Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
File:                     GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json)
Hash identifier:          3TwT9Ejk88DH12pAFlrDfXD/2qLdQeFpvcS565Kgg4w=
Subject key identifier:   D6:77:43:50:6A:DB:05:9D:B0:63:75:DA:F7:EC:96:35:6A:C6:37:13
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Certificate issuer:       /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial:       01962F742A5155E0278B7CC7D02A11A96359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
Manifest number:          020B
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: J9K5Ane5t894hi9NDYShepwixCEpINJ2zuCNZMJRtwY=)
                          2: rm-ctcMQkJoTJnbIDJV3c0v42nw.roa (hash: 0ZXTmxuKHi0QHBCAQY3aiWs6mf8IDw4nbeNjb8cUWcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2a:51:55:e0:27:8b:7c:c7:d0:2a:11:a9:63:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=d67743506adb059db06375daf7ec96356ac63713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:af:76:0a:33:32:20:cf:c5:c0:ed:16:31:
                    9c:22:7c:58:f5:98:96:ef:06:92:b4:49:91:5f:da:
                    ac:9c:ef:d4:1c:c0:a8:08:ce:0d:1b:bb:d7:2e:10:
                    0a:a6:fe:cb:78:5e:97:fc:08:96:4a:90:3d:89:17:
                    a5:e5:64:1f:3d:bc:30:55:53:a6:a5:f9:4c:18:4e:
                    a4:d1:f9:5c:fe:6f:a2:65:47:53:cf:27:e6:17:6f:
                    6b:91:75:43:c9:09:82:41:57:72:f9:6b:70:66:47:
                    1c:2e:38:16:7c:6a:02:2c:fa:d2:19:0e:5c:3c:45:
                    89:bb:5a:58:bd:b8:d7:47:e2:1d:9b:d6:f7:54:9f:
                    1f:ee:c5:85:47:40:c6:e4:aa:ab:b3:25:db:bb:d4:
                    23:ac:9c:42:7d:fb:bd:39:8d:5f:13:ff:db:1d:59:
                    fc:31:88:b8:5d:62:25:17:ce:d5:3d:e1:c0:9d:80:
                    8e:df:ac:72:d5:e6:fb:4f:36:1b:36:b7:d1:66:a1:
                    df:ab:85:48:a4:70:7d:fb:92:fe:3a:2e:12:66:8f:
                    07:60:f9:f7:fb:07:34:87:0d:ef:fe:4f:b5:b5:45:
                    5c:83:8d:94:7f:0f:5f:92:06:50:c8:e5:e1:72:08:
                    78:5a:97:25:7e:3d:02:89:6d:dd:ff:43:97:fa:35:
                    14:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:77:43:50:6A:DB:05:9D:B0:63:75:DA:F7:EC:96:35:6A:C6:37:13
            X509v3 Authority Key Identifier:
                keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a1:c8:af:7c:f0:04:eb:b0:f5:43:b8:1e:98:53:46:fb:de:
         59:ec:09:dd:d7:0b:b7:56:4b:f0:cf:d8:3f:cb:05:f4:38:4c:
         44:b8:e6:c5:65:91:21:5d:63:ec:3a:43:ea:d1:bd:b4:1b:b0:
         cc:14:62:6b:f3:8e:11:55:ce:15:f7:0d:14:89:94:ff:86:68:
         41:e9:67:57:14:10:8c:49:72:1a:c4:27:9d:dc:50:87:d2:be:
         11:4a:47:26:60:f6:26:e0:42:17:33:b1:51:38:09:cb:ef:8c:
         c9:86:7c:d3:4e:c3:84:f5:63:29:30:0c:c9:ad:b4:9f:4d:d3:
         3a:b2:2a:b8:83:72:f2:bd:4b:4a:88:63:88:5d:7c:e9:6e:32:
         72:d9:f7:0d:4d:fa:57:f5:23:dc:36:42:20:f0:4c:e0:49:b9:
         eb:6a:a3:70:07:78:15:66:ac:dd:ef:87:fd:11:ac:d8:f5:ae:
         9a:b6:03:64:51:60:1f:7d:9b:05:43:d3:b7:5a:e7:36:56:cf:
         24:75:8e:be:8b:0d:01:2b:89:8d:16:35:25:f9:1e:c5:e7:60:
         90:13:d2:5f:d6:f9:32:62:9a:de:a0:bd:10:7f:06:ac:15:d3:
         f9:52:84:17:89:8f:b7:e0:2f:16:31:67:72:83:bb:5b:12:5c:
         72:9d:58:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----