Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
File:                     G23jwbDHn_sngi4JR_3DjlH8xco.mft (raw, json)
Hash identifier:          hihr9+EDzfDD+yikh20uDNVCsBU6WALDrw3oDANNaJM=
Subject key identifier:   2A:84:96:10:F1:DA:4B:EE:72:B9:64:C4:2A:F6:69:6D:7D:E0:10:2D
Authority key identifier: 1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA
Certificate issuer:       /CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
Certificate serial:       01962F3D47BFC4E52982A9BF9A2B51B8E54C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft
Manifest number:          0F8A
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: BiAGFPvBaS-_3_T0Ap9b3JfJGCA.roa (hash: /0KB5Sq+IlIDTZoBY7qyhjJDP3PWs+GzGp/8C87RpPw=)
                          2: G23jwbDHn_sngi4JR_3DjlH8xco.crl (hash: fuJ1G1s2O1kNQeSBi12UcoV7jx/erIkBf/q/ozjWREY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:47:bf:c4:e5:29:82:a9:bf:9a:2b:51:b8:e5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6de3c1b0c79ffb27822e0947fdc38e51fcc5ca
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=2a849610f1da4bee72b964c42af6696d7de0102d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:5a:93:82:bd:78:6e:bc:32:6c:38:ed:de:
                    42:05:53:55:2c:37:5c:6a:77:22:85:46:ae:ad:3c:
                    cf:66:7f:c8:5f:6d:5a:d3:46:d3:d4:f9:fb:5e:5e:
                    18:70:ef:33:e3:65:ad:63:1c:9c:b9:ad:cc:16:35:
                    c7:c7:99:db:30:04:f6:2f:e5:69:05:49:e3:e0:d3:
                    fc:0e:71:36:47:8f:ed:b0:48:15:1b:92:06:50:b0:
                    24:43:fd:ab:5b:17:2a:ff:2e:57:36:61:ed:df:42:
                    4d:25:a5:1b:9b:df:46:65:ea:7f:a9:4e:05:3f:d0:
                    48:f1:f5:35:1a:1c:32:11:f6:e0:15:b6:da:65:3e:
                    d2:bf:c0:2a:69:0e:d7:c5:e2:46:86:15:88:56:af:
                    f4:e3:3f:21:04:10:63:cb:fa:b5:db:85:e9:33:ae:
                    91:36:70:7a:ae:c0:11:db:01:57:7c:11:01:bf:16:
                    d8:f3:af:d8:77:bf:10:89:25:d5:52:ae:70:be:04:
                    29:30:be:e7:99:ee:82:d4:fd:dc:f9:26:49:93:14:
                    5d:88:76:f0:7f:2f:f6:d2:b2:e4:17:bd:86:11:1a:
                    4d:66:29:a5:65:1b:66:66:29:63:cf:5a:87:d6:83:
                    60:c9:d5:b8:2b:9b:b2:24:d0:7a:82:50:56:49:b6:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:84:96:10:F1:DA:4B:EE:72:B9:64:C4:2A:F6:69:6D:7D:E0:10:2D
            X509v3 Authority Key Identifier:
                keyid:1B:6D:E3:C1:B0:C7:9F:FB:27:82:2E:09:47:FD:C3:8E:51:FC:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23jwbDHn_sngi4JR_3DjlH8xco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c5e557-8be5-4f39-9565-d99e086846b7/1/G23jwbDHn_sngi4JR_3DjlH8xco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:da:38:9a:e2:9e:a8:29:66:b3:70:7e:59:96:38:2b:38:c3:
         1a:31:00:34:81:00:73:0e:64:7e:3a:a5:2c:55:23:9f:e9:37:
         40:02:00:2c:3c:5e:69:7b:ff:9b:2c:1b:32:8d:37:e0:52:24:
         18:03:d9:e9:43:86:90:d0:b0:03:ab:a5:42:a4:49:e1:3b:51:
         47:8d:de:5b:1e:d9:50:1a:1e:e5:ea:27:c9:7c:68:85:6d:12:
         a1:8e:af:30:85:26:04:49:e0:b8:2e:e5:eb:4c:4c:84:bf:e4:
         a8:fb:1c:97:8e:0e:03:df:e5:b7:3e:83:45:67:1f:b6:be:36:
         18:a0:90:29:80:a6:72:e2:9e:61:b3:11:20:1f:d6:28:dc:bc:
         c3:de:b9:3a:6a:59:19:6d:e7:9b:72:18:ab:d1:68:57:84:55:
         4a:63:af:2d:4a:0f:0f:b3:e4:49:94:00:17:b0:6c:e7:e6:5a:
         49:a8:ca:52:74:5b:9d:5d:ed:6c:b1:0e:21:cf:09:91:81:09:
         c4:b1:4f:1f:1c:c2:ee:1e:1b:82:96:bb:b7:2a:1b:00:26:b6:
         e3:68:20:aa:20:9a:ae:95:38:34:de:f8:af:8f:90:f1:0a:13:
         f4:61:0b:f8:bf:72:70:0b:ca:7c:55:bf:72:68:8a:3a:99:4c:
         48:2d:c5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----