Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
File:                     GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft (raw, json)
Hash identifier:          Y2Zjku9uzwZkYl9zxE5g0bBKzKKa3opsRERdXwgX1eA=
Subject key identifier:   04:58:8E:CF:97:54:4F:6D:A7:03:6C:24:D6:D8:F6:D4:81:E4:40:FF
Authority key identifier: 18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70
Certificate issuer:       /CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
Certificate serial:       01962E98FB01E667DB28A1B87397816FD43D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft
Manifest number:          11BA
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl (hash: tJhbPw61/VF20SSyhu+pngaakFH0kd+7EITOu6n3mbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fb:01:e6:67:db:28:a1:b8:73:97:81:6f:d4:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18d00f652e5f6db356cb93d243a6c7ac6b945c70
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=04588ecf97544f6da7036c24d6d8f6d481e440ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:3f:ca:9e:ca:dc:11:2f:cd:a9:6c:a4:62:
                    02:ca:81:3b:ac:0b:d6:e5:f8:b5:2d:be:f1:b4:28:
                    cc:0d:d7:f2:6f:88:a3:80:26:c0:51:76:d2:c3:a2:
                    9f:d3:9b:23:0b:bc:47:24:71:04:c8:dc:ee:e3:94:
                    53:32:b7:70:b2:10:b8:ab:14:d2:4d:61:5b:3b:90:
                    7b:b8:f6:93:6d:1f:ef:21:03:f3:05:15:ab:5c:19:
                    6e:87:5e:21:ac:81:6d:34:a8:f4:03:80:db:b7:e0:
                    21:02:38:8b:3d:7f:70:3d:31:45:eb:17:07:98:b4:
                    a7:46:4c:78:76:93:d4:e3:1d:59:78:fd:85:31:be:
                    0d:36:19:8c:e1:f6:ad:93:21:60:45:85:a3:69:49:
                    15:83:4a:41:f8:05:6d:d1:67:07:2f:69:9b:83:44:
                    af:cc:47:f4:f1:70:6a:cb:bd:8b:54:15:a0:a9:5a:
                    45:67:39:76:35:bc:3f:09:0f:ce:59:be:a6:05:b9:
                    92:52:b8:7c:e2:c5:86:41:82:a8:72:7e:23:94:eb:
                    00:c8:34:1d:06:e3:1c:b5:3f:b3:a1:7f:a6:a6:a2:
                    0f:f6:42:1a:ad:5b:a0:fb:45:42:35:ce:1b:75:9f:
                    aa:a8:ad:d8:0d:a6:cc:d9:91:07:15:de:91:18:28:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:58:8E:CF:97:54:4F:6D:A7:03:6C:24:D6:D8:F6:D4:81:E4:40:FF
            X509v3 Authority Key Identifier:
                keyid:18:D0:0F:65:2E:5F:6D:B3:56:CB:93:D2:43:A6:C7:AC:6B:94:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/56e6f0-e366-45cc-9b8d-4711372dba16/1/GNAPZS5fbbNWy5PSQ6bHrGuUXHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:d2:65:5a:0b:0d:8c:e8:cf:cc:5a:cc:a8:a1:4c:b8:36:
         9f:b9:b5:83:f0:80:24:c4:f5:48:43:d7:b2:1c:0a:ea:27:b1:
         75:00:26:38:0d:ff:24:5f:b2:2f:fb:72:1e:58:ad:10:47:26:
         19:f6:be:a6:6a:79:d8:0d:46:48:c9:0c:5a:d1:b5:12:13:21:
         6e:31:83:bd:c8:79:83:36:c6:b7:f7:b3:1c:43:c1:b5:73:bc:
         67:43:77:c2:b7:bb:f9:f9:1a:2f:d5:60:3d:b1:7c:57:ea:83:
         ac:1a:dc:95:dc:97:d8:5b:6d:c0:71:98:b2:df:e9:3b:e3:b1:
         40:5c:be:61:ef:aa:4d:48:b5:56:fa:aa:bf:34:b0:18:ed:2a:
         67:5a:9b:08:c8:7f:c2:ed:4f:76:6c:4c:d5:3e:e5:e9:2f:46:
         ad:db:c6:b3:09:09:39:d5:c8:e8:4a:b4:e2:f0:d1:76:35:06:
         28:6f:34:26:e6:a1:8c:41:d9:4f:50:68:b1:13:63:1d:b7:d4:
         d8:b7:31:76:db:f0:1a:64:ae:c3:d2:b5:c0:bd:44:e3:d2:a3:
         26:bc:bf:a9:aa:a1:89:49:15:d7:9e:91:f4:28:45:43:52:aa:
         32:42:94:db:d3:30:e2:c5:ab:7c:fc:8c:0a:44:f3:94:5f:6f:
         4b:b8:c5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----