Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
File:                     G23wvAk_KYsENSLr1O3hl5MIGik.mft (raw, json)
Hash identifier:          14R8wzUsxYhRxW9V/cbiz9nKPh94hNmxcWstF2U1s9E=
Subject key identifier:   C3:2F:00:80:0A:88:0D:E3:EC:8D:7C:6A:68:08:57:75:1F:16:8C:CA
Authority key identifier: 1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29
Certificate issuer:       /CN=1b6df0bc093f298b043522ebd4ede19793081a29
Certificate serial:       01962E6185E65C870D443B66A75A2E015C69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: G23wvAk_KYsENSLr1O3hl5MIGik.crl (hash: aCI97yPoY+hLvskGq5GxPAe6NsBZno6naPamNy9nj/Q=)
                          2: YJHXZeNag-cu70_fJht-ZOpxnGk.roa (hash: 2m1tn0x6o3pfXUEVzS2q6AJtU601h1r6TeqXWLsErHU=)
                          3: lYiKNcoH_WfqIMOCgQv0TYn2rKE.roa (hash: jZwRIN2ogKpi/MzaP8NmIeUVW4yffrhHB5Fsd5XJEE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:85:e6:5c:87:0d:44:3b:66:a7:5a:2e:01:5c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6df0bc093f298b043522ebd4ede19793081a29
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=c32f00800a880de3ec8d7c6a680857751f168cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:72:f1:40:3b:03:fb:06:f8:40:ac:41:a2:
                    d2:fe:89:54:f1:9c:88:aa:54:ea:8c:5b:e3:7e:ed:
                    f1:89:45:82:42:cc:ce:2c:54:80:38:b8:9b:40:95:
                    96:08:b8:2a:0b:b7:55:2c:c9:f4:76:c0:75:08:50:
                    23:15:34:7a:a1:52:cd:45:63:51:60:dd:85:82:f6:
                    4d:4b:4c:77:eb:cb:cf:f4:b4:e9:d8:be:ab:30:f2:
                    d5:c0:a5:51:f0:a8:eb:21:67:34:14:83:0a:32:b5:
                    d3:1b:48:65:2c:d0:9b:49:22:ee:62:98:80:e0:50:
                    b7:00:85:7d:f1:b9:c0:1c:20:03:82:93:88:b6:46:
                    6d:8f:b7:e7:f0:84:74:0d:b2:9a:12:af:ae:06:1f:
                    63:e9:a6:c7:a2:20:a7:4d:e2:a1:21:71:e7:1d:c6:
                    5b:90:82:13:fa:c9:67:0b:5e:b3:f2:72:01:18:7d:
                    c7:1c:ad:3f:f7:07:14:33:ca:42:54:88:23:6d:f2:
                    dc:f3:4d:44:13:04:1c:ca:15:66:cf:14:58:a5:5b:
                    54:ef:af:e3:d7:f8:95:58:fe:da:d9:eb:e8:bb:05:
                    27:0f:7d:43:e9:db:25:32:1a:e4:14:1b:10:c6:5a:
                    cb:f1:46:d6:41:91:e8:c9:c6:bb:6a:ad:d6:60:81:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2F:00:80:0A:88:0D:E3:EC:8D:7C:6A:68:08:57:75:1F:16:8C:CA
            X509v3 Authority Key Identifier:
                keyid:1B:6D:F0:BC:09:3F:29:8B:04:35:22:EB:D4:ED:E1:97:93:08:1A:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G23wvAk_KYsENSLr1O3hl5MIGik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/83cf01-6cca-48d1-9cbf-5ac6fdfdc0cc/1/G23wvAk_KYsENSLr1O3hl5MIGik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:33:01:1c:57:68:50:88:b5:fc:81:b1:b9:94:42:7d:24:c6:
         fd:ac:05:a8:95:35:24:28:69:4a:89:43:42:dd:f0:73:a5:73:
         54:40:c8:18:a7:e3:ba:77:62:db:b9:85:45:1a:25:a6:20:14:
         70:79:de:67:92:4c:50:2b:87:15:76:ce:c2:95:00:99:23:f1:
         8a:a7:98:82:2a:7b:7b:44:07:25:57:b1:eb:0d:01:ef:2d:35:
         f1:4d:5b:cc:54:3f:78:2e:0e:12:05:fa:81:9e:20:07:29:ae:
         91:48:f3:27:58:08:e8:c0:a7:c3:71:08:62:3a:32:f2:a3:0c:
         e1:e3:d6:30:b2:97:55:82:0d:b3:50:a9:99:a9:0d:5d:31:0c:
         80:2f:1a:16:7f:bb:c1:b4:6e:64:90:c7:e3:ce:fa:29:5e:7f:
         a0:e2:9c:04:7d:b0:07:74:62:b9:11:d4:41:e6:f9:ae:c7:95:
         76:05:90:fd:61:22:ee:8a:6d:f9:98:55:b3:28:9e:6e:ba:97:
         d9:a5:2f:f1:c2:07:15:79:44:d1:07:11:a8:77:30:86:77:3a:
         47:62:07:3d:e0:fd:55:c5:df:23:9b:f6:fa:83:fd:b9:a1:ac:
         68:c6:25:28:a4:ff:3d:27:1b:58:98:bd:0c:1b:e2:ee:86:1a:
         fb:ce:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----