Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
File:                     G_A9uL9mABk75I-xDm4xa4tfiOM.mft (raw, json)
Hash identifier:          hqWsi4kEabUAjbPWOn0Oa9jYjkroWBpl5hhvRTqy0Z4=
Subject key identifier:   27:58:EE:78:BD:A5:2F:43:FE:07:C1:79:61:C1:6E:ED:85:A2:69:74
Authority key identifier: 1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3
Certificate issuer:       /CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
Certificate serial:       01962DF3D934DA11C7EAF1E74DC85FCE708D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft
Manifest number:          0431
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: G_A9uL9mABk75I-xDm4xa4tfiOM.crl (hash: gKDC0MBvZSMHMWGHZa2yZaJyhRFmRhf/G6InDKjWNs4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d9:34:da:11:c7:ea:f1:e7:4d:c8:5f:ce:70:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf03db8bf6600193be48fb10e6e316b8b5f88e3
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=2758ee78bda52f43fe07c17961c16eed85a26974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:02:9c:c2:6e:ea:b9:bc:14:c3:68:c5:42:
                    87:d5:a9:76:b8:d3:c1:89:95:b3:81:da:4e:de:ff:
                    1a:e2:ba:a1:8a:5d:a3:25:f6:9b:99:40:41:b8:20:
                    28:94:de:42:f1:fa:53:90:84:7b:e3:91:56:59:f1:
                    71:77:cc:75:8e:1e:f4:1a:0c:f7:c9:19:23:a2:3e:
                    08:e3:7e:bb:79:e1:94:d6:6f:ce:c9:e1:b0:8d:e8:
                    46:20:49:ea:08:6e:e0:30:5d:d6:79:8d:30:b7:e0:
                    67:9f:a2:c7:f6:8b:fe:1f:32:c6:ff:1f:74:32:3b:
                    8c:ef:ed:0f:10:a7:79:a8:6e:03:33:32:1a:a9:19:
                    a1:6b:03:7a:7b:5a:0c:4e:cc:1b:ce:a0:1b:97:c2:
                    80:65:48:ff:f5:95:7d:6e:38:e2:e1:53:3f:e2:53:
                    b1:21:16:a2:0d:76:16:a7:1e:1d:6f:a8:11:c4:85:
                    0f:3e:b5:b2:46:7d:8a:fb:19:6e:59:c1:c7:56:75:
                    55:d4:04:89:da:46:50:6a:12:5d:fb:e9:6c:3b:12:
                    8c:74:de:fe:f5:fa:31:f9:8d:e1:b4:b1:05:08:f3:
                    99:d5:58:31:91:45:64:cc:de:63:b7:0f:a8:2a:0a:
                    30:db:10:64:02:f8:17:38:df:4a:09:6d:39:8e:f8:
                    67:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:58:EE:78:BD:A5:2F:43:FE:07:C1:79:61:C1:6E:ED:85:A2:69:74
            X509v3 Authority Key Identifier:
                keyid:1B:F0:3D:B8:BF:66:00:19:3B:E4:8F:B1:0E:6E:31:6B:8B:5F:88:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_A9uL9mABk75I-xDm4xa4tfiOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d60752-ca7e-4acf-8cd1-ee5988e873e1/1/G_A9uL9mABk75I-xDm4xa4tfiOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:86:ee:32:4e:31:e4:8e:fe:6d:08:ac:61:ae:e3:bb:16:89:
         ab:24:f8:9e:dc:c3:d6:05:23:93:d8:76:1f:6a:ad:50:86:93:
         04:1c:36:57:87:8f:38:10:96:c0:20:19:59:21:d9:b5:4d:12:
         c6:70:47:63:04:97:f2:04:65:3f:b9:9c:32:1d:3a:e9:4f:7f:
         67:b6:0c:24:80:05:b4:f1:1d:fb:a4:4b:4f:95:5f:5e:01:fe:
         d1:b3:88:8a:b4:60:31:1c:59:75:72:0a:b9:99:7e:1f:48:7f:
         0a:55:93:35:1a:a5:6e:1a:5d:01:fb:d7:74:26:22:93:8f:68:
         2f:5d:77:cc:cc:60:9f:02:b2:7a:33:5b:12:21:d9:ee:01:88:
         4b:37:ea:60:a1:83:49:92:93:00:33:62:ae:ca:96:6b:3a:01:
         2c:9f:fe:92:3a:ab:1f:fd:3f:13:2e:ac:69:15:29:70:e2:36:
         d8:c4:cf:b8:a9:39:f5:06:97:bd:5e:1d:9d:db:f1:23:f9:71:
         df:1d:0e:36:85:0b:00:d0:c2:34:07:f0:b2:32:8b:07:a0:c3:
         2c:18:a7:d9:ec:ad:03:6c:d6:f5:a6:45:d6:24:0e:b1:10:fd:
         95:2a:e2:54:89:a8:dc:e3:96:fb:3d:88:55:c7:d2:b8:31:49:
         12:8b:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----