Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
File:                     GWImUASBB5GK3xsizfCHyKg095w.mft (raw, json)
Hash identifier:          vyxNbEB/98sTuxQkf7OQTJqFgcjhKUR3Bjh3tZVFJBA=
Subject key identifier:   FA:76:6E:C9:07:83:CD:2F:1A:E5:D7:40:63:F8:DD:D7:B2:9D:8A:02
Authority key identifier: 19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C
Certificate issuer:       /CN=19622650048107918adf1b22cdf087c8a834f79c
Certificate serial:       01962F0709BF0EF1B08B9B56A363E71D3276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft
Manifest number:          08EB
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: GWImUASBB5GK3xsizfCHyKg095w.crl (hash: W0FgaKdJfV6ZKf1GdmuTNoEDM2x0aKy6iV9KuttwHVE=)
                          2: huPI6u_LRtdxxCntM6xWi8UILhs.roa (hash: dxaGNUPSqDMCpFu0jmftsWJq4vBwtQVy+FWsjciFptc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:09:bf:0e:f1:b0:8b:9b:56:a3:63:e7:1d:32:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19622650048107918adf1b22cdf087c8a834f79c
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=fa766ec90783cd2f1ae5d74063f8ddd7b29d8a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:e3:3d:4d:6e:36:5a:8a:f1:7b:35:18:12:
                    92:40:2b:be:9e:3c:84:ad:e2:54:0b:b9:13:b9:96:
                    ce:f4:85:eb:d2:0a:9c:2a:49:a6:6c:c2:94:85:a3:
                    55:ff:92:3b:c4:81:7c:3a:7b:52:e3:16:46:a1:07:
                    a5:bc:fa:9a:62:79:ab:47:ff:48:07:0f:70:3b:0f:
                    8c:4c:3c:ff:a2:be:b2:d1:7a:38:36:ae:10:7f:da:
                    3c:84:74:2f:e1:b7:62:c5:5f:c7:ff:18:48:c1:f3:
                    7c:7e:46:82:8e:8e:55:67:e9:24:d4:91:16:b1:23:
                    f6:32:a3:db:5e:b8:ba:f9:59:5f:34:74:c5:04:26:
                    d5:8d:0f:63:e6:e2:cd:a6:a6:d2:21:38:b6:df:5c:
                    79:75:ec:73:b9:20:aa:5a:dd:09:f2:c9:d6:71:4a:
                    18:44:d0:83:8d:e4:0f:ce:03:f0:ec:c2:0e:e8:b2:
                    73:94:30:e6:a1:84:c1:d2:0f:1b:51:0a:31:10:49:
                    d9:5c:43:d5:73:52:9f:db:d1:a3:09:ec:b7:21:78:
                    b4:c2:d6:82:eb:9b:1f:1a:f1:95:63:c0:07:b1:50:
                    6c:9b:fb:f0:06:ff:1f:b9:db:b4:4c:df:6d:d6:21:
                    4b:f5:06:bc:1e:e9:25:82:bf:74:d3:1c:db:16:c1:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:76:6E:C9:07:83:CD:2F:1A:E5:D7:40:63:F8:DD:D7:B2:9D:8A:02
            X509v3 Authority Key Identifier:
                keyid:19:62:26:50:04:81:07:91:8A:DF:1B:22:CD:F0:87:C8:A8:34:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GWImUASBB5GK3xsizfCHyKg095w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c502c1-f314-40b1-a024-8d10fee584fe/1/GWImUASBB5GK3xsizfCHyKg095w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:56:58:2d:84:56:4c:f0:a4:4a:c3:82:5c:ab:a5:56:0b:39:
         73:1f:df:67:4e:76:51:17:06:7a:55:58:56:1a:09:1d:b6:2b:
         84:0b:80:a2:9d:ec:db:ac:62:dd:43:d3:3d:34:1c:72:46:ab:
         6c:aa:bb:c2:55:ee:4b:21:3b:7a:d4:49:eb:77:74:94:bc:b3:
         eb:aa:eb:db:e6:37:d1:55:2a:8a:29:76:ce:4f:37:f9:28:45:
         2b:e4:0c:66:cf:2b:65:2d:a6:97:70:4e:6a:63:1d:8d:31:9b:
         9b:59:2c:bf:38:8b:2d:fd:3b:f6:9d:fe:d7:78:31:93:61:fe:
         51:9f:32:64:f1:88:b1:77:74:85:8d:ef:0f:62:68:7a:b1:0c:
         d8:da:c0:f1:17:1c:b3:4f:17:6e:2b:b3:9d:0d:82:95:10:03:
         86:f0:6b:9b:d6:c1:12:35:33:81:c6:31:e5:0a:c7:71:52:57:
         16:5e:29:ca:15:47:ad:46:a7:a3:b2:26:58:7a:e2:4a:e6:ad:
         d3:7e:59:be:4c:61:ce:ce:96:d5:d0:29:63:cd:bf:e2:06:72:
         32:40:2e:65:3d:c1:de:a5:24:b2:ca:e4:fc:a4:53:59:be:da:
         b8:68:f7:0d:52:52:a3:b1:df:cb:16:ba:a0:e1:96:6b:5e:19:
         98:72:99:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----