Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
File:                     GnU2E7QiD2jytUbQkqIwvtbtrLg.mft (raw, json)
Hash identifier:          WdoADi8ynCp5/l3FhXKMbflowZsnvMFQRA+P1P+bX4U=
Subject key identifier:   2C:C5:22:8F:06:DF:DA:0D:1A:3A:4E:30:1D:AE:EA:3C:33:CB:53:E9
Authority key identifier: 1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8
Certificate issuer:       /CN=1a753613b4220f68f2b546d092a230bed6edacb8
Certificate serial:       01962F06B7C92CCF114D91A79BD74702E286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft
Manifest number:          0839
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: GnU2E7QiD2jytUbQkqIwvtbtrLg.crl (hash: XNsqPfBc6teZr7Y0/yTUGsH8QONgk7KkklKBgnQDFm0=)
                          2: dZV8dvdnA_9uSLTQkNXVl8a3FaI.roa (hash: Krx07PHv8S1aDWSKbtOJAHlzZWfSCAV78WJWEmqXiPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b7:c9:2c:cf:11:4d:91:a7:9b:d7:47:02:e2:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a753613b4220f68f2b546d092a230bed6edacb8
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=2cc5228f06dfda0d1a3a4e301daeea3c33cb53e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a4:0a:f6:aa:3d:24:01:ec:04:09:a0:24:9b:
                    17:a0:6b:98:88:77:db:dc:d2:e2:1b:8d:a0:c8:c2:
                    cb:03:64:f4:4e:2b:36:2b:80:b2:b7:fa:90:6d:65:
                    4a:4c:46:c3:66:d0:e5:b7:b4:ba:85:e1:94:14:58:
                    99:1c:c9:4f:bf:53:46:7c:57:f8:f5:9c:ea:57:d4:
                    0e:ed:1f:5b:03:16:4e:ad:74:f5:d5:1c:f3:51:f4:
                    17:cb:a7:b5:bd:c3:cb:06:c2:bc:58:14:ea:dc:03:
                    2a:b8:f0:85:2b:17:db:c7:16:25:c2:dd:c6:b3:de:
                    c6:b1:ca:71:37:6a:17:22:2e:1f:eb:91:11:91:ea:
                    5d:d3:16:d3:b0:94:c6:44:74:6c:1c:6f:41:e9:f9:
                    f5:bb:27:73:2a:97:ce:77:eb:ae:3a:21:70:0c:16:
                    60:39:2e:da:5c:21:1a:c3:14:6c:ae:41:33:78:98:
                    6a:bd:b6:5b:ee:50:de:35:08:83:6a:d0:1e:ea:55:
                    d0:c8:36:31:bc:df:fd:c0:64:ca:b7:3e:30:bb:3c:
                    9c:34:e1:34:93:a0:24:d3:b5:ef:74:57:e3:cc:2b:
                    37:0d:0e:75:98:bf:6f:56:e4:65:44:02:5b:9d:95:
                    94:0a:a6:ae:1c:2a:5d:36:cb:06:a5:e4:cf:1f:b0:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C5:22:8F:06:DF:DA:0D:1A:3A:4E:30:1D:AE:EA:3C:33:CB:53:E9
            X509v3 Authority Key Identifier:
                keyid:1A:75:36:13:B4:22:0F:68:F2:B5:46:D0:92:A2:30:BE:D6:ED:AC:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GnU2E7QiD2jytUbQkqIwvtbtrLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/73c3e3-81e6-4eb4-a946-609fa4e54067/1/GnU2E7QiD2jytUbQkqIwvtbtrLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1a:2e:b9:b2:75:11:37:03:be:88:9a:db:bf:09:24:d6:f1:
         d3:c2:10:35:db:03:8e:89:78:4b:a9:05:d4:bf:1b:f2:67:cd:
         63:b9:0d:0a:74:38:bd:5f:39:5f:20:d8:2e:3a:bf:fa:32:7a:
         57:c4:16:41:5b:ca:56:b8:16:1b:16:fc:62:8d:da:b6:fc:6c:
         cd:b4:8c:1b:a6:ab:df:98:08:65:b2:ce:df:d1:74:cb:e6:7b:
         5d:bb:06:56:18:31:5b:e0:ac:3b:34:c5:09:70:0e:f4:c1:81:
         b5:26:e6:2a:de:85:dd:82:ff:4a:13:68:c0:a1:c9:e5:9e:37:
         ba:da:e1:c1:83:a1:f7:95:4d:c9:4d:d3:0b:37:7a:75:c5:63:
         89:d9:2f:f4:68:e3:6b:b8:20:5b:c2:97:8e:6e:64:3d:ae:71:
         e9:de:30:00:df:21:63:76:e7:46:13:3b:74:06:73:de:e2:5e:
         08:34:68:f7:6b:4a:d7:7a:8f:7b:63:b9:fe:40:f3:ae:90:e8:
         0c:40:24:da:70:b7:a7:85:00:6d:0c:ad:ad:a2:fc:d5:f9:f0:
         d5:14:4e:7b:db:db:13:b3:cb:52:dc:c6:6d:d5:95:27:3b:c3:
         31:a4:74:15:20:f8:43:b5:ad:bc:77:84:71:8b:58:72:5e:a2:
         a3:6a:68:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----