Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
File:                     G2I9umK4V8pz2KgKEZkPceBOfbY.mft (raw, json)
Hash identifier:          jJLblvGVyKAPbpDqAjVAECOiXB2InrSbZfP9RYSV2AY=
Subject key identifier:   24:28:1B:E3:41:5A:04:6C:6D:04:BF:46:FA:83:89:26:EC:4C:2F:02
Authority key identifier: 1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6
Certificate issuer:       /CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
Certificate serial:       01962E98C5FF45EA05D03E32328AFD6A4911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft
Manifest number:          0C6E
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: 1-6tgApGzi84jUfnnO4hR3VcZnhw.roa (hash: HVjUDSjbZacQo7V9+9zKGEkK9aQQLCss0l6qBdFGXKw=)
                          2: G2I9umK4V8pz2KgKEZkPceBOfbY.crl (hash: UfBOtmLKt8gBDEoVQNyL5j55qRywWiitVkkx52Hw7ws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c5:ff:45:ea:05:d0:3e:32:32:8a:fd:6a:49:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b623dba62b857ca73d8a80a11990f71e04e7db6
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=24281be3415a046c6d04bf46fa838926ec4c2f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:d2:1c:b2:3f:c1:e2:c3:26:77:31:63:5a:
                    28:7f:01:69:2a:33:a7:a7:a7:bc:b4:54:e2:d2:71:
                    d1:24:57:62:4f:05:15:d8:12:ed:66:6d:c2:39:82:
                    2a:65:4c:93:d6:20:54:97:95:b3:71:d4:85:ec:36:
                    03:05:ec:34:5c:37:1c:ba:25:dd:52:d4:f6:59:d4:
                    34:c0:f6:a5:39:79:d5:b1:c6:96:89:51:60:78:a5:
                    a1:b8:aa:d0:5b:56:c3:6f:1a:62:fb:7f:4c:cf:dc:
                    76:71:7f:04:bf:f3:86:14:11:d4:b7:53:16:44:5e:
                    cf:b7:9d:b9:ad:44:77:7d:fa:5e:62:4a:1e:97:ea:
                    16:7b:27:b6:a7:a5:94:17:ff:50:4f:65:21:64:60:
                    31:e5:f3:0d:dd:9c:45:de:38:47:31:94:74:56:f1:
                    cb:45:43:9f:a7:22:01:2f:ce:f1:f7:74:07:62:0c:
                    88:8b:76:28:c3:15:a2:75:7f:7a:a1:32:85:db:4a:
                    99:dc:ee:b8:91:d9:89:5b:e8:0b:c6:bf:87:f5:5c:
                    04:d9:6d:f5:e0:7f:ec:47:26:eb:9d:a6:97:f7:6a:
                    46:66:70:73:fc:76:c5:fc:dd:89:22:c9:a7:18:52:
                    46:ae:64:ed:62:79:62:77:33:98:7b:dd:54:87:1d:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:28:1B:E3:41:5A:04:6C:6D:04:BF:46:FA:83:89:26:EC:4C:2F:02
            X509v3 Authority Key Identifier:
                keyid:1B:62:3D:BA:62:B8:57:CA:73:D8:A8:0A:11:99:0F:71:E0:4E:7D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2I9umK4V8pz2KgKEZkPceBOfbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0a0e4d-4e75-49a5-bd0c-1a5c7635588b/1/G2I9umK4V8pz2KgKEZkPceBOfbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d1:06:49:da:4a:04:4f:e5:1b:58:a3:25:06:81:92:31:f8:
         80:15:f8:07:14:37:1a:b1:d4:b8:de:9f:50:75:95:fe:7c:28:
         d9:c5:18:34:11:d8:7a:d6:86:d6:ba:46:9e:36:74:88:24:e6:
         04:f0:a1:61:7d:9d:92:22:02:d2:a1:94:45:ff:d4:c3:17:08:
         1b:61:16:f8:5e:fb:f2:ee:f2:64:46:63:e1:d0:0c:49:4c:23:
         c7:5b:15:63:83:fb:1f:d0:c7:96:a0:74:19:9e:c5:2b:2e:66:
         b3:06:e9:db:79:bb:40:f4:2c:d9:2f:1d:cb:26:2f:99:26:9c:
         be:88:50:8c:41:68:99:79:25:c1:23:90:b6:6b:f7:6b:83:15:
         53:59:ec:41:b0:6d:aa:19:2f:01:7c:3e:67:ad:a1:ae:26:71:
         11:20:43:1d:bd:ff:79:58:13:ec:08:9c:07:b5:c7:45:05:87:
         0f:fe:fa:ef:34:d3:4f:b5:1e:ee:78:36:ad:a6:42:60:2e:9e:
         4f:e5:e5:ee:43:0a:12:de:8a:d1:a1:70:20:b5:b8:03:6f:5f:
         0a:e0:e0:e7:f2:a1:00:e7:4e:a4:70:52:39:dc:ae:19:66:01:
         7b:5a:50:a5:cc:38:68:dc:2d:08:f2:9a:5d:6f:e0:ba:b4:5a:
         45:7d:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----