Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
File:                     GWRkVJwHkby2YRd_l67c851Uw5U.mft (raw, json)
Hash identifier:          VtEssL7P7xfpdhstyO1fn6PgCm2I0nmOQeemxAdtR9U=
Subject key identifier:   5F:FE:75:84:62:1F:C5:47:E2:81:3F:8F:EA:8F:41:81:A4:A3:AF:6F
Authority key identifier: 19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95
Certificate issuer:       /CN=196464549c0791bcb661177f97aedcf39d54c395
Certificate serial:       01962DF3D753F5347F9E8E68E0E7DE5AB40C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: GWRkVJwHkby2YRd_l67c851Uw5U.crl (hash: SGmbK9P7/d8XunXW2wPpbS8qKG7JHiBTsGWt+qQfiWk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d7:53:f5:34:7f:9e:8e:68:e0:e7:de:5a:b4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=196464549c0791bcb661177f97aedcf39d54c395
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=5ffe7584621fc547e2813f8fea8f4181a4a3af6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b7:dd:e8:6d:7c:3e:66:11:64:33:1a:dd:97:
                    ab:d6:6b:27:c8:f4:a5:2e:92:39:5c:41:b6:b3:21:
                    88:20:69:37:8a:3d:11:e4:81:cb:74:ad:83:23:09:
                    50:ed:4c:af:cc:32:cd:ac:0b:8b:f8:a9:9a:a2:77:
                    ac:e0:9f:db:33:44:65:6a:05:20:49:7e:05:c8:9f:
                    e4:d4:d6:45:cf:37:fe:99:bd:6a:38:bb:61:e9:1c:
                    87:bd:ea:44:67:34:76:38:48:44:19:8d:45:57:21:
                    67:17:dc:7b:c9:19:9e:55:6f:02:41:a6:37:d8:79:
                    33:cb:2b:1a:58:75:e9:c9:ba:92:50:06:79:c3:49:
                    0d:b9:d3:66:92:95:8e:5d:65:d7:ea:d5:fc:3d:9b:
                    77:bf:17:f2:7c:82:2e:74:51:53:ee:05:db:b2:d8:
                    66:49:06:10:05:e7:5c:ca:a1:76:8f:0b:59:79:31:
                    89:07:80:fd:8f:5c:4a:0b:1c:d3:c4:7b:4c:05:71:
                    04:77:e8:4b:80:1b:fa:1c:96:d1:88:2e:11:a5:9c:
                    60:e6:a6:fd:a7:3e:44:c7:a1:51:e7:25:c0:96:3b:
                    79:6e:e3:4a:4f:06:b6:24:64:d8:37:c0:85:a0:cb:
                    67:55:60:cb:cd:62:89:5a:27:3b:b1:eb:af:f6:21:
                    4b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FE:75:84:62:1F:C5:47:E2:81:3F:8F:EA:8F:41:81:A4:A3:AF:6F
            X509v3 Authority Key Identifier:
                keyid:19:64:64:54:9C:07:91:BC:B6:61:17:7F:97:AE:DC:F3:9D:54:C3:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWRkVJwHkby2YRd_l67c851Uw5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ff9ea6-fb6b-4113-8005-475b29d1286a/1/GWRkVJwHkby2YRd_l67c851Uw5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8f:f7:23:a4:d8:4b:01:7c:e6:2c:b5:a7:e0:1b:f5:e1:fa:
         89:f5:b7:1a:fa:05:e3:b1:3d:59:b1:24:97:55:04:47:44:1b:
         9d:70:5d:67:82:ff:9d:ee:b6:25:44:bf:8a:5b:4f:db:5e:e2:
         1f:42:d3:bb:10:a2:e0:1d:f3:81:12:e7:f7:6c:30:1f:6e:01:
         e3:06:21:49:9b:cf:f1:6a:e3:85:fe:26:f6:35:14:a3:66:3b:
         32:8a:47:09:9b:aa:8c:5b:9c:3c:5e:6b:81:37:21:45:6b:82:
         48:d2:f4:c7:b7:5d:ce:f6:82:10:df:3f:74:89:2c:ab:3e:19:
         cc:2c:c9:0e:13:5e:c3:bb:a6:6d:5a:e4:d2:f4:e2:4c:c1:03:
         39:5b:e5:fe:20:5a:cc:c9:51:a7:40:00:53:fb:aa:cf:21:7a:
         9e:7d:16:73:b7:c5:8b:ff:2c:13:54:c4:5f:30:b1:61:0f:df:
         ae:9c:18:d7:df:7d:9f:9c:b5:f4:48:a4:b1:2a:e6:d0:62:24:
         a1:56:17:ec:0d:f7:3d:23:6f:44:10:ef:b7:3f:ba:21:dc:b8:
         ac:52:60:7b:2f:ac:35:42:06:fe:3f:62:d8:3b:9d:1b:0f:4c:
         e3:e5:c2:87:00:96:c6:c1:4d:10:ac:c5:92:e2:d5:f2:00:20:
         51:cf:3e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----