Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
File:                     GckQlAa9oSZuVvZm6MmDWNdD3XY.mft (raw, json)
Hash identifier:          sDc2nXOEE+NzvTXdHEqcsFfpmREmbIBL5uNzgmI/UQI=
Subject key identifier:   04:1E:EF:5A:0F:4D:D1:61:00:63:44:13:4C:5B:6E:40:B4:5D:66:8D
Authority key identifier: 19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76
Certificate issuer:       /CN=19c9109406bda1266e56f666e8c98358d743dd76
Certificate serial:       01962E9971FDD415AA2EBBC640B49A00D952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: GckQlAa9oSZuVvZm6MmDWNdD3XY.crl (hash: N2EdagCu3ZsZm0TUKd5fv8vVVg9AyqD7Vj92BlP98Bs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:71:fd:d4:15:aa:2e:bb:c6:40:b4:9a:00:d9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c9109406bda1266e56f666e8c98358d743dd76
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=041eef5a0f4dd161006344134c5b6e40b45d668d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ec:b5:1b:a4:5a:b3:1f:35:b5:e2:ba:24:f1:
                    e0:f6:90:86:9b:f9:b2:e5:e9:4d:cc:33:45:54:ff:
                    fb:9b:d7:15:0f:75:19:38:09:6f:9b:fa:0a:9f:73:
                    de:1c:74:eb:4e:44:d9:4d:2d:64:78:ca:a6:81:18:
                    17:1d:47:ae:5f:66:49:a3:eb:0d:b6:07:01:36:b9:
                    b4:7e:7c:46:09:48:4e:7c:8a:9f:83:e4:ff:09:fa:
                    c0:37:60:d9:1b:9c:c9:e7:85:e6:6e:13:be:3e:d2:
                    41:7c:d9:1a:c3:d2:77:ad:b6:f9:bf:f0:42:3b:f6:
                    27:33:80:12:37:c9:31:4b:67:3f:83:1a:35:05:ff:
                    35:23:b1:64:ce:04:a3:73:8d:86:4e:75:84:15:d1:
                    de:99:83:0b:bb:6c:7f:1b:6e:41:76:86:a3:0e:12:
                    fa:aa:94:b7:42:66:b7:01:a1:d2:c5:45:f5:fc:f8:
                    bb:98:b9:9e:06:19:2b:85:89:b1:8d:e2:76:68:78:
                    55:9b:e7:1a:0f:25:8c:5c:e9:fe:ef:d6:90:5f:3c:
                    9e:f1:f2:d6:b2:2c:26:cc:22:db:df:ac:2a:ff:bc:
                    bf:20:ef:fe:4e:8c:2f:55:d2:50:24:ff:65:be:af:
                    51:06:58:44:53:8a:a1:54:3f:3a:d4:bd:cb:3c:5c:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1E:EF:5A:0F:4D:D1:61:00:63:44:13:4C:5B:6E:40:B4:5D:66:8D
            X509v3 Authority Key Identifier:
                keyid:19:C9:10:94:06:BD:A1:26:6E:56:F6:66:E8:C9:83:58:D7:43:DD:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GckQlAa9oSZuVvZm6MmDWNdD3XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b7ca59-3eae-4e0e-8cf6-deb75df390de/1/GckQlAa9oSZuVvZm6MmDWNdD3XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f9:41:a7:18:d9:fd:6d:b0:48:57:bd:52:40:98:64:54:dd:
         a0:5a:f8:7b:cb:78:5a:24:59:1a:ca:92:1c:1c:52:d5:22:f0:
         9b:8b:4a:9d:7a:b1:fb:21:ba:8c:68:bb:6c:52:be:f6:2b:00:
         31:8f:14:4e:a7:ec:24:72:0a:99:3f:77:eb:0e:7d:d0:c3:f0:
         83:05:91:2a:3f:66:c5:ad:70:e3:7a:30:4e:0b:e8:3e:d1:c3:
         08:cf:a6:cc:f6:ac:ca:00:eb:2f:75:79:24:cc:6f:66:c0:b3:
         0c:2f:16:a8:3e:af:b3:72:95:83:59:61:3f:8c:f7:f4:dd:ad:
         70:ce:38:4c:16:2f:25:e9:94:3b:37:dd:1f:7c:68:70:09:bc:
         a9:b2:c1:c8:a8:c5:58:15:fb:ab:01:19:8c:a2:fb:08:20:7c:
         71:de:d6:ae:2c:77:cb:92:c4:d7:b8:ed:1a:ed:51:08:94:0b:
         5c:f6:19:53:0e:54:3b:c5:de:6e:2a:58:b3:e2:fa:7a:82:b2:
         3c:a9:25:3f:e3:51:9a:10:8a:f7:8b:bf:b2:16:fc:ec:c0:51:
         6b:ad:0e:78:70:79:f6:af:34:3f:b9:20:78:3d:4d:e2:84:a9:
         6d:27:d3:f3:49:18:de:f4:32:0e:02:57:78:9d:e7:d6:02:99:
         c7:29:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----