Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
File:                     GTWdi0RPJzSynpueCQG-CLAPQOM.mft (raw, json)
Hash identifier:          MOETdTJVbL/hP328JGWkqn2SJErrawOs9raYd5Mvve4=
Subject key identifier:   CF:34:C7:95:05:B4:77:D7:C1:6E:EF:4E:D5:C2:E2:15:00:B5:07:67
Authority key identifier: 19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3
Certificate issuer:       /CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
Certificate serial:       01962DF3E368D17A43DC679D5D4ABBB2D0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft
Manifest number:          1068
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: GTWdi0RPJzSynpueCQG-CLAPQOM.crl (hash: ue3oYOnQ75Ow+YvqVxcSdi/6Fc0fLh7AQKZUUsLVZWA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e3:68:d1:7a:43:dc:67:9d:5d:4a:bb:b2:d0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19359d8b444f2734b29e9b9e0901be08b00f40e3
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=cf34c79505b477d7c16eef4ed5c2e21500b50767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:33:0b:3c:eb:52:0f:16:96:79:30:34:b5:
                    7d:02:69:9d:a4:6d:62:b4:0f:60:42:1e:f7:cb:70:
                    d8:3f:84:c7:8e:05:1f:79:49:ac:e6:ed:4f:a0:b7:
                    c5:27:77:0d:21:3b:f8:95:7c:21:c2:85:f2:e5:24:
                    c6:32:83:55:8b:10:f6:4c:fc:f5:ec:b9:88:57:82:
                    39:42:72:f1:78:2a:20:a9:7b:7f:bd:4e:87:fb:39:
                    93:04:27:83:15:d2:84:da:2d:b1:03:70:f9:bd:34:
                    b0:2e:98:fa:65:64:36:00:97:a2:03:2a:50:5b:61:
                    9f:21:f2:46:80:d5:0c:a7:19:d3:84:4a:f3:cc:66:
                    4e:95:2c:55:d1:56:26:f9:db:85:94:27:3c:9a:f2:
                    88:8e:e0:df:86:8f:85:e2:d9:2e:3d:de:7f:5a:6d:
                    59:b3:8b:94:f8:c6:01:27:85:13:1c:d3:2a:0b:51:
                    dd:40:e1:e3:89:98:c2:4b:bf:aa:af:65:d6:4d:38:
                    49:98:2a:94:bf:23:63:17:a3:d9:ca:71:9c:9a:45:
                    36:cd:cb:14:b0:9c:63:4f:f2:b9:a3:1a:2d:99:15:
                    0f:bb:e6:f2:c3:1d:4a:6d:ac:74:94:17:33:10:04:
                    27:2c:9b:37:a8:e9:de:2e:ab:98:44:c1:04:e9:c6:
                    1f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:34:C7:95:05:B4:77:D7:C1:6E:EF:4E:D5:C2:E2:15:00:B5:07:67
            X509v3 Authority Key Identifier:
                keyid:19:35:9D:8B:44:4F:27:34:B2:9E:9B:9E:09:01:BE:08:B0:0F:40:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTWdi0RPJzSynpueCQG-CLAPQOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3a944b-b428-4547-b7fb-38f7c6ac9b66/1/GTWdi0RPJzSynpueCQG-CLAPQOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6b:40:49:df:2b:e7:2c:7a:f1:d4:81:bd:c7:32:0e:1e:bd:
         e2:09:ee:4e:16:62:85:a7:84:2d:6e:28:3e:e2:98:5e:08:e2:
         82:b5:1b:11:eb:12:ee:68:9d:88:ab:e5:84:2c:b3:e6:ac:3a:
         3a:6a:06:90:77:53:a6:6f:f4:4d:11:3c:0a:4c:05:80:52:99:
         f0:2e:35:73:bb:6c:8e:a3:56:03:64:38:4e:90:f4:65:76:f4:
         36:e2:58:c8:87:f4:6e:5f:f0:eb:63:f0:eb:3c:38:6e:ce:36:
         95:24:b2:40:d4:f6:ff:8a:c3:fb:e7:f6:ea:db:66:b2:c4:37:
         ff:cd:37:b4:5f:de:a6:42:66:5a:47:c6:0b:8e:f4:b0:b3:20:
         43:20:df:0a:d2:2b:c7:2e:54:2f:af:4a:f2:6d:9a:29:a9:67:
         e8:e0:ce:9c:7a:8b:f0:63:e6:e2:0a:de:51:09:51:61:3c:6f:
         a2:e4:75:c0:98:1a:1a:1a:6c:18:3f:4f:4c:f4:b8:b8:f2:f6:
         28:47:37:05:6b:1b:c7:4e:44:14:aa:10:f2:a0:91:ad:43:9d:
         65:05:07:23:86:d7:32:23:86:27:73:07:0a:2e:7a:a3:99:01:
         9c:94:3d:1f:cd:93:3f:f8:52:0d:c0:4a:1c:10:66:47:09:1d:
         b0:16:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----