Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.mft
File:                     gErnaxl1-0qMurIgcYnu0gIy_18.mft (raw, json)
Hash identifier:          7nYLgrDtfuYRDe7piHveXa8fkHe5jR9bxaNhhHp54+A=
Subject key identifier:   22:B7:50:4D:51:33:03:A0:FD:72:DE:21:DF:51:74:E3:0B:39:3E:31
Authority key identifier: 80:4A:E7:6B:19:75:FB:4A:8C:BA:B2:20:71:89:EE:D2:02:32:FF:5F
Certificate issuer:       /CN=804ae76b1975fb4a8cbab2207189eed20232ff5f
Certificate serial:       01962F06B58C45601A9EC09C36490AAB87E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gErnaxl1-0qMurIgcYnu0gIy_18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.mft
Manifest number:          032B
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: gErnaxl1-0qMurIgcYnu0gIy_18.crl (hash: Zg1ra2YDDlnk+MO5eB0yNYpBq9tjJ0wUQ2AlGjJOIug=)
                          2: v3oDa-WSUoJp1kuV1a6fLuRGHQ0.roa (hash: Y4h5O4hQh1m1aEWNf7XMnqa6q5Txb+8pJ/1S7VkKt/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b5:8c:45:60:1a:9e:c0:9c:36:49:0a:ab:87:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804ae76b1975fb4a8cbab2207189eed20232ff5f
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=22b7504d513303a0fd72de21df5174e30b393e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:88:56:60:0d:c0:a1:40:3c:27:76:1c:36:0b:
                    00:c0:0b:9d:00:23:4f:f2:ed:e2:b0:9a:a9:1a:a2:
                    5a:a0:44:1b:c9:bc:98:f5:81:38:e8:6b:ed:9b:c7:
                    41:dc:b6:32:a2:a3:58:de:ce:48:f6:0f:b3:09:e1:
                    87:14:51:88:47:0e:2c:1f:9e:0a:fe:35:71:9c:96:
                    2f:49:25:35:61:93:86:a2:fe:e7:f1:ae:93:79:cd:
                    8e:2d:70:0d:e7:57:03:7d:5b:7f:b0:4a:c6:0e:37:
                    d7:2e:35:b8:65:11:e2:53:c3:4f:1d:4b:f2:ea:4e:
                    c5:d2:cc:9c:ec:3b:5c:3c:35:58:ad:5f:36:d8:e3:
                    79:01:b3:df:12:49:cb:87:17:fa:03:de:cf:a8:06:
                    bf:49:32:91:3f:75:0b:ea:d1:7c:a1:a1:1a:37:7b:
                    6d:a9:d0:9f:98:69:e7:e7:ef:1c:69:f9:1f:8f:e7:
                    46:c5:90:3f:6a:54:0e:5b:1b:7f:7c:cd:0f:3c:21:
                    b8:3a:6e:0a:6b:f7:6a:f7:ef:12:67:d9:eb:95:80:
                    0a:87:49:2b:da:fb:bc:e6:ed:46:ca:b4:01:30:99:
                    1f:88:35:f8:7c:de:aa:01:b0:2c:9d:b6:ae:5f:79:
                    4f:35:6f:c9:a7:83:08:4f:68:e6:1d:5c:23:ef:1d:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B7:50:4D:51:33:03:A0:FD:72:DE:21:DF:51:74:E3:0B:39:3E:31
            X509v3 Authority Key Identifier:
                keyid:80:4A:E7:6B:19:75:FB:4A:8C:BA:B2:20:71:89:EE:D2:02:32:FF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gErnaxl1-0qMurIgcYnu0gIy_18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/680992-38da-498f-a349-94227293c88e/1/gErnaxl1-0qMurIgcYnu0gIy_18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c0:07:84:57:74:07:2d:88:ba:6d:82:f7:33:72:06:49:09:
         3c:39:28:8d:5b:35:99:de:a4:02:f9:c1:d3:0d:5b:51:ba:65:
         a2:d5:18:6f:23:39:84:2e:92:41:b2:d2:90:dd:40:4b:c6:11:
         14:c9:c3:86:af:22:98:ba:06:1c:23:ef:55:98:5b:ba:f3:f5:
         b0:ae:7c:b6:95:9c:e1:aa:60:8c:e9:e7:b3:b5:c6:52:1a:41:
         2f:47:4d:2f:6f:d6:f8:b6:70:a0:53:e2:18:20:3d:76:8c:9b:
         3b:1d:c7:79:2c:ef:52:ef:24:4c:74:b2:77:96:7a:a7:96:4a:
         24:0c:8f:20:62:8e:de:c4:3d:9c:75:d9:4e:c6:93:1c:f3:ec:
         26:a5:b4:51:6d:ac:8a:2e:d3:48:dc:8b:78:d7:e8:06:a4:be:
         0e:42:5f:c3:b2:81:4a:4f:7c:2d:fa:bd:a6:cf:68:67:ad:cd:
         a0:85:60:c9:41:bb:94:02:31:5f:07:c6:18:ec:15:89:a7:c1:
         93:1e:b4:ff:3f:75:4e:6b:9e:04:43:cd:56:4e:f5:27:0d:39:
         ce:f4:fa:1c:d8:dd:f2:3c:a0:04:c1:b9:65:04:d1:8b:2a:ad:
         3e:57:6b:64:8d:7f:06:39:b3:95:8b:53:19:5e:dc:7b:57:ac:
         5e:51:80:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----