Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File:                     GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier:          Cm+/or+YUm89Bg/cvevjKt/C7FnbXK1Qm81dNi3kdG0=
Subject key identifier:   0F:F3:CB:14:35:3D:4A:39:89:AF:02:63:68:E6:74:2D:A2:37:4E:00
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer:       /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial:       01962E61E981B2A890158A527D6B72EF8B87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number:          121F
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: BLFC-FjMHL4wmy7DW2Qg0ynvAks.roa (hash: mla/ifgwtBL/TTlFYXL1kHRIJy6aKWlH3+ijLwE0y4c=)
                          2: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: gqNsqxOIkcb7DUbCYbFWlFOZC3DkDEV0wZ//W7GYn5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:81:b2:a8:90:15:8a:52:7d:6b:72:ef:8b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=0ff3cb14353d4a3989af026368e6742da2374e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2a:3e:7a:ce:ba:64:0d:a5:7a:71:74:40:01:
                    30:4e:21:6c:17:3a:b4:c8:9b:ce:55:e3:56:50:d3:
                    7f:c6:6d:e7:2e:60:2b:f6:0f:bd:4d:43:b8:be:3e:
                    d3:54:db:02:00:5d:63:d8:ed:9c:ff:b2:c0:4b:ca:
                    a6:84:cc:6f:ae:16:eb:45:ac:a3:dd:3b:59:72:4c:
                    c8:f5:e3:37:e1:06:a5:d1:85:4a:d6:1a:8a:7b:f6:
                    04:c6:6f:e0:d1:62:10:68:7a:90:2d:37:6b:c0:ec:
                    c6:ca:34:50:d3:78:c2:6b:da:87:eb:e4:9a:c5:2e:
                    b9:05:fa:fe:2a:05:b1:62:e4:c8:9e:86:b8:d4:08:
                    22:48:01:ac:a7:9b:00:a8:9c:05:c1:f6:db:0b:bf:
                    f9:a9:82:a8:04:af:ef:21:05:92:5c:39:e6:dd:d1:
                    3d:e9:d4:30:70:95:23:c2:69:ed:b5:0b:be:1f:2a:
                    d5:b1:f1:52:55:53:9b:37:8c:ef:a4:f0:dd:e5:ca:
                    97:ac:26:9f:06:bd:8b:8e:1e:ff:24:7c:2d:bf:e4:
                    f2:8f:82:6d:51:d9:84:ae:3c:53:21:4e:3e:12:2d:
                    b1:02:42:76:da:27:d5:32:a3:6a:1c:e9:58:57:22:
                    fa:77:3f:f7:79:b7:da:25:3a:0d:5b:eb:63:40:97:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F3:CB:14:35:3D:4A:39:89:AF:02:63:68:E6:74:2D:A2:37:4E:00
            X509v3 Authority Key Identifier:
                keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:be:b7:d0:f7:4f:dd:a0:7c:8b:cc:79:cf:64:5d:6e:9e:c6:
         58:91:49:66:c0:7d:08:8f:29:f1:32:f9:77:73:a3:be:11:e5:
         be:6b:9f:bf:8c:bd:0a:67:c2:b0:3a:29:bf:15:e8:6f:36:e3:
         b6:f3:ee:33:88:ee:b4:65:ab:59:f8:df:a3:d7:b9:3d:91:36:
         e5:24:0b:3c:fa:72:e7:a2:79:3e:13:6c:fd:22:c7:fc:e5:7d:
         8b:8a:06:cf:02:cf:cd:d9:34:86:d5:5f:24:8b:cc:b7:a4:35:
         4d:84:e3:49:98:e1:19:1d:71:b4:da:ec:74:5b:0b:66:bb:2b:
         33:df:32:62:bc:c6:aa:cb:a9:ca:22:63:dc:af:ae:4d:fe:89:
         dc:eb:3b:1a:2e:fa:ac:75:c3:a9:cd:8f:28:ce:2b:fb:67:90:
         c9:3a:81:e4:91:b1:51:19:b0:34:1b:c5:0c:51:68:fe:25:d1:
         e3:4f:a5:ee:28:7a:33:0f:50:44:83:c4:39:a6:18:4d:09:21:
         55:41:06:50:5c:86:51:f5:78:28:6c:37:85:66:ad:9b:f4:d7:
         ac:2e:be:18:53:a9:75:e4:5c:1d:c1:eb:69:d8:0e:16:21:9f:
         b7:0b:83:b8:f2:e8:01:fa:0d:f9:01:aa:03:ad:99:ee:fc:98:
         89:f8:d5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----