Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
File:                     GOk3wQPbBG8iVT75lDj6KVkkDaU.mft (raw, json)
Hash identifier:          ewy+k4Nmv86x9mer9McfO0jmVeSnbilcaK/V+PW5S7g=
Subject key identifier:   EE:0D:43:2D:D2:A9:98:DB:BF:83:53:51:6D:26:9A:A7:2C:0F:AA:97
Authority key identifier: 18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5
Certificate issuer:       /CN=18e937c103db046f22553ef99438fa2959240da5
Certificate serial:       01962F3D2A4875D3236937EA700505253D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 13:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 13:00:59 +0000
Files and hashes:         1: 2Hcj0ac-2VPUQm6MAjkwJIIrflI.roa (hash: qp66s4r7nxhRRHNo4vHow9LReUAp/h/x3jaDV1HCAjY=)
                          2: GOk3wQPbBG8iVT75lDj6KVkkDaU.crl (hash: ni6G3hli6M2LSLMMrVE3S9fMX1Sl7WsfB17ZGxRL6hE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:2a:48:75:d3:23:69:37:ea:70:05:05:25:3d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e937c103db046f22553ef99438fa2959240da5
        Validity
            Not Before: Apr 13 13:00:59 2025 GMT
            Not After : Apr 14 13:00:59 2025 GMT
        Subject: CN=ee0d432dd2a998dbbf8353516d269aa72c0faa97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:39:0e:5a:68:06:8a:84:55:54:97:2a:de:ac:
                    8c:4b:d0:10:94:48:98:a9:67:80:9c:f9:23:cf:3d:
                    c4:58:59:e9:04:e0:e3:2c:44:0a:1e:45:86:eb:fc:
                    0f:9d:e8:25:dc:8d:83:0e:1b:40:6e:ab:23:0b:5a:
                    22:d8:8f:12:be:5f:1f:35:8a:06:20:dd:e4:da:f9:
                    5e:2b:db:72:5b:81:f0:be:d7:a0:1c:6a:68:68:7a:
                    5a:44:06:16:dc:55:cf:0b:22:47:18:83:f9:1f:87:
                    db:c8:41:a3:19:b8:ce:f8:75:cf:57:a0:f1:4b:90:
                    e6:ca:9d:41:51:5b:3e:ff:ac:37:bf:58:e1:5b:a5:
                    b3:6b:07:79:c0:5f:aa:dd:33:14:f1:40:8c:9c:ca:
                    0a:e5:e5:a0:61:97:b5:86:8c:4e:48:0c:d4:db:48:
                    50:73:f6:cf:de:3d:99:8e:21:c5:02:b3:b8:4b:70:
                    b9:7e:e4:a9:ed:ad:ee:9f:2e:b7:56:97:ee:97:1d:
                    dd:3f:f8:b4:38:37:9f:d1:a2:a4:9c:23:28:96:86:
                    02:8b:76:7a:22:74:26:82:4e:37:fa:fb:1a:e5:d5:
                    74:e2:1c:6b:7e:b5:7b:ba:77:8a:9d:46:06:3a:61:
                    11:2e:9e:50:2a:d0:5b:94:fe:5a:bc:0d:b8:e5:24:
                    25:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:43:2D:D2:A9:98:DB:BF:83:53:51:6D:26:9A:A7:2C:0F:AA:97
            X509v3 Authority Key Identifier:
                keyid:18:E9:37:C1:03:DB:04:6F:22:55:3E:F9:94:38:FA:29:59:24:0D:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOk3wQPbBG8iVT75lDj6KVkkDaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7aedad-b4cf-469c-aebf-cae6a709d14a/1/GOk3wQPbBG8iVT75lDj6KVkkDaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:43:b1:1b:e4:d4:a7:b6:f2:4d:cd:6d:71:7f:2e:5e:b1:8e:
         7a:fb:2c:ba:69:6d:bf:9a:5c:9f:58:af:ca:76:01:21:9e:46:
         93:0a:79:e8:66:0f:6a:c5:e5:ce:51:20:c5:31:9d:ae:c5:2b:
         29:44:f8:26:63:e6:15:38:05:da:e5:9a:79:13:77:96:93:40:
         9f:92:35:2f:00:59:ca:5c:2d:89:dd:32:10:1c:70:19:37:49:
         9a:21:24:18:07:66:4b:87:34:65:72:ce:f0:54:97:dd:08:3b:
         55:1f:b6:4c:5f:c7:a9:41:b9:bf:6e:6c:ec:76:cc:58:87:46:
         e1:a8:30:c0:c4:6e:cd:92:d6:2b:19:19:ed:62:90:ec:3c:77:
         a0:2e:c3:25:6c:72:b8:f4:9f:64:01:52:16:48:43:ba:df:f1:
         a5:6d:ce:f5:57:ce:6f:3e:6d:b6:91:f4:43:9f:07:3e:0a:18:
         37:45:e5:25:d2:6a:c7:39:36:18:60:47:07:56:d4:05:71:ac:
         cc:12:ba:26:c2:fc:49:c8:f5:52:63:18:ed:57:c5:3e:17:0c:
         9c:e0:48:5d:d6:15:1a:db:fb:56:5f:b4:1a:a9:5e:62:a9:df:
         64:06:5d:1d:62:05:c1:8d:9e:90:9f:9e:17:de:29:71:29:3a:
         03:8c:f5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----