Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File:                     GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier:          nHqo34affbUAJXsn07i/zUTQ31HIlMRFZ7lyGSJc+Ig=
Subject key identifier:   D5:FC:0D:92:FC:05:AB:5A:25:B5:AE:87:CC:E3:58:E2:B0:13:B6:C8
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer:       /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial:       01962F748E418BD83BBF5E0B5399AB48359B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: 0/5d58vqAbJij4L+uxy6gBqsLHlEhJ1IQEnMO2cybfA=)
                          2: dMt5taNEKL2LVthFtJfZ1Mz0Tog.roa (hash: EAYDIktNqR1sTvpYHnGCV+A2c1ts/mG6hnIfZ1QhWYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8e:41:8b:d8:3b:bf:5e:0b:53:99:ab:48:35:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=d5fc0d92fc05ab5a25b5ae87cce358e2b013b6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:91:4d:a9:ec:f2:ee:0e:bc:cf:52:ee:56:
                    7e:4a:82:b7:55:98:a7:9c:6f:00:d5:79:54:50:11:
                    82:29:37:1a:d3:4c:7a:62:d6:65:58:11:fc:5a:e6:
                    27:fa:5c:f1:1c:47:00:ea:86:08:86:aa:5e:1e:bd:
                    f6:f4:18:14:ee:9d:b2:76:a1:18:b2:60:ed:88:61:
                    89:eb:34:52:2b:56:83:b1:53:74:e1:53:4c:8f:76:
                    b5:db:8b:19:9a:c5:c1:d5:e0:d7:0c:ff:41:67:6f:
                    34:37:6f:0f:da:8f:5e:6b:2b:3a:88:26:84:eb:3c:
                    02:78:4c:f9:36:19:fa:74:61:4f:d8:61:e2:1e:af:
                    82:ba:b7:c3:85:ac:6b:8c:26:af:a0:aa:e4:87:cd:
                    68:a6:bc:81:f2:f5:77:aa:45:d1:d1:f3:c4:51:b5:
                    13:d7:99:6a:bb:67:96:8f:ea:88:f7:14:68:44:e0:
                    a5:f0:70:1f:85:8e:35:5d:f1:24:b0:61:82:6b:29:
                    12:f8:81:f6:c5:9c:56:fa:d3:19:d2:1e:5f:b7:28:
                    8e:45:92:c9:4d:32:43:67:04:1f:50:d3:bf:8e:58:
                    0a:e0:72:c7:04:23:77:0b:42:2a:0f:0f:98:8a:5b:
                    64:ab:52:b5:9d:9b:61:e0:20:38:79:89:86:73:a2:
                    d6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FC:0D:92:FC:05:AB:5A:25:B5:AE:87:CC:E3:58:E2:B0:13:B6:C8
            X509v3 Authority Key Identifier:
                keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:53:f0:e0:4c:14:3e:4b:b5:40:d5:45:68:81:43:30:cc:ca:
         a1:89:f9:97:93:25:a6:12:e7:de:c8:38:4a:00:31:28:32:78:
         2b:0b:ec:75:28:81:b7:f3:c3:50:16:c0:73:12:98:24:be:d0:
         b5:47:6b:f9:0e:f0:b4:2b:c6:13:0c:f0:b7:25:77:4f:53:e6:
         b7:73:e6:fd:d6:43:17:86:e5:5d:53:29:13:d0:14:8c:68:dc:
         58:25:65:72:5b:82:59:c0:35:6f:c7:b5:02:1d:79:62:ff:10:
         4f:fe:b4:74:04:66:61:7e:4c:38:a6:61:fc:d4:60:f6:f7:6f:
         dc:b0:8b:03:84:fe:b3:28:a2:1a:1c:00:48:8f:c5:a2:e8:a1:
         0a:c1:ec:4f:3f:21:8b:47:98:da:68:08:1a:70:db:ec:c7:b3:
         f5:fc:28:3e:a5:21:35:b6:26:36:f8:57:e8:53:05:5f:df:05:
         f8:29:50:d7:cf:f5:cd:c7:8a:92:02:ae:88:0b:02:f2:6a:0a:
         be:9c:b9:88:58:b4:4c:f2:10:55:3d:72:b4:8a:8f:88:60:33:
         ba:56:3d:db:c5:6f:f4:90:df:2f:6d:e6:87:7c:eb:b5:14:09:
         21:17:5a:66:33:45:06:c4:84:51:12:41:20:04:75:fc:1b:0b:
         45:8c:63:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----