Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
File:                     GJabxilVETwNBJme7JG92p0vo6U.mft (raw, json)
Hash identifier:          vi7N5Z63jqY6Z0NFkWltqjymrCHBR/8kd6cr8NzlR9Q=
Subject key identifier:   37:A5:49:84:8E:0B:C1:2E:EC:7E:D3:40:E7:F9:BC:57:4A:47:F7:D7
Authority key identifier: 18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
Certificate issuer:       /CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Certificate serial:       01948E19E9B455B3EA7A6B9D5B7E5DF8B77A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft
Manifest number:          1413
Signing time:             Wed 22 Jan 2025 13:00:50 +0000
Manifest this update:     Wed 22 Jan 2025 13:00:50 +0000
Manifest next update:     Thu 23 Jan 2025 13:00:50 +0000
Files and hashes:         1: 64hfXKK79DNnwBiHMNhcan7gApw.roa (hash: 1pILT2yG6cl/7OeMa23s3WaOano0QbCAXRD1Tm3/Qkg=)
                          2: GJabxilVETwNBJme7JG92p0vo6U.crl (hash: 73lZZlDtoB6MBn5f6DiYfc869V4mDtVc8gV/0T50QCA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:19:e9:b4:55:b3:ea:7a:6b:9d:5b:7e:5d:f8:b7:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
        Validity
            Not Before: Jan 22 13:00:50 2025 GMT
            Not After : Jan 23 13:00:50 2025 GMT
        Subject: CN=37a549848e0bc12eec7ed340e7f9bc574a47f7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:78:ed:0a:04:d4:f7:fa:fa:bd:d6:9e:50:
                    d3:dc:11:38:f7:1c:b0:3b:0d:3f:5e:bc:58:db:10:
                    b6:6a:e8:f2:9a:5a:4e:e1:93:a6:6b:a8:34:44:0e:
                    a2:97:47:a9:11:58:dd:4e:0f:1b:42:51:df:5b:9e:
                    8b:4f:70:3d:ec:4b:86:f4:eb:67:07:50:8d:69:ba:
                    15:e5:c9:69:db:b8:35:33:3b:65:17:25:f5:7b:92:
                    9f:2f:a0:25:ac:69:42:d3:79:b3:48:97:85:ba:b3:
                    cb:f4:8c:82:c5:3f:27:69:08:1c:ac:ee:8e:ab:28:
                    be:91:dd:08:cf:05:c0:c3:d7:dc:64:99:a1:91:14:
                    8d:f1:7d:68:95:60:90:9f:6d:95:be:63:e4:ab:2d:
                    56:fe:c5:2b:a3:15:50:c2:24:53:04:95:26:17:88:
                    8c:47:96:38:d3:10:a2:41:53:cc:7d:06:e5:c2:db:
                    4a:bd:dc:4d:ce:8c:fe:ba:11:68:88:7d:47:71:84:
                    9b:19:51:d9:fc:f5:36:ce:e0:3b:5f:86:a3:a1:09:
                    84:30:40:4c:ab:55:eb:ec:e5:54:b3:0d:c9:ad:63:
                    c5:07:12:31:77:ee:49:2c:be:2b:e4:26:af:b0:cd:
                    32:1e:c4:9e:0e:1f:a7:b1:8d:f8:98:d5:d9:d4:a8:
                    ae:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A5:49:84:8E:0B:C1:2E:EC:7E:D3:40:E7:F9:BC:57:4A:47:F7:D7
            X509v3 Authority Key Identifier:
                keyid:18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:db:1e:00:2a:dd:56:63:b5:76:91:53:70:85:cc:50:aa:15:
         78:d8:e1:be:60:d7:6a:96:b4:e2:2e:65:a9:1e:5e:51:a7:76:
         d1:25:c3:d1:8e:8c:3b:fb:f6:bc:ba:19:68:f2:5e:81:5b:6b:
         cd:40:10:a2:a5:05:5c:38:f1:ef:29:fe:6d:8f:44:76:a4:bc:
         aa:02:59:53:5d:01:4e:de:40:5c:89:08:9a:4f:94:47:45:f6:
         23:99:f9:04:90:ac:b3:76:82:2f:4f:6c:7f:6c:98:d3:4e:49:
         15:3f:18:34:44:21:9d:51:c0:55:7e:a4:f5:ee:2a:01:65:ea:
         48:e5:66:b4:cd:67:14:af:93:3d:0d:65:5f:4e:14:f7:62:56:
         f1:47:f3:1f:8a:bb:a8:8c:3c:3a:59:3f:c6:9a:b8:bf:06:cd:
         36:db:f1:e4:65:ea:76:e0:a4:a8:23:3c:82:02:5d:cc:2a:33:
         3e:63:c5:8d:1d:f5:10:b1:a9:18:c6:11:0a:fb:5b:91:3d:73:
         b6:93:21:4a:19:2c:4e:56:ef:23:e2:dd:92:2b:00:e6:9e:1b:
         a1:92:07:9c:97:fa:bb:75:00:b8:31:b4:38:6c:6d:e4:5c:8e:
         65:29:71:07:8f:79:b3:61:a8:64:28:01:bc:65:61:0d:bb:65:
         e1:fe:d4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----