Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
File:                     G1WOmRP2tWzD1WD5T_E38s1vSGI.mft (raw, json)
Hash identifier:          WlknBkfKua/O5qyx/Jyb//ybO8JNbEGHtve9RVxCJUY=
Subject key identifier:   76:F8:FB:81:9F:4B:BE:46:ED:C6:82:AD:5C:69:57:78:E3:2D:D6:38
Authority key identifier: 1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62
Certificate issuer:       /CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
Certificate serial:       01962FAB2EADCF738DB989C144C0A3F2E33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft
Manifest number:          0502
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: G1WOmRP2tWzD1WD5T_E38s1vSGI.crl (hash: P8tF/FEuv55Z7mwShOAeuO3LBaP3AbSBx1L9BkjqOiY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2e:ad:cf:73:8d:b9:89:c1:44:c0:a3:f2:e3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b558e9913f6b56cc3d560f94ff137f2cd6f4862
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=76f8fb819f4bbe46edc682ad5c695778e32dd638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:49:66:1b:f6:73:f0:0d:22:7c:b8:1a:8b:
                    ab:19:bd:e4:23:d8:b9:81:96:f4:66:2d:39:4a:c7:
                    3b:92:10:f9:ac:ec:60:e4:85:93:f1:7d:2a:b7:84:
                    f6:87:d8:48:96:8a:3f:42:78:f2:57:27:20:41:15:
                    df:6b:f9:96:14:21:52:08:59:e6:d6:3c:18:9d:69:
                    88:1b:8c:fc:5a:df:d9:78:70:c9:fb:48:76:8c:31:
                    4b:eb:e5:63:b9:f5:26:38:69:56:4d:ae:74:b2:20:
                    97:27:8e:b3:31:e2:5c:c5:d2:89:da:22:c9:94:e8:
                    18:e8:8f:8d:c3:f6:79:d1:96:aa:ae:4b:b3:a1:38:
                    09:04:c7:1e:84:b2:34:6c:9c:ab:99:93:e9:b2:79:
                    6b:86:c8:5d:ba:13:3b:26:da:6d:33:08:d8:d0:69:
                    d7:da:02:94:00:08:4c:ed:3e:e3:73:5d:b1:6d:64:
                    ad:06:1d:fb:ae:ed:c5:c9:ef:bd:64:a4:47:ab:12:
                    45:76:7e:8d:11:31:3a:37:0e:10:fc:fe:29:ba:8c:
                    9a:b2:84:05:e7:4a:dd:ef:b3:fc:e7:78:f0:3a:e7:
                    a7:dd:b8:97:40:af:e7:57:38:46:90:3a:dc:8c:ed:
                    ff:8c:a2:42:b0:fa:13:1d:18:b4:4f:97:cf:cb:fd:
                    d6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F8:FB:81:9F:4B:BE:46:ED:C6:82:AD:5C:69:57:78:E3:2D:D6:38
            X509v3 Authority Key Identifier:
                keyid:1B:55:8E:99:13:F6:B5:6C:C3:D5:60:F9:4F:F1:37:F2:CD:6F:48:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1WOmRP2tWzD1WD5T_E38s1vSGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e764cb-463d-41ad-a7ec-f581f681a004/1/G1WOmRP2tWzD1WD5T_E38s1vSGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ca:20:16:e7:14:e9:96:8f:c0:d8:1f:02:ed:7b:b8:52:2b:
         c7:a1:cd:f5:ba:ff:a4:b4:a8:cd:ff:a6:15:f3:c4:47:ab:8f:
         ec:56:bc:51:ae:79:af:5f:18:b2:61:a6:76:3f:9f:d2:36:08:
         ff:40:d7:82:95:e3:49:e1:ad:17:d0:ed:f6:a8:88:50:c8:db:
         7d:54:e4:e7:1c:fd:dc:77:5b:77:d2:f7:13:f6:5e:7d:4c:81:
         63:fc:64:f9:4e:45:f8:4d:79:4e:85:25:52:9d:23:8a:9a:6b:
         c4:cf:20:82:0d:0c:8a:4f:51:54:66:59:89:04:f7:76:cd:6e:
         07:39:cc:cd:b4:42:6e:5a:ec:85:b2:a6:b2:f8:7d:71:01:62:
         ef:32:6d:27:10:86:88:f2:e5:0d:43:89:36:64:9e:ab:00:2a:
         12:b3:93:28:90:40:53:57:45:74:4d:7b:5f:53:13:02:7d:91:
         75:2e:0c:ae:ec:9b:ca:9c:b3:ae:74:af:47:55:bf:ea:27:ce:
         01:e3:dc:21:f5:ff:2b:22:42:79:f6:62:5d:e8:eb:b1:ac:d0:
         e6:c5:67:f0:27:59:ed:45:55:50:e1:21:2f:b5:be:f1:72:f6:
         e1:cd:74:fc:e9:41:01:d5:40:3b:2b:37:89:92:6b:73:43:59:
         41:84:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----