0:87:7f:ba:71:be:8e:ad:86:10:7f:66:5d:43:04:04:
         98:38:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----