Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File:                     Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier:          k/slH7nRz4mKkt9vox7SZTTEnzOp74Jep+bH0NpIGn8=
Subject key identifier:   AB:D2:02:7A:C4:F4:57:F0:C2:28:F8:96:91:AB:94:BF:A1:E1:D6:1C
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer:       /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial:       01962F06B7AB76A6199DB5361B02AAC553BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number:          0F28
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: dMfLI2pHUoeHvCTdHINib7dk+6uLZSPEdgVvz046e9A=)
                          2: H0COiaXg1EPyNKPDom-EUSSKISY.roa (hash: MIq94Fsgw9khyXovQNvHuap+wuDPe/60Pb4JAxZUi4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b7:ab:76:a6:19:9d:b5:36:1b:02:aa:c5:53:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=abd2027ac4f457f0c228f89691ab94bfa1e1d61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:12:d4:0e:2f:ba:45:6c:fa:92:7c:08:35:
                    ef:03:f9:0e:92:ea:3f:40:d6:dc:df:77:88:c9:79:
                    24:68:e7:b7:84:17:7f:11:25:9c:2b:5d:3a:de:1e:
                    37:82:01:69:05:11:af:9a:57:4c:6d:20:ce:52:74:
                    f4:7b:94:48:67:b3:d1:c8:7b:91:73:d5:9c:f6:cd:
                    97:2c:df:cc:6b:68:25:90:c2:cd:e2:e5:51:79:8b:
                    5d:7a:cb:1b:96:4f:06:aa:a5:23:f5:9c:85:a4:4a:
                    65:b0:27:91:35:ea:12:42:a1:0b:6d:d1:a9:1e:7d:
                    5d:ed:a0:52:05:fa:9b:ad:55:0e:3c:dd:78:d7:8c:
                    6e:6d:90:1b:26:35:55:2e:80:f8:cb:3f:72:6e:5f:
                    8e:3b:c3:28:67:f5:c5:3a:c7:e1:7f:92:77:c2:d7:
                    5d:64:29:00:f2:ea:84:75:73:a4:e5:08:c2:0e:be:
                    3a:86:3f:84:ae:6d:12:7c:8d:35:0a:d9:e6:15:9c:
                    e3:54:90:d3:d7:09:42:ef:3f:86:14:f4:66:c4:bd:
                    a2:88:52:81:f1:a8:dc:a4:54:7e:6d:e1:45:c1:ae:
                    0f:cc:03:0c:9d:7b:c3:b0:62:97:d9:c9:43:cf:f1:
                    1b:23:5b:6d:2f:9d:2b:48:98:e0:d6:bb:01:6b:16:
                    01:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D2:02:7A:C4:F4:57:F0:C2:28:F8:96:91:AB:94:BF:A1:E1:D6:1C
            X509v3 Authority Key Identifier:
                keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:44:b8:0a:4c:77:b7:03:37:d2:25:05:ed:ad:06:2c:3e:bd:
         76:5e:78:75:5a:e9:ac:df:e5:9d:5d:24:3d:17:bd:77:98:7c:
         3b:99:dd:cb:41:21:24:7e:1e:1f:1c:71:0c:fb:b6:41:5a:bb:
         b8:89:b6:d0:b3:b7:4b:44:93:cd:1c:a8:d1:25:72:ba:a9:77:
         98:6b:f2:12:7d:e2:df:1e:b4:21:b3:3e:84:51:89:0c:53:c0:
         50:4f:21:c1:69:0d:03:bc:e4:77:0f:7d:9c:f6:de:01:a8:06:
         a8:88:fc:e8:3d:18:c1:ae:2d:f5:32:c2:25:11:3a:f9:e9:17:
         68:f9:63:29:3e:ba:01:2f:34:8d:3b:9a:37:0e:c1:df:47:43:
         47:06:1a:20:ab:75:82:75:4d:3d:6c:ee:4d:20:f6:6c:70:be:
         dd:61:a0:38:0c:4b:39:a7:32:b6:3a:fb:fc:16:e3:d6:46:2b:
         83:d6:52:54:98:8e:34:22:89:cc:65:10:de:2f:e8:70:03:14:
         17:64:4a:c1:4d:57:99:6d:d2:06:4c:72:91:53:76:bb:bc:cb:
         56:b2:f1:e0:7e:d9:db:43:33:16:20:99:cb:67:87:79:4d:b2:
         55:38:6b:01:7a:13:9c:82:3e:7c:10:ea:77:1f:5b:54:84:c1:
         53:db:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----