Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
File:                     1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft (raw, json)
Hash identifier:          9sPM6BCkjhqlb/x+3m9KF2Tk/netvtY1woufGZw75BE=
Subject key identifier:   5B:12:15:64:B4:00:12:33:F4:FC:1D:B7:01:81:EF:71:02:B1:CB:0F
Authority key identifier: D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21
Certificate issuer:       /CN=d60ce3443860a7f70d43350776909a4810a48621
Certificate serial:       01962E997DAB142F2B9A0AE4D40274AF98FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft
Manifest number:          0A2F
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: 1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl (hash: L4kwEHIgmAPRZdmU0EQU5LPzQcXsncx9He7AyncXdPI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7d:ab:14:2f:2b:9a:0a:e4:d4:02:74:af:98:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60ce3443860a7f70d43350776909a4810a48621
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=5b121564b4001233f4fc1db70181ef7102b1cb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:e1:b0:e5:38:0f:92:9d:27:bb:e6:22:55:
                    03:87:66:7e:7f:e2:47:43:43:e6:4f:40:0c:71:57:
                    d6:e6:a1:7d:8a:57:68:c0:90:33:39:77:0d:f4:56:
                    51:d7:31:47:62:9e:11:6b:4a:68:82:7d:5f:d4:f6:
                    9e:c3:a0:cb:6c:4a:05:f0:3c:78:97:0c:da:7d:3b:
                    fd:74:e8:ad:4a:5c:b8:e1:59:4f:bd:92:de:38:b8:
                    bf:8f:1e:54:86:df:bf:4a:86:4c:27:21:4d:a0:d2:
                    5b:7e:49:c3:03:e6:40:24:36:46:2e:6b:c0:cd:75:
                    5e:0d:6c:25:64:08:ff:54:e9:e5:c5:45:cd:b6:35:
                    1c:92:3c:b7:95:3d:68:fa:96:16:d5:7d:2f:b4:2e:
                    e9:8f:a4:6c:70:ab:46:38:a9:22:86:fb:16:0c:08:
                    39:2e:cc:f8:31:16:7b:51:db:62:64:be:7f:ca:10:
                    63:8f:d3:4d:0f:4a:41:44:a3:db:ca:c5:af:f0:06:
                    16:5c:e3:88:be:db:91:9d:96:18:85:c0:0e:4c:ca:
                    d5:81:08:68:ab:25:e9:cd:01:6f:8e:d3:5e:ed:6b:
                    28:69:32:04:8b:26:c2:bd:f3:5f:26:41:e5:f6:e3:
                    47:d2:db:2a:a4:4f:cc:be:38:c1:70:1b:22:2a:88:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:12:15:64:B4:00:12:33:F4:FC:1D:B7:01:81:EF:71:02:B1:CB:0F
            X509v3 Authority Key Identifier:
                keyid:D6:0C:E3:44:38:60:A7:F7:0D:43:35:07:76:90:9A:48:10:A4:86:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gzjRDhgp_cNQzUHdpCaSBCkhiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0864c3-860b-41c0-9417-daffe52b9f0d/1/1gzjRDhgp_cNQzUHdpCaSBCkhiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:e5:71:74:1f:bd:46:40:79:75:31:90:6b:1a:4e:ce:a7:c7:
         bf:01:df:eb:4c:d8:7b:76:6c:66:a3:4c:d6:e8:ad:ec:92:05:
         7c:15:1c:2e:52:8f:eb:a3:37:0b:36:1d:93:c5:b0:be:fc:fb:
         40:d9:5f:e8:d6:b9:b2:d0:8a:8a:d8:45:a3:dc:ac:e4:44:a8:
         63:8b:e6:bb:6f:6a:3d:f3:af:bb:8e:d1:0f:37:d9:57:1f:9e:
         eb:59:3d:73:9b:f6:22:93:64:fc:09:5e:3f:9c:0c:02:c8:b2:
         dc:d3:d8:5a:c8:5c:e4:01:18:c5:bd:c8:c2:5e:12:85:38:fa:
         26:3e:ca:d8:1c:83:87:1a:99:1d:23:64:58:e3:44:8a:d0:42:
         5b:80:e9:90:85:62:d0:cd:c8:85:6d:a7:d7:41:81:15:65:8a:
         38:5b:a8:aa:25:bb:3a:68:99:41:09:42:d0:08:a7:b6:27:58:
         88:70:49:9e:b6:4f:b7:f0:8a:d0:45:7c:f1:a7:7c:fb:b4:20:
         87:46:50:15:1e:b3:0e:33:32:17:8d:06:54:40:62:02:00:e3:
         4b:46:2d:5a:c1:b0:48:9b:35:2f:11:e8:e6:d6:d4:44:53:26:
         08:60:14:2a:60:07:cb:77:0d:9d:ff:14:ad:2c:69:a5:6b:6b:
         04:16:77:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----