Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File:                     G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier:          YhSEt96Bd4bTWYNZFPfv/cD96tV0BxE1Nh+0L+tc5kA=
Subject key identifier:   B0:2E:41:97:34:CF:ED:F0:6D:F4:6F:74:FF:7F:1D:0F:DF:B7:88:21
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer:       /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial:       01962E98ADEDF82DC006F3845586037F4576
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: 2u65Jdfy1meP3-UzJxITH_HaB0I.roa (hash: GSn3vSNczK6ZpdwvGH948S/Jm3wgfMlxSG0nlQVl8dQ=)
                          2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: kxQx4m6qwJ2Vxk1cwrX42NGQlRWu2/A2/r/pND9h2ew=)
                          3: dnna3QdlDeomv7D_EwLJ_fnfivI.roa (hash: MOBcHLr5lX2FtBzfiXULYdThQj8Ixa9C5j2SRENdgnc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ad:ed:f8:2d:c0:06:f3:84:55:86:03:7f:45:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=b02e419734cfedf06df46f74ff7f1d0fdfb78821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:c7:29:8a:5c:e2:4f:27:61:aa:95:7b:3b:
                    a8:97:c2:d3:a9:0e:d3:b7:35:53:43:ae:4a:be:6f:
                    e9:ad:9c:f3:c4:c3:08:11:82:ad:ff:c8:da:20:a6:
                    d4:f4:a4:c7:42:a1:d1:04:3c:ea:8d:c8:b9:64:5b:
                    f8:a9:9c:6d:28:6f:8c:12:bb:ab:9d:03:3f:33:2b:
                    1f:a5:d8:e4:14:eb:ca:02:68:0d:9c:7e:39:49:fc:
                    15:79:6c:a2:15:46:55:da:c8:8c:76:63:f0:22:40:
                    9d:ea:f9:a1:86:3e:d0:c2:78:7a:cb:80:5b:6d:39:
                    00:02:ed:f3:9b:4b:4d:24:69:b5:4e:1c:78:1f:92:
                    38:2e:85:4b:7e:dd:40:1b:78:12:53:67:b3:88:62:
                    a5:b1:1a:98:8b:f8:d3:c8:ce:15:de:b8:9e:b4:89:
                    6a:2f:6a:d7:d2:4a:ae:08:2d:82:2e:21:99:48:cf:
                    49:a9:0b:be:ac:82:13:e1:5d:92:49:6a:c0:ad:dc:
                    3b:6c:d0:7f:56:db:1d:c8:a1:7c:06:87:d6:ea:91:
                    c7:fc:e7:f8:9a:da:70:cc:36:15:ac:d1:f1:60:92:
                    a2:e6:11:37:38:73:27:cb:86:64:71:9b:36:ef:17:
                    2a:da:0c:16:37:44:1a:1d:bc:4c:3b:01:1f:b0:58:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2E:41:97:34:CF:ED:F0:6D:F4:6F:74:FF:7F:1D:0F:DF:B7:88:21
            X509v3 Authority Key Identifier:
                keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a3:a7:2f:20:7f:d1:0b:03:99:9a:05:b0:03:59:b4:c2:e7:
         9e:af:94:8d:ff:ad:0b:7a:30:d0:08:65:e3:67:9c:d5:bc:3d:
         e4:10:29:1f:9e:e4:1b:13:e6:e0:da:14:9a:5e:d0:e5:95:be:
         40:07:51:2f:7e:3a:8e:e2:b3:95:de:73:ed:23:03:71:32:9f:
         ee:17:1d:3f:76:d4:e1:c4:50:2e:02:8e:6a:e7:5f:03:59:d4:
         8c:02:33:33:73:87:18:75:ef:37:3b:6c:89:67:b9:05:2b:dc:
         3c:73:88:0b:d4:0f:64:06:7f:db:10:b0:4e:95:92:a5:53:24:
         0f:a4:fd:f7:1b:5b:bb:83:9d:43:a7:f0:8a:30:d2:b9:1a:e0:
         db:d3:16:55:77:1b:f2:62:48:8e:48:0d:e5:ed:58:a2:ab:ad:
         43:cf:b5:2e:38:3d:6c:77:61:ca:8d:6f:04:6f:b2:bd:fc:9c:
         64:e1:46:1f:66:4f:13:58:e5:b8:3b:1e:13:e6:b6:8a:d3:42:
         e3:2e:ce:91:29:cd:73:1b:fa:46:b6:70:64:6f:a4:2e:5f:0e:
         6e:00:e2:8f:13:03:69:38:d2:58:5e:f6:a5:e1:3e:f5:67:eb:
         86:b6:bf:ae:cd:8c:38:ce:c2:ba:e2:a1:f5:4b:67:14:33:af:
         f3:bb:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----