Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File:                     GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier:          pWIHs+FZPZXcEkn7mS4uDkMfKjBzgUvM1UNl5g/gBKQ=
Subject key identifier:   BC:9A:F9:47:3C:D3:26:BE:03:C7:8B:29:30:A0:D6:50:82:8E:5F:EE
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer:       /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial:       01962F748ADCDE66710FB43F9130E287B6EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: Fgj43JqLTSiqOUCifuatrnSsi13fqIxwXafBEXDz8FM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8a:dc:de:66:71:0f:b4:3f:91:30:e2:87:b6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=bc9af9473cd326be03c78b2930a0d650828e5fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5e:a2:3e:40:68:c5:1f:c9:1d:35:db:85:bc:
                    f4:84:34:a8:7f:96:da:7c:7a:fa:d3:78:00:b3:9e:
                    3e:ca:16:58:bf:d0:11:22:cc:4b:9e:93:bd:aa:4c:
                    a7:5c:dc:24:e4:51:8c:86:9d:f9:d4:a4:17:26:38:
                    81:29:c3:f5:a2:bc:57:e6:ad:31:f1:6c:c9:2d:fc:
                    13:5d:ff:c2:bf:dc:04:53:84:9c:9e:d0:7a:7d:12:
                    69:94:fb:9c:6e:87:d4:73:e0:db:86:e0:16:db:70:
                    62:eb:eb:53:e4:94:27:57:0a:36:0f:c1:82:dc:4f:
                    9d:59:d7:46:6c:2c:9f:03:65:3c:a3:1f:18:90:26:
                    a2:cc:90:17:92:03:ca:9b:cd:5d:fb:a4:ba:bd:04:
                    94:17:ad:91:10:c1:1d:97:eb:e0:99:fc:8a:63:d9:
                    22:f8:28:89:ea:1a:42:cd:a2:15:0e:5b:60:e1:87:
                    14:70:6f:ca:0f:70:25:d9:c7:3a:d6:74:b6:f2:aa:
                    0c:ac:56:db:7b:4a:48:ca:fd:c4:38:b2:e3:e4:c2:
                    61:83:1c:94:34:3d:9b:95:9f:10:a0:94:e1:cf:89:
                    0a:16:40:eb:af:29:2c:8b:73:ec:24:6a:6a:90:c1:
                    f8:a4:3f:37:8f:a2:f1:90:e4:0a:65:02:34:31:9e:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9A:F9:47:3C:D3:26:BE:03:C7:8B:29:30:A0:D6:50:82:8E:5F:EE
            X509v3 Authority Key Identifier:
                keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:11:fe:6f:45:43:39:dd:df:65:1c:ad:ed:ab:d4:4b:d0:63:
         0f:b0:c1:f0:97:25:05:7d:8e:2a:c8:8e:42:9d:22:af:f3:21:
         21:7a:be:8f:ac:22:fc:14:e0:3e:65:fa:8f:7e:e9:d5:d2:76:
         7b:b7:8b:ec:be:3a:63:c1:43:fa:b1:98:da:59:52:fc:98:45:
         c1:aa:20:67:93:c8:38:1c:e2:f8:db:9c:ee:58:7e:41:66:d4:
         e1:28:ba:4d:1c:09:b9:c4:35:8a:d8:6c:dd:9c:c1:0e:fc:b7:
         d9:82:6d:08:6d:ff:71:6c:fb:12:92:b3:b2:d6:f2:49:72:76:
         25:6a:50:6f:bf:e6:00:c2:62:87:9d:ae:bb:17:93:23:b3:0c:
         f3:bd:13:ae:04:89:fc:fc:e5:4e:8b:d2:73:9b:e0:76:45:05:
         61:4d:30:7d:02:46:27:97:d0:37:de:32:39:55:ec:65:1d:8c:
         37:01:39:3e:9b:c8:69:a6:23:c9:fb:82:3f:33:c4:59:3d:ee:
         65:61:79:d8:a6:ba:5d:52:29:fb:17:b1:0a:c4:c6:7b:fc:4c:
         49:1d:00:20:35:f2:10:37:5f:f6:dc:59:a0:46:d1:4c:41:28:
         75:00:ed:03:e1:fc:11:b6:f9:93:b5:b7:78:30:46:dc:fd:2d:
         15:fc:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----