Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
File:                     GCJBwqTNGwi_W6VBLUkcScjrh40.mft (raw, json)
Hash identifier:          9/tEV2KsyLayD5zO97NDpNblbaooCElIkyUYJvjGpM0=
Subject key identifier:   D4:82:98:9F:90:A6:D1:F3:3A:F9:6A:B9:EE:47:9E:9F:9C:57:82:AC
Authority key identifier: 18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D
Certificate issuer:       /CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
Certificate serial:       01962DF454B0216B6B1604FCFEAC40753D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft
Manifest number:          01CF
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: GCJBwqTNGwi_W6VBLUkcScjrh40.crl (hash: DmTc4ybLvZSs7lfcNwC85JNXVPGvUAKgQ7EXsLRsERk=)
                          2: _uaKTHKtfWhbGfsoaUqVE21BcaI.roa (hash: ZcgIbRy8eNOQQ+FS3+GJOt3y/shZQUFy7iI8KMgc4tI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:54:b0:21:6b:6b:16:04:fc:fe:ac:40:75:3d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182241c2a4cd1b08bf5ba5412d491c49c8eb878d
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=d482989f90a6d1f33af96ab9ee479e9f9c5782ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:cc:f7:85:d7:0b:0b:70:8a:f0:70:c1:87:
                    9f:e9:ae:9a:86:f2:28:c2:4f:16:c6:d8:3c:51:18:
                    a7:78:c7:ef:a2:48:0c:fc:07:a2:b0:31:e9:e7:c7:
                    17:5c:fe:66:e5:cd:5b:1c:d8:d2:c2:b5:d6:a0:39:
                    b1:82:4c:eb:07:09:89:ee:0c:01:d3:3f:1b:21:4f:
                    e5:01:2c:79:5d:26:6a:3b:37:e1:39:06:da:1d:98:
                    54:f1:aa:22:3c:ce:52:cc:af:b7:74:3b:3a:22:02:
                    6e:cf:63:7f:01:d7:56:70:fb:84:0a:f8:cd:09:4b:
                    bd:5d:6e:49:4b:cc:73:1e:9f:11:72:4a:6b:c9:a4:
                    08:64:13:1e:29:bf:cb:b3:4b:12:4c:5e:b2:01:54:
                    33:02:7d:8e:d6:c2:5f:45:e4:a6:31:32:1a:ab:54:
                    26:0a:fe:a3:a1:ca:0a:95:f4:cb:64:0f:57:5e:49:
                    45:c5:ec:cb:f7:0b:ec:53:11:3b:68:94:2f:37:06:
                    f0:5c:bd:ff:7d:37:59:ad:c4:a5:9c:6d:25:13:2b:
                    fb:df:17:58:a9:f7:28:7a:84:56:c1:9b:70:76:dc:
                    59:23:1a:a1:c8:e1:ad:c4:03:e3:17:f4:3e:d5:63:
                    e3:46:31:1f:f2:92:9e:d8:10:90:50:08:20:7b:04:
                    36:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:82:98:9F:90:A6:D1:F3:3A:F9:6A:B9:EE:47:9E:9F:9C:57:82:AC
            X509v3 Authority Key Identifier:
                keyid:18:22:41:C2:A4:CD:1B:08:BF:5B:A5:41:2D:49:1C:49:C8:EB:87:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCJBwqTNGwi_W6VBLUkcScjrh40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ebf795-a31d-4e63-8fa1-b2d268e2cb78/1/GCJBwqTNGwi_W6VBLUkcScjrh40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:25:06:db:60:ef:08:b7:8a:8b:8e:89:1d:94:7e:93:6d:ef:
         d1:a1:41:07:b4:38:e3:80:c5:7c:a4:69:d2:62:c2:9e:be:10:
         a8:b9:1c:d6:56:64:63:16:c1:bc:35:97:ce:4c:7d:bd:42:c5:
         de:d0:91:71:ae:8e:b4:8f:86:bb:b7:93:28:49:38:3e:ec:5f:
         12:cb:d8:97:ca:93:09:89:c5:12:a5:56:fc:94:7d:f0:d1:e4:
         c0:36:0c:ac:7e:53:ad:0b:af:37:ca:75:22:e2:49:fc:d6:64:
         e1:84:86:93:91:85:07:2a:e2:ef:38:cf:5e:e0:60:a4:9d:60:
         96:b9:88:7e:4b:39:fa:70:34:8e:00:ec:9a:4b:f6:46:dc:78:
         ca:e2:32:68:2c:33:20:8f:9c:e8:f5:9f:44:cd:db:44:d9:c6:
         52:07:50:a9:28:af:02:93:41:96:7e:92:f7:66:63:bd:c5:ac:
         01:0c:05:1a:14:81:93:b3:78:1d:fc:dd:f7:14:8e:5a:72:69:
         17:97:c2:c3:86:f7:42:74:33:8e:9c:0a:a1:b7:98:e7:d3:e8:
         88:01:b5:49:e2:7e:65:20:b5:d6:5f:b5:87:3c:aa:52:dd:23:
         9d:2c:c3:8c:a5:2d:10:76:e6:02:6e:c8:72:25:94:61:3d:f4:
         8e:8e:a2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----