Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
File:                     GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json)
Hash identifier:          GYlGEsbFYkIpCSEiqxp46vng1q7Davv3vHdbPG5wnNU=
Subject key identifier:   50:F0:7E:FB:21:33:80:D7:54:4A:58:60:F7:D3:77:85:66:67:07:59
Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
Certificate issuer:       /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Certificate serial:       01962F749FD27D721337037F087EE82E3155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: 4Y0Jy6XWmfX+8Bhgg2mm31OIv18Oce2xIfLfxGRP3bY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9f:d2:7d:72:13:37:03:7f:08:7e:e8:2e:31:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=50f07efb213380d7544a5860f7d3778566670759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:12:b4:6a:4b:61:7a:84:a2:46:e5:d8:96:
                    a0:c6:98:93:af:81:b4:ce:33:55:2d:08:39:77:2b:
                    23:3d:c4:f0:f5:e4:69:f3:05:65:07:35:5e:31:6a:
                    b7:b2:7d:17:42:be:22:77:e7:7f:47:7a:8b:e3:e6:
                    81:31:d8:83:9b:f8:dd:55:57:24:75:27:1d:9d:15:
                    39:eb:a9:8a:c6:ad:4c:92:0e:30:16:ae:2d:1a:14:
                    95:96:59:d0:f7:c6:c3:11:9b:be:2d:23:e0:fa:95:
                    ac:64:1e:ba:6f:c1:bf:b2:28:57:c4:ab:b4:79:11:
                    7b:89:e6:2a:6a:3f:74:2b:35:2a:43:27:e9:e5:ba:
                    a0:37:de:9f:c6:32:52:1a:41:61:b6:11:f2:21:97:
                    3b:3b:2b:3c:da:d0:ab:79:da:d9:5d:fa:42:38:79:
                    4c:b1:89:f1:6e:5f:36:d9:a3:85:fc:ef:4b:94:b5:
                    d2:48:5d:b2:62:fc:a0:eb:01:33:65:bc:dc:de:71:
                    9d:f6:c9:3d:00:42:a0:f6:16:14:38:f9:72:5a:76:
                    38:9a:af:56:74:50:5a:f9:01:cb:fb:d2:55:83:a7:
                    a6:5c:10:f1:73:30:f8:d5:e8:1f:f6:c8:53:33:0b:
                    fb:46:44:29:ba:fb:5f:93:e2:02:1e:12:44:94:a3:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F0:7E:FB:21:33:80:D7:54:4A:58:60:F7:D3:77:85:66:67:07:59
            X509v3 Authority Key Identifier:
                keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:5f:96:d7:cb:95:94:a6:21:7e:fa:a9:1f:44:4f:25:de:0b:
         dc:59:0e:5e:f4:1e:b3:ce:a0:12:21:10:49:8d:23:eb:61:96:
         5c:82:49:56:18:df:23:77:ee:f9:e3:8b:f0:a4:80:d7:db:ae:
         dd:50:2c:83:45:46:88:72:57:28:c3:34:98:c9:37:55:66:be:
         8f:2f:ce:72:48:c2:48:e2:f3:19:04:54:c8:a4:13:d5:28:23:
         99:24:34:d3:79:d4:92:c7:2c:72:ca:c4:c2:c8:52:b3:2e:06:
         49:06:2b:86:b3:0f:e1:cd:f1:39:16:c1:69:fd:55:a8:75:4e:
         c5:85:3b:d0:22:9d:35:88:b8:a3:2b:05:cf:07:8b:f6:f0:f2:
         47:03:04:30:e2:b1:96:4d:cf:4c:5a:88:a4:0f:7d:22:be:a5:
         f6:f0:56:c1:3f:15:f1:fb:25:f2:06:6c:4c:40:ef:8b:36:f2:
         a1:f4:ae:73:8b:5a:12:07:f7:39:75:cb:3f:b1:4d:cd:8f:1e:
         eb:e6:4e:0c:9a:69:31:71:31:5c:f4:d9:73:92:63:f1:03:ad:
         dd:26:da:a5:6f:4e:51:86:3c:70:b3:60:71:d8:49:58:64:9d:
         a5:47:30:c9:d2:14:70:84:04:ca:c2:be:dc:a9:c4:aa:8f:ce:
         f4:dd:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----