Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
File:                     Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft (raw, json)
Hash identifier:          v2HHUqzBYfr/FnxoJp1OldXr77sd4G13uJZJWxcwcE4=
Subject key identifier:   4C:59:DA:57:C5:C5:33:DE:6F:B2:2D:88:8E:5D:AE:9A:A7:44:F7:B4
Authority key identifier: 1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF
Certificate issuer:       /CN=1a7cafde3135a26bdd4179029eebf7414e9643af
Certificate serial:       01962FAB408EDAF9534BA4F4AE6CAAC9986E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: 1Cpy8hReysvqo6rJK2S7mrGPkKE.roa (hash: D4UL2BT0SqLhRGOh0lwv2Oqr8FVnOBm4wqYMVb3RDbk=)
                          2: Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl (hash: gPHZcyKwblaIWpfkmhUu/DpsTMUJq41mgTYjI7EXM0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:40:8e:da:f9:53:4b:a4:f4:ae:6c:aa:c9:98:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7cafde3135a26bdd4179029eebf7414e9643af
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=4c59da57c5c533de6fb22d888e5dae9aa744f7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:ee:12:97:b1:1b:2f:14:af:27:04:72:18:
                    3c:4b:cc:4f:97:37:8d:18:59:91:60:ad:1f:01:30:
                    8d:f3:f2:0a:e9:ff:a1:20:d2:32:06:c8:da:32:c2:
                    be:1f:48:03:dc:2a:ca:a1:26:21:f9:c4:1e:20:4a:
                    ed:ea:59:cb:8e:e3:21:95:6d:1c:1a:f7:e2:e8:75:
                    a6:58:eb:91:53:93:5c:39:86:c4:fc:d9:fa:01:c9:
                    44:5f:2f:d7:08:11:ca:29:61:29:ae:9c:73:a9:d4:
                    8e:4e:3d:e6:47:ad:a3:eb:fe:a7:64:8d:3a:08:d7:
                    f4:22:14:ae:0b:9e:16:07:49:16:fd:45:01:f8:4f:
                    7b:c2:3e:65:a8:d4:40:f8:c9:96:68:38:7a:a5:a5:
                    0c:33:1b:a7:13:cb:ac:97:82:31:20:21:a1:33:92:
                    7d:f6:8b:38:65:69:0f:c7:13:a0:b9:7d:14:b4:8f:
                    33:6b:3a:9c:ad:81:89:15:a9:75:b0:dc:9b:6e:cf:
                    4f:c7:01:31:d8:38:5c:89:46:e7:f2:79:a7:42:84:
                    f0:ef:d3:04:11:7b:2b:00:50:d7:6c:e6:37:53:a1:
                    af:bb:74:17:e1:01:b3:6d:44:04:b3:6d:6e:24:4d:
                    87:3b:0a:e3:0b:c0:ca:89:bd:37:13:2a:28:62:98:
                    e2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:59:DA:57:C5:C5:33:DE:6F:B2:2D:88:8E:5D:AE:9A:A7:44:F7:B4
            X509v3 Authority Key Identifier:
                keyid:1A:7C:AF:DE:31:35:A2:6B:DD:41:79:02:9E:EB:F7:41:4E:96:43:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gnyv3jE1omvdQXkCnuv3QU6WQ68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/62afbb-b8f8-4b12-9193-1c5107cab353/1/Gnyv3jE1omvdQXkCnuv3QU6WQ68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:aa:72:e2:1b:3f:cc:1e:2d:bb:7f:34:52:59:04:47:d5:
         ef:83:e1:b6:db:5e:40:30:82:88:a6:a7:9e:4c:8d:3b:dd:47:
         bb:a7:ad:50:86:6d:de:b7:e4:db:34:0d:a3:7f:39:3d:e0:57:
         69:d9:a0:09:8e:8e:22:a6:10:b5:c3:8a:30:8a:82:05:41:8d:
         b9:2c:4c:c7:be:d1:3b:55:20:cd:8d:87:b9:f4:98:12:00:2a:
         70:1d:eb:25:fa:b8:18:34:8d:a2:49:9b:d6:ee:c9:35:23:89:
         51:b7:37:13:3f:5c:62:c8:b4:ca:ed:36:7d:e9:9f:db:a5:4b:
         cf:c2:9b:c5:a0:65:98:a1:17:27:b5:af:0d:ec:9b:9c:1b:e2:
         6d:44:b3:8b:79:44:f5:6a:68:41:c0:fb:22:08:bd:38:dc:24:
         3d:fc:5f:1b:4e:c2:25:a3:83:17:28:12:7f:57:b7:7c:a9:14:
         02:d8:64:b8:5f:a0:b9:15:ff:65:8c:ee:a6:9e:41:40:f2:08:
         c9:ed:44:c0:e2:51:e1:ee:8b:60:35:b8:6e:75:c6:5f:0f:d0:
         3d:87:8a:2f:c0:3d:25:aa:c3:30:02:d0:68:bb:d6:72:fe:23:
         e6:d7:7f:63:0f:20:60:7c:22:f3:f6:73:c6:d3:4d:88:2f:7b:
         7e:e7:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----