Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
File:                     GCDxMTkWE4Tq8ToffbYOLGikOVY.mft (raw, json)
Hash identifier:          TCoSu+yUjI8DxCN2aywcIOaNui0HrR7HQ/bC5UyclcM=
Subject key identifier:   B3:14:A7:0A:06:47:C9:F6:54:4D:B3:04:CE:A1:31:05:C6:DC:BC:82
Authority key identifier: 18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56
Certificate issuer:       /CN=1820f13139161384eaf13a1f7db60e2c68a43956
Certificate serial:       01962E618849F53E35F1312ECA01FFB5C4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 09:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:05 +0000
Files and hashes:         1: 5PJP9sz2Qj0R_qvQUI34qPi3A1Y.roa (hash: pR71ZCmNXZbyYfyvw8Yav6FbU05FRtn+pbwLEcOTYyA=)
                          2: GCDxMTkWE4Tq8ToffbYOLGikOVY.crl (hash: G9J5tOjAQ/7LC5wyvpXVBlJTMJsqutmbHfjkQG7XXHc=)
                          3: gTxU19v1FIjd2W2ByIs00b9py5k.roa (hash: dE41WcjB8n3G/VzRfrS7Jc6uMbM/f0DRebeJS3Hdcos=)
                          4: k-Hv5Avloy-7_yTlO8SDAhMoc5M.roa (hash: iZ+5NIkdY2s7fnzuUEQnr4gkvl0QbM0xPICQPGddznM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:88:49:f5:3e:35:f1:31:2e:ca:01:ff:b5:c4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1820f13139161384eaf13a1f7db60e2c68a43956
        Validity
            Not Before: Apr 13 09:01:05 2025 GMT
            Not After : Apr 14 09:01:05 2025 GMT
        Subject: CN=b314a70a0647c9f6544db304cea13105c6dcbc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:4d:42:9e:30:2a:57:5e:b4:d7:4f:9f:b7:
                    d5:bb:bf:9b:1a:bf:4c:ad:f8:bb:63:d7:d6:8c:78:
                    ba:bf:76:b8:99:d8:33:fb:a9:72:1b:5d:7c:9b:e2:
                    35:d6:af:cd:a9:d8:96:97:f6:c8:a1:07:e9:b6:d0:
                    fc:e0:60:c3:90:1f:76:97:bc:30:f4:98:cb:f5:40:
                    aa:f6:75:32:88:e3:50:fd:09:58:43:b6:f0:34:75:
                    e4:55:45:8a:b5:43:02:80:8a:19:91:64:c8:86:68:
                    11:7f:d9:c8:68:58:22:12:88:55:85:a1:41:06:e8:
                    9b:c6:d2:3f:69:15:90:fe:54:e8:60:1c:c6:1b:6a:
                    45:19:e2:86:4b:0e:a3:ae:f4:a5:9b:a3:f3:31:4f:
                    d4:77:e6:f8:ac:25:d7:94:aa:a0:e0:c7:19:75:ac:
                    ec:da:af:31:a1:c2:fe:8a:b3:3f:00:59:ae:31:69:
                    f8:77:0f:29:e9:dd:5c:fd:60:c8:ca:ae:74:74:bc:
                    3f:5b:d7:81:16:10:9d:70:1f:dc:4a:bb:c2:17:12:
                    1a:d6:43:e4:10:f5:12:0a:da:39:30:dd:16:ca:14:
                    ab:29:c3:69:35:32:8b:6f:e7:ab:72:fd:de:23:51:
                    37:ba:33:0d:1f:67:da:0a:a4:fe:a9:0e:66:1f:fc:
                    a2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:14:A7:0A:06:47:C9:F6:54:4D:B3:04:CE:A1:31:05:C6:DC:BC:82
            X509v3 Authority Key Identifier:
                keyid:18:20:F1:31:39:16:13:84:EA:F1:3A:1F:7D:B6:0E:2C:68:A4:39:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCDxMTkWE4Tq8ToffbYOLGikOVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/60dc0f-0aed-4bee-90b7-367dc385261a/1/GCDxMTkWE4Tq8ToffbYOLGikOVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:e6:64:9a:aa:f1:9b:39:e1:52:78:cb:c7:1e:14:5a:f3:1a:
         90:7a:4d:02:b8:74:e7:31:0e:01:a6:9a:97:47:e1:0a:03:f5:
         f0:95:87:b3:9b:97:df:dd:22:22:f8:42:50:79:88:96:04:eb:
         1e:0d:68:99:a6:e3:cf:d2:8c:83:51:d9:ea:7d:ed:7c:43:cf:
         5e:55:01:8b:34:1e:1a:e1:7b:c2:7d:f2:95:cd:a5:9f:63:03:
         91:f8:38:a4:e4:ff:c5:25:3b:04:27:b3:85:16:55:45:5c:bc:
         4c:60:1d:cb:af:da:d9:38:9f:8e:6b:7e:da:a6:f6:6a:a4:c2:
         7a:8f:a7:27:bc:45:e6:1d:9a:78:30:5e:91:9e:d8:0b:6c:99:
         43:67:d3:3e:69:62:75:0f:ab:6a:9c:6c:39:42:4e:f2:11:ec:
         51:a9:3a:f4:2b:25:55:68:e0:18:57:b1:1f:46:39:11:51:6e:
         32:a0:ac:a3:b6:c3:f4:cb:17:31:63:34:f4:9a:9b:1e:bc:0c:
         69:11:4b:08:cf:24:a2:bb:5e:b8:14:16:b7:ef:b6:35:4e:69:
         ca:6f:bb:29:c4:a8:0b:9b:85:60:f6:cd:28:07:c3:fa:66:4b:
         74:1c:56:7a:50:e1:46:b1:a5:82:6b:9d:d0:d3:a2:01:b3:db:
         07:7a:8e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----