Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
File:                     GjrGrWXloJkgm4i4ec9KCK8IaN4.mft (raw, json)
Hash identifier:          epMglHh3Hl5uuxKizZ3emOcg4NhHDOZxYO24wZg9Qz4=
Subject key identifier:   32:3B:74:DA:FD:CA:E3:2D:27:C5:E2:9B:F3:3E:63:DD:0B:8E:D5:7E
Authority key identifier: 1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE
Certificate issuer:       /CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
Certificate serial:       01962F067D897391F0AC3604D4D3857D9921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft
Manifest number:          13D9
Signing time:             Sun 13 Apr 2025 12:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:16 +0000
Files and hashes:         1: GjrGrWXloJkgm4i4ec9KCK8IaN4.crl (hash: JTCEWJ++ff2e9O8uvagaw2VQt4OfOdb2evoXzdVWPxc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7d:89:73:91:f0:ac:36:04:d4:d3:85:7d:99:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3ac6ad65e5a099209b88b879cf4a08af0868de
        Validity
            Not Before: Apr 13 12:01:16 2025 GMT
            Not After : Apr 14 12:01:16 2025 GMT
        Subject: CN=323b74dafdcae32d27c5e29bf33e63dd0b8ed57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:5c:0a:35:d6:9f:5c:79:39:63:ed:9f:e1:
                    40:98:26:cf:a7:8e:ed:79:cd:31:4c:2b:50:1d:20:
                    39:17:64:3c:18:66:4c:8c:8d:7b:42:52:68:01:8d:
                    0a:6f:fd:80:2a:49:a9:b9:d0:89:97:f9:41:cc:74:
                    f4:7c:46:b3:68:92:61:98:14:88:37:61:de:2f:bc:
                    66:3c:1f:a2:a9:59:07:d0:db:39:20:bb:a1:0f:f4:
                    f0:cc:51:fb:eb:af:73:ad:05:a1:7c:75:11:cd:46:
                    be:00:cb:06:f4:01:f1:57:6d:ea:36:e6:82:fa:29:
                    bc:0b:5c:a0:99:af:bd:8e:f8:69:2e:da:7d:61:75:
                    e0:a8:ac:44:70:b3:ec:a6:bb:c8:23:6f:f7:7c:b0:
                    36:c0:aa:a8:54:a5:11:4b:e7:12:12:70:22:96:81:
                    13:25:97:1b:4f:5c:81:76:51:8a:11:50:f3:65:78:
                    d2:c0:50:1a:ec:7d:11:77:38:8f:de:e4:21:03:c8:
                    50:12:a6:a8:8c:42:c2:30:67:74:cd:eb:c0:8c:48:
                    f9:a1:f9:4d:5e:43:e0:05:4f:5a:85:ef:c6:f2:c6:
                    f7:1e:23:b9:5c:7c:c0:6a:df:6b:7c:92:49:77:a0:
                    d9:d8:9c:37:d7:85:ec:a3:a2:24:ac:4e:58:17:51:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3B:74:DA:FD:CA:E3:2D:27:C5:E2:9B:F3:3E:63:DD:0B:8E:D5:7E
            X509v3 Authority Key Identifier:
                keyid:1A:3A:C6:AD:65:E5:A0:99:20:9B:88:B8:79:CF:4A:08:AF:08:68:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjrGrWXloJkgm4i4ec9KCK8IaN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/2eb276-2c72-45a9-b9de-70cbe96241f5/1/GjrGrWXloJkgm4i4ec9KCK8IaN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:82:7f:4f:12:52:07:9a:8c:0a:5c:02:7a:3e:4f:be:fd:56:
         b8:0c:b8:4c:71:08:e2:e4:03:18:c2:dd:69:39:ce:6b:39:db:
         d6:c7:02:a9:83:21:aa:3f:47:86:e4:6a:6a:a5:1c:a6:05:00:
         32:9a:7b:41:62:ef:3c:27:a3:de:f5:98:4c:6f:b7:31:b8:30:
         61:35:19:94:3c:e9:94:5a:81:51:a2:dc:3d:b2:2a:0c:59:98:
         6c:15:aa:4c:1b:c3:c1:f0:1b:56:ff:a2:f9:04:d5:09:81:43:
         f4:97:94:21:f6:77:68:a6:4c:1d:bd:69:f6:c6:af:32:96:db:
         f9:41:a3:5d:54:87:21:e5:f1:26:8e:a6:08:6c:39:9c:00:99:
         dd:33:4b:72:d0:49:40:1b:cf:83:1d:03:ee:fc:13:54:e6:24:
         51:e7:ed:a0:62:97:ee:8d:f9:1e:99:a2:db:ff:da:9e:95:3e:
         71:f5:9e:7c:1f:10:f3:fe:5e:fd:27:73:16:41:cb:03:c2:a4:
         31:ff:af:62:28:39:c7:a0:89:2e:1d:ff:85:9e:87:e1:08:28:
         61:c0:e2:4d:01:cb:d9:fe:1d:f6:64:e6:16:c4:00:d4:c3:d5:
         28:91:ca:3b:74:8b:a6:46:54:e3:a4:04:51:24:e9:cd:a1:69:
         7e:e2:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----