Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
File:                     G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft (raw, json)
Hash identifier:          Ln+F71eqoymHDB6sMWy8BjVcLQ7V5LEvrDH97GpB0AE=
Subject key identifier:   67:74:E6:EB:51:29:8E:70:14:0E:0D:A6:AA:6B:C0:A4:F0:7C:02:A1
Authority key identifier: 1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6
Certificate issuer:       /CN=1b934577cb49d8d231b74c550726f3387e026cf6
Certificate serial:       01962E99080198CA2351AD9073F476B6E946
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:43 +0000
Files and hashes:         1: G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl (hash: Z4G7z6pDpWHZlGcup6gPIGMBscc9zDw4tEIkBFU3ehU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:08:01:98:ca:23:51:ad:90:73:f4:76:b6:e9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b934577cb49d8d231b74c550726f3387e026cf6
        Validity
            Not Before: Apr 13 10:01:43 2025 GMT
            Not After : Apr 14 10:01:43 2025 GMT
        Subject: CN=6774e6eb51298e70140e0da6aa6bc0a4f07c02a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:d2:67:6f:71:9a:0f:9f:a1:e9:d2:17:8a:
                    a3:4c:44:97:24:61:1c:32:05:d0:85:af:ea:84:dc:
                    c6:d0:cb:64:60:67:a5:4c:73:05:f6:6e:d9:28:d3:
                    0e:56:d4:93:af:50:eb:0a:b1:e7:98:6e:21:33:47:
                    e2:03:91:89:b1:6d:4a:33:b6:4e:07:08:f5:7f:7a:
                    88:e4:c9:c7:6b:72:c5:6e:9e:ac:38:ce:54:f8:d4:
                    47:7a:dc:dc:e1:5f:2b:34:49:15:cd:31:78:e0:c7:
                    2f:25:34:e1:ba:4c:df:b0:43:92:c1:96:38:56:a0:
                    b5:13:ce:09:21:93:b8:83:ee:76:20:2a:bc:1f:af:
                    bc:ab:92:64:35:9c:92:3b:be:8d:2a:84:2a:47:56:
                    86:2e:c3:73:4e:0c:47:88:68:13:90:5c:19:9f:c7:
                    67:d1:0f:fc:6d:40:74:97:fd:e4:39:9f:da:a0:38:
                    d8:a4:52:69:3a:6e:a7:ae:92:fc:f6:96:63:ab:a9:
                    08:b6:60:ca:78:98:c7:b0:1c:3b:35:69:c5:d7:f1:
                    4d:5f:80:76:c0:ca:49:bf:88:d9:4a:f2:d6:2c:0f:
                    68:a5:23:2c:7e:89:d0:59:48:0e:d8:f6:ed:9d:ed:
                    06:35:a8:0a:e4:ba:8b:27:6e:b5:4a:c8:70:55:2e:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:74:E6:EB:51:29:8E:70:14:0E:0D:A6:AA:6B:C0:A4:F0:7C:02:A1
            X509v3 Authority Key Identifier:
                keyid:1B:93:45:77:CB:49:D8:D2:31:B7:4C:55:07:26:F3:38:7E:02:6C:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5NFd8tJ2NIxt0xVBybzOH4CbPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/dd533d-2855-4793-965a-0e29858c637a/1/G5NFd8tJ2NIxt0xVBybzOH4CbPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:85:b5:a2:15:07:63:6a:5e:4e:74:40:3f:91:ff:73:69:ca:
         17:5b:79:e0:1c:9f:b8:a4:54:b4:73:e2:85:07:d9:17:4e:0b:
         3b:2d:2e:ed:2f:ef:31:13:a9:56:2c:b0:90:13:ec:bb:50:0f:
         f6:97:f2:fb:25:61:16:9d:e2:2d:87:c7:65:b5:1e:06:05:c1:
         30:2c:c9:4a:03:b3:1e:fb:9c:21:77:1a:7c:20:a7:e4:2f:9a:
         a2:0f:ef:86:15:49:cb:1c:b7:22:a8:f7:42:24:cd:76:a7:35:
         2a:df:68:c3:0e:ea:3c:cd:8c:2e:9a:3d:c6:3e:93:c6:51:3a:
         04:b7:f6:29:c2:e3:15:db:e8:61:c0:27:ac:63:0b:55:36:b5:
         7a:98:f9:a1:8d:b5:35:19:bd:1d:ae:5e:99:f2:49:73:90:ab:
         bf:50:85:cc:1b:9d:53:7b:b7:a0:7a:85:1d:da:ea:fb:42:55:
         a9:cb:d5:cd:dd:9f:9c:79:ec:a2:70:37:2d:b3:a0:1f:9d:7a:
         62:08:ee:93:67:bc:02:42:94:00:ba:8c:11:1f:6f:98:93:b9:
         c6:8f:cb:ce:91:d2:32:a5:eb:c5:f6:a0:f6:d6:fe:a0:f2:80:
         af:56:57:96:db:40:b8:0b:d7:59:09:45:f4:d5:37:5f:30:ec:
         4e:fd:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----