Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
File:                     GhgxUqZBpAN71soKarQcukbaV9s.mft (raw, json)
Hash identifier:          nrLQVA6uX3K5WnIGzFa8wcr9Dz8ITOk8CB5wBu7ouzY=
Subject key identifier:   EE:C7:EA:7A:97:1B:26:AC:C2:97:FD:5F:61:77:46:D1:F8:41:64:C9
Authority key identifier: 1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB
Certificate issuer:       /CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
Certificate serial:       01962E99145DBD60E4F3A6CEA73DCF996D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft
Manifest number:          0E0C
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: GhgxUqZBpAN71soKarQcukbaV9s.crl (hash: Iqff3Ij1dR2j3T+dnsEdelIHbrbEXaTPXynjynYkTNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:14:5d:bd:60:e4:f3:a6:ce:a7:3d:cf:99:6d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a183152a641a4037bd6ca0a6ab41cba46da57db
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=eec7ea7a971b26acc297fd5f617746d1f84164c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:39:3e:24:7f:01:f9:fa:f4:ed:77:da:94:
                    1e:e0:13:55:c2:2c:c4:cd:2d:ff:00:fe:65:cf:5c:
                    52:62:56:05:ef:10:39:4b:0e:aa:84:6c:a9:81:a9:
                    b6:ec:16:01:97:22:42:ff:2f:a2:6d:98:6b:82:94:
                    8c:75:ef:00:74:2e:49:7c:7a:b2:54:9f:fd:7b:53:
                    d2:80:39:45:1e:fe:b9:32:a8:42:c7:20:44:42:c4:
                    11:a3:0d:be:bc:dd:5d:a1:ed:9a:46:82:53:15:34:
                    bb:16:c4:20:d4:44:7b:72:10:7a:3f:3b:82:0b:90:
                    c7:34:5b:7d:91:61:37:eb:35:d8:01:61:38:29:da:
                    37:56:fc:a8:da:43:6d:57:be:29:8f:9f:62:18:90:
                    08:e5:99:6b:d7:36:62:7b:8f:8a:cc:1e:68:8a:58:
                    8c:18:96:58:2b:85:d9:a0:1e:f6:dc:bf:2c:8a:a4:
                    35:29:86:fa:79:08:9b:90:d2:10:fe:98:2e:9a:78:
                    57:cc:1f:84:59:65:fb:b4:e6:c5:43:7f:7c:ad:05:
                    b5:53:af:97:98:fe:77:43:7e:9b:4a:4e:b2:c8:17:
                    e5:9b:a5:a0:32:b3:ce:87:43:c4:17:ca:96:b2:71:
                    63:0c:eb:bf:42:4f:7f:ba:02:83:3b:71:f6:08:90:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C7:EA:7A:97:1B:26:AC:C2:97:FD:5F:61:77:46:D1:F8:41:64:C9
            X509v3 Authority Key Identifier:
                keyid:1A:18:31:52:A6:41:A4:03:7B:D6:CA:0A:6A:B4:1C:BA:46:DA:57:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhgxUqZBpAN71soKarQcukbaV9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/c3e03d-a4db-4050-906c-56294c708faf/1/GhgxUqZBpAN71soKarQcukbaV9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:b6:fa:fa:bd:a7:60:62:ea:cd:b6:5e:95:f4:67:ee:0a:
         4d:7f:f2:60:f3:74:40:35:fe:64:5c:dd:86:56:a6:d2:57:54:
         34:61:c8:3b:98:66:2c:09:1c:c5:5c:96:59:61:9f:21:e3:28:
         26:98:23:0a:41:43:00:dc:43:c5:56:6f:4d:63:76:f5:a3:45:
         bf:a8:d0:ae:08:25:d4:ad:ac:59:a2:a2:2d:5a:7b:e8:f7:1d:
         7c:d9:7a:1d:18:94:6d:d4:ed:9b:39:20:43:2a:8a:71:07:78:
         27:d3:d9:2e:e9:17:83:4e:fb:52:f7:61:88:6d:2b:cb:66:a7:
         f5:cf:96:7d:07:be:63:b4:ce:5d:a6:45:dc:ff:cf:9a:50:3b:
         56:13:62:c0:8d:2c:b2:d8:87:18:78:36:a3:18:b5:81:18:31:
         70:54:d4:3a:13:77:06:22:2e:52:f9:02:c8:bd:7e:82:99:49:
         46:85:27:b0:c1:88:be:db:dc:5d:fc:e6:4f:ef:eb:b9:ac:82:
         f8:cb:d1:5e:66:bb:4d:b6:ef:3b:0f:38:ec:0b:62:c7:04:c9:
         90:5b:ba:41:2d:82:30:d2:96:4f:41:41:85:62:66:64:4d:cd:
         6d:f5:8e:a0:1a:e8:27:3a:05:eb:aa:b4:8f:ea:da:52:8d:21:
         b1:a0:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----