Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File:                     glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier:          XFG4xHdW4Pw78hOsNDrgufxlEeMezN9ag6G+wc6PdpA=
Subject key identifier:   81:EE:46:9F:CE:BF:49:4A:1B:3A:4D:2D:CF:BD:EC:FC:79:EC:B8:C7
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer:       /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial:       01962E2B0EE4BB639D26E9420F8278F47293
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number:          03B0
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: LiSyp7uaQ5rkKchPh9M+PJTANRou9JPlz/bkH1/f8/g=)
                          2: tst0w9cbQNBfGvPhKg-7OP38PnA.roa (hash: NVrr4ZTIkz7EDzRzMrcUZG5YrSaOVHFht37jEZIQKGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0e:e4:bb:63:9d:26:e9:42:0f:82:78:f4:72:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=81ee469fcebf494a1b3a4d2dcfbdecfc79ecb8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:0f:bb:1c:1c:78:4a:d3:e2:59:22:e1:62:
                    6d:57:dd:5b:eb:4e:d5:46:87:8d:05:46:20:21:9d:
                    4f:78:73:ae:79:8a:8e:57:8c:33:cf:42:47:c0:9d:
                    12:24:a8:e9:00:bc:b7:f4:1a:e0:b8:69:30:8c:90:
                    3a:39:39:cd:59:a4:de:0f:a4:7c:f2:38:3b:dc:5d:
                    f5:1e:b2:f8:ea:41:dc:16:1b:0e:6e:5c:9d:b6:c2:
                    7e:08:0e:e6:42:41:bb:5a:17:68:29:d6:14:91:66:
                    fe:a1:7c:41:f1:1b:03:b0:c0:c8:14:e1:4c:6c:19:
                    2a:51:4d:08:b4:90:a1:8d:1b:79:68:d4:58:c6:64:
                    3d:bd:a7:40:46:4b:ea:d8:dd:43:a6:c9:f9:bb:07:
                    b2:7e:60:ca:34:6b:d3:b4:ac:b6:c4:a7:b8:30:01:
                    6a:aa:46:a7:42:20:88:8f:14:97:8a:fc:68:58:34:
                    fd:44:e6:ae:d9:8a:6c:18:0c:64:5c:9f:68:04:bb:
                    67:dd:a0:dd:43:98:5b:ea:6e:c5:c9:77:bd:14:db:
                    a9:0f:e4:25:a0:9d:1b:8e:ac:ef:0f:39:c0:ea:d7:
                    05:eb:83:c7:6c:e3:79:db:3c:80:bf:46:fd:d6:61:
                    e6:0b:33:1a:88:c9:23:58:51:3d:c6:9f:8b:30:a7:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EE:46:9F:CE:BF:49:4A:1B:3A:4D:2D:CF:BD:EC:FC:79:EC:B8:C7
            X509v3 Authority Key Identifier:
                keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:01:c2:eb:3a:c5:97:b3:77:50:25:92:d4:d3:66:40:9c:ab:
         5c:7e:ba:a0:6d:4e:e1:d5:bb:cc:01:9d:cb:72:cf:26:cd:4e:
         d1:70:75:b4:ad:b3:dc:3c:a5:e5:46:09:21:93:92:dd:0b:83:
         8c:cb:c8:3d:1e:7c:98:63:55:6f:db:2e:57:0d:84:02:15:fd:
         50:e8:b0:a7:a8:3b:cc:5b:31:7e:2c:b4:08:78:b6:bd:a7:eb:
         fa:8d:20:f6:5f:fa:c3:b3:65:3e:6c:00:19:65:b7:00:64:93:
         e0:c0:d2:c9:18:b2:39:45:26:0b:16:5c:d7:e3:6e:91:40:89:
         0a:03:6b:c7:de:67:05:28:22:f4:f6:43:5e:66:2a:82:2c:92:
         29:a5:cc:78:b8:56:1e:8a:33:79:8e:5a:eb:ef:b9:f3:a1:72:
         6d:3f:f9:c4:28:59:80:27:48:0d:e1:a3:46:b2:95:d5:fd:bc:
         c1:f1:d5:aa:db:71:a6:4c:fb:df:cf:30:58:54:a0:4b:77:01:
         6a:0c:70:a6:c0:63:d5:94:1d:9f:f1:f2:1f:91:92:fa:db:05:
         30:ba:b8:ca:74:d6:bb:5b:6d:8f:a7:fa:e8:de:90:3f:ab:42:
         ae:40:b9:29:fc:75:0e:ca:46:8b:a3:af:38:a4:35:4c:32:b3:
         5f:6d:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----