Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
File:                     G2goETu6NCPRVzGWT-V7XyUr_eY.mft (raw, json)
Hash identifier:          VJtAjegj9kWkhFjKrCN83B7DtWLwFZ0thX+0SqM68Tw=
Subject key identifier:   CC:8C:B1:E0:A1:EA:BE:3B:AD:16:A5:77:EC:CF:28:40:53:15:85:1D
Authority key identifier: 1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6
Certificate issuer:       /CN=1b6828113bba3423d15731964fe57b5f252bfde6
Certificate serial:       01962E2B3713D7522BF5F60ADDCF7C94B51D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:46 +0000
Files and hashes:         1: 2iBSszmMQqmiQ3uytPa6Rj5usVw.roa (hash: uKmKRGw9bMp+kTA7Ddvynf7WAl8sh27c2GAtM3UsdJQ=)
                          2: G2goETu6NCPRVzGWT-V7XyUr_eY.crl (hash: UA58fzeaQDJG/2Uft0Z2mPyFgVSrfESJAaSQ1Gmaj24=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:37:13:d7:52:2b:f5:f6:0a:dd:cf:7c:94:b5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6828113bba3423d15731964fe57b5f252bfde6
        Validity
            Not Before: Apr 13 08:01:46 2025 GMT
            Not After : Apr 14 08:01:46 2025 GMT
        Subject: CN=cc8cb1e0a1eabe3bad16a577eccf28405315851d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:7f:df:8e:c0:1c:93:9e:b3:d2:94:31:70:
                    3e:c6:30:d0:d5:d4:a0:20:2d:5c:54:94:a0:38:e1:
                    95:79:91:3e:a9:a2:93:9a:f1:87:cd:68:da:6a:80:
                    39:e8:3c:4d:ba:21:3d:45:f7:81:93:8d:73:94:b0:
                    48:f0:1f:ea:60:08:0a:c3:6b:b3:00:14:e7:73:e3:
                    a0:55:38:27:10:60:07:86:98:ff:1a:1e:79:e7:ac:
                    d4:72:78:18:0b:98:7e:79:91:98:34:aa:bc:a8:6f:
                    5d:45:92:67:36:31:4c:f1:1e:b9:22:57:2a:8b:d2:
                    32:47:e8:27:68:da:d5:32:65:7b:16:d9:9e:22:8e:
                    26:dc:8d:00:80:4b:dc:30:a8:0a:38:06:f4:39:64:
                    b3:85:33:bb:f4:f9:e1:4d:e5:9d:0c:64:70:13:e7:
                    bd:0c:ba:c9:be:15:46:68:bf:80:f9:15:fd:97:56:
                    0a:d6:16:98:06:10:48:d4:25:16:67:c2:c0:84:9b:
                    7d:64:e2:e0:ca:db:cb:ee:89:1c:61:2d:c1:38:00:
                    aa:ab:9e:b8:e1:04:27:e9:03:34:d4:23:ca:0e:2f:
                    0f:37:b6:0a:96:18:20:46:d7:09:43:55:5e:e0:80:
                    bf:83:2a:a5:c5:86:52:9a:15:f0:b1:53:c2:5d:eb:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8C:B1:E0:A1:EA:BE:3B:AD:16:A5:77:EC:CF:28:40:53:15:85:1D
            X509v3 Authority Key Identifier:
                keyid:1B:68:28:11:3B:BA:34:23:D1:57:31:96:4F:E5:7B:5F:25:2B:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2goETu6NCPRVzGWT-V7XyUr_eY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4f5951-2047-44bc-b69a-03bc63ca25a3/1/G2goETu6NCPRVzGWT-V7XyUr_eY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:0a:3d:45:c6:1c:45:cc:3b:29:7c:ce:40:9e:e7:96:87:
         f3:e3:56:4c:78:41:3d:49:83:4f:14:6b:6f:43:04:93:9c:35:
         88:1d:ba:6f:eb:33:f2:c2:c9:55:ff:f5:d2:bb:12:36:2b:8a:
         18:49:74:07:b8:a0:39:4b:3c:89:c3:67:06:74:8d:c4:2c:40:
         63:5d:82:93:8e:00:ed:80:20:18:7e:d2:bf:5a:94:f5:09:a9:
         38:e9:95:88:dd:cc:3b:c1:3e:50:18:b9:40:74:94:c3:3d:ce:
         ed:2f:3e:c8:02:c0:d9:f5:b2:20:8e:49:ae:3e:84:a8:95:5a:
         c4:dc:d8:52:4f:d5:3c:01:0f:75:48:ee:17:fa:35:14:1d:3b:
         99:90:99:85:6f:2d:5a:d3:f2:74:f3:6a:fb:12:e4:ce:86:af:
         ac:7a:0e:44:03:85:6e:1d:ad:ec:33:d8:66:d5:7a:86:96:09:
         d5:25:da:96:f8:85:e4:eb:90:0d:6d:d8:f5:a7:68:66:e8:2b:
         dc:06:b7:80:89:c3:51:41:44:e4:d1:06:5f:e0:4b:bc:37:26:
         13:ff:48:e7:0e:a2:13:f2:01:9a:bf:f0:1d:97:ba:cd:8f:8a:
         33:5e:fb:c0:c2:36:2d:f4:4f:db:55:8a:61:ee:3c:24:a5:32:
         20:09:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----