Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
File:                     Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft (raw, json)
Hash identifier:          o9f9vOYM/13FgcF3udkYT5kzZ+46dMQXPntp1GRXmxg=
Subject key identifier:   4A:2F:F3:68:B1:5E:E1:44:D5:EF:01:CB:B4:AC:BD:71:78:2D:10:CD
Authority key identifier: 1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3
Certificate issuer:       /CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
Certificate serial:       01962FAB8451638679E01C81AE488C058397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl (hash: ctt0umXMLWR8Be9ZujkJZ7PMZyYKnP7tDZf5OEhxRMc=)
                          2: ttZNv6l1EeF-xiTWTGqQIM7MdNI.roa (hash: 7CYeRmxgoUhsy4kTyySHz2v5rlglnUVr1BYD9Sp0a6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:84:51:63:86:79:e0:1c:81:ae:48:8c:05:83:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af91dcedfdefdce59bdb05002b1cb6c52f0c5d3
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=4a2ff368b15ee144d5ef01cbb4acbd71782d10cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:51:8f:06:38:d1:14:ee:42:e5:1e:58:04:
                    3f:7b:e4:7f:3c:08:61:e7:4e:2a:07:31:da:cb:85:
                    be:4b:21:64:d7:70:26:b3:33:60:1c:75:50:37:80:
                    4f:15:e9:6c:35:97:a2:e8:c1:ad:58:9d:55:8c:36:
                    f1:9b:04:d0:1e:b0:ce:0b:c3:e7:6e:fa:65:8d:a7:
                    c6:52:03:55:57:6c:a9:29:8e:e8:a8:46:a4:ff:8f:
                    b0:90:a9:2e:af:e0:0d:c8:65:60:bb:32:5d:2d:dc:
                    00:2f:79:26:90:6f:4a:a0:a6:ab:21:70:b9:1b:fb:
                    ca:e1:f4:46:61:73:47:40:54:47:07:7e:8d:f7:5a:
                    7a:ec:aa:b3:9a:c3:c0:d8:f5:02:45:07:3f:5d:30:
                    d8:ac:67:53:bf:41:03:23:eb:2c:41:16:a1:ad:f5:
                    d7:cc:50:79:9c:57:c7:0a:42:64:83:5a:1e:39:42:
                    2b:03:fc:32:43:2f:5b:a2:5e:18:51:0e:45:e7:6f:
                    e9:9c:fb:d9:8b:f2:29:d0:a8:6d:c0:66:b9:b5:92:
                    71:c2:09:36:85:c5:f4:82:84:4f:83:dd:c9:36:72:
                    44:65:50:a4:58:27:65:06:70:c3:81:d0:b2:3c:b2:
                    b2:e5:13:4f:8f:0e:53:5f:7c:a3:51:14:94:67:51:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2F:F3:68:B1:5E:E1:44:D5:EF:01:CB:B4:AC:BD:71:78:2D:10:CD
            X509v3 Authority Key Identifier:
                keyid:1A:F9:1D:CE:DF:DE:FD:CE:59:BD:B0:50:02:B1:CB:6C:52:F0:C5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d7d04c-3175-43ad-9e3d-10a4e537226e/1/Gvkdzt_e_c5ZvbBQArHLbFLwxdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0d:92:35:4e:0a:24:82:b7:f1:5c:80:55:59:dd:fc:23:d2:
         84:2b:0b:ad:07:19:c1:a8:94:ab:a6:a0:0c:19:6f:6e:2c:c4:
         73:7b:76:f8:58:54:9e:1f:ca:cd:5f:15:5e:e1:6d:90:76:d1:
         1e:a7:62:89:4c:43:94:89:c9:af:ca:28:29:79:17:1d:ed:a1:
         f8:2b:0f:98:bd:71:05:1a:c1:31:27:a9:1d:94:25:2f:a9:b8:
         db:9b:52:74:76:f0:4e:b7:dc:cd:49:d0:9d:63:28:a7:d8:7a:
         cd:ed:7f:02:33:6d:e2:66:4d:bd:d2:58:99:a9:5c:ea:88:1a:
         35:fe:69:b5:12:fd:bf:08:51:73:9c:e6:44:80:2f:96:a1:9b:
         f8:c3:87:72:1d:71:46:d0:da:22:7e:67:59:07:ff:74:96:40:
         9d:65:4e:31:cb:97:c6:23:90:e6:a3:16:24:42:fb:7c:70:ec:
         eb:dd:74:13:24:a8:66:ca:9f:00:d2:e1:d4:5a:d5:96:3f:e1:
         e5:34:d8:e0:ae:83:e6:52:c7:1d:7d:e6:4c:f0:1c:67:3f:17:
         fb:25:de:3c:18:57:b3:8c:e1:ce:df:6d:8b:81:08:05:f7:f3:
         14:e5:7d:b3:c3:bd:75:af:a4:33:48:2a:28:9f:49:d0:d5:e4:
         34:01:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----