Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
File:                     G2t-l-0j1mqR-4qRv9nGdxEpsas.mft (raw, json)
Hash identifier:          tseDIaUcnPPbNVwz28n6PKtTj4MN8fDY82NqzwnqRIg=
Subject key identifier:   EB:89:B3:59:65:D5:D7:DA:F4:76:BB:4A:11:09:39:0F:86:A8:C8:1F
Authority key identifier: 1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB
Certificate issuer:       /CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
Certificate serial:       01962F065435F37FD6F35F9095A0ABC273EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft
Manifest number:          0DE3
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: G2t-l-0j1mqR-4qRv9nGdxEpsas.crl (hash: T6bvKY4TySoquCe8aLEr6WDsT/1qoSc9Sq7D/I3PeOk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:54:35:f3:7f:d6:f3:5f:90:95:a0:ab:c2:73:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6b7e97ed23d66a91fb8a91bfd9c6771129b1ab
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=eb89b35965d5d7daf476bb4a1109390f86a8c81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f8:4c:0f:95:54:25:96:b0:fa:3b:01:30:c8:
                    70:e1:12:0e:1c:cf:9b:b6:c5:21:6b:3f:0b:4e:49:
                    98:fb:5f:dc:4c:8f:c5:97:81:c8:9a:f8:f9:88:02:
                    97:09:44:81:f7:8e:ca:6e:6d:65:e0:fc:87:4f:6a:
                    e5:8d:bd:be:3c:be:93:1b:82:2c:93:01:54:81:02:
                    a5:be:8a:c0:71:78:ed:d7:0a:0d:b5:9b:0d:8a:9e:
                    9e:2d:9e:2b:4b:2c:e5:c7:16:e6:81:01:99:21:87:
                    d5:31:da:2b:41:51:68:63:fa:22:7a:7a:34:c8:e6:
                    19:de:85:9a:fe:3e:18:a7:98:c2:1d:ca:81:99:a7:
                    2d:cf:2a:ec:8a:21:66:30:b1:dd:9e:d0:73:fb:e9:
                    e1:ec:a9:95:34:14:13:5c:8f:7e:e8:d7:d7:9f:e9:
                    dc:5f:73:ab:43:88:0f:a5:2b:57:73:6a:e6:88:35:
                    f9:95:72:e3:ed:74:d3:17:1e:93:d7:38:89:53:f3:
                    c3:68:39:02:80:f7:aa:31:60:0f:fd:d4:8b:8d:ce:
                    4c:7a:f5:3c:c3:40:4a:0b:70:3b:b6:38:da:d4:ce:
                    e0:97:9f:3b:ec:a1:d0:11:27:a9:27:c6:5e:57:66:
                    5c:a6:b6:50:a1:a8:0f:ba:a4:4b:32:15:9f:ac:66:
                    0d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:89:B3:59:65:D5:D7:DA:F4:76:BB:4A:11:09:39:0F:86:A8:C8:1F
            X509v3 Authority Key Identifier:
                keyid:1B:6B:7E:97:ED:23:D6:6A:91:FB:8A:91:BF:D9:C6:77:11:29:B1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2t-l-0j1mqR-4qRv9nGdxEpsas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bb0e00-a24d-4935-8c07-1361550cb3d5/1/G2t-l-0j1mqR-4qRv9nGdxEpsas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:a2:2f:73:62:01:31:dd:09:7b:cd:9b:6c:b9:0e:0c:9e:5e:
         a2:3c:b9:bb:51:c6:b5:69:72:de:7e:ef:62:3f:67:2f:8c:b4:
         83:dc:8c:59:78:5f:69:c8:59:c3:c4:2f:94:80:86:47:cb:ff:
         b4:19:b6:58:5c:a1:a1:62:1f:ed:2a:67:63:a3:6f:d9:73:6b:
         04:d4:98:35:a4:de:28:2e:75:05:b8:95:56:c5:ef:bb:62:79:
         a9:c7:5b:0a:72:66:5e:c4:d5:d6:e6:8c:64:5f:e8:e8:a7:63:
         6b:4f:15:4e:8d:f8:8b:0d:90:32:cc:2c:18:57:f5:63:2e:bb:
         60:99:22:86:68:dd:cf:20:e3:ad:fc:27:c0:f8:5d:06:b4:67:
         24:09:0f:ec:f3:de:80:4f:c4:c1:b8:ba:4c:33:06:bb:29:c0:
         07:d9:fa:0b:48:64:ee:bf:38:12:c3:93:6c:9b:24:73:4c:ec:
         56:e6:71:1f:12:fa:68:39:a4:02:c8:8f:31:03:f7:ae:14:e0:
         8e:dd:f4:f7:1c:53:ff:d8:3f:d0:56:a4:36:97:f4:40:76:d4:
         4a:a9:c5:36:16:78:21:a9:b6:cd:aa:a4:be:ba:7a:89:8d:e7:
         e1:3b:79:d6:fc:b1:92:8b:8d:24:b8:e3:c7:58:56:2e:4b:b4:
         1d:05:c2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----