Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft
File:                     GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft (raw, json)
Hash identifier:          43rVIR8zbFp3ynl8E0fRNSrLbG8XSxjPD8SN/g0Jqn0=
Subject key identifier:   78:48:04:D2:39:0D:31:2E:9C:3B:D6:DD:D2:DE:E9:AB:74:C9:F5:B7
Authority key identifier: 18:2D:69:63:F8:F8:04:58:D8:41:CA:AE:F1:58:B9:92:AB:40:59:C7
Certificate issuer:       /CN=182d6963f8f80458d841caaef158b992ab4059c7
Certificate serial:       01962E99013FE8651BB33DC332D89964F4EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl (hash: s0YGhEVN6TxXnkvvR9qbCVeopt5luuGvuKLoiNlEoOE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:01:3f:e8:65:1b:b3:3d:c3:32:d8:99:64:f4:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=182d6963f8f80458d841caaef158b992ab4059c7
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=784804d2390d312e9c3bd6ddd2dee9ab74c9f5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:d4:fb:22:5f:fe:58:51:6b:d5:02:68:86:
                    30:92:9f:c5:75:70:a6:b8:a7:f9:ae:58:4c:17:8a:
                    af:49:74:f6:81:85:56:39:9a:de:b7:71:6a:e9:a8:
                    6f:9c:59:73:18:8c:c9:83:38:09:f1:6f:d7:b1:d1:
                    df:f1:d5:64:da:28:a9:e0:09:f7:bc:54:d7:5f:54:
                    4c:af:1e:1e:0f:4d:dd:69:43:59:93:2d:7f:6e:74:
                    f1:3e:b3:4d:98:ab:39:96:53:eb:9a:ba:40:07:b5:
                    e2:af:ec:b7:93:99:02:1d:00:f0:b8:58:80:1b:c8:
                    cb:56:b0:2a:0d:1b:04:0a:38:61:67:0c:3e:ca:65:
                    29:8b:e4:36:d5:70:ef:f9:d4:dc:db:b9:e6:c9:25:
                    bc:10:b8:72:d4:a8:5c:13:87:46:88:71:af:92:9c:
                    10:66:41:9b:23:50:45:2e:88:07:7c:a6:e5:f1:c7:
                    e8:ed:ad:25:f7:80:23:5f:b6:18:0a:f2:1f:59:5a:
                    c4:52:22:ad:55:2b:6f:8d:0f:78:4e:a4:62:18:ef:
                    d5:c8:29:27:e6:37:f4:ca:70:0c:71:32:aa:db:b6:
                    2a:49:05:83:23:ad:1e:93:a2:07:78:1b:33:dd:a5:
                    a8:39:4e:e9:c6:47:73:25:08:69:12:8d:50:a7:ae:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:48:04:D2:39:0D:31:2E:9C:3B:D6:DD:D2:DE:E9:AB:74:C9:F5:B7
            X509v3 Authority Key Identifier:
                keyid:18:2D:69:63:F8:F8:04:58:D8:41:CA:AE:F1:58:B9:92:AB:40:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/1f0493-c4bf-49f2-97ef-12438a9dc26d/1/GC1pY_j4BFjYQcqu8Vi5kqtAWcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:31:56:1b:2a:2c:1b:12:2e:95:dc:54:84:23:ef:73:31:c6:
         6a:c0:7b:63:5b:e3:6e:3e:3a:26:ff:6d:6f:03:05:ab:a1:c1:
         88:b2:07:6f:b3:f8:29:b9:70:d1:71:63:80:29:5c:87:fc:76:
         40:e2:a4:53:81:83:d2:6c:de:0a:8b:bd:49:99:df:39:66:17:
         db:34:1b:14:9f:6c:bc:7a:cc:7b:04:b1:ac:74:ea:14:d2:57:
         c9:f8:67:ce:a3:eb:8b:62:ce:83:0b:d8:70:fc:e2:3c:ca:a6:
         d6:d8:aa:b9:47:68:9a:79:97:71:6a:b5:da:6f:f7:12:18:1b:
         3a:6f:bb:c1:4b:29:ac:30:da:ca:c0:7f:10:57:52:88:35:a1:
         65:fd:ac:21:51:93:22:2b:92:93:8f:64:d5:e4:bb:72:be:31:
         0a:9a:f7:65:f7:06:11:14:fb:31:c6:52:f2:21:03:21:89:3c:
         a3:19:09:0d:7b:ba:16:68:18:f9:e1:9a:f0:73:1f:02:73:69:
         d7:7f:bc:45:30:a6:16:40:e5:a0:b2:30:3e:d7:d9:97:53:1e:
         73:8d:07:75:5e:ee:4f:2c:0f:8b:46:0a:49:3e:a5:07:d0:ce:
         f6:1d:90:78:13:bb:b8:e2:a1:57:ab:27:72:c2:53:41:70:d7:
         6a:70:ac:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----