Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
File:                     GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft (raw, json)
Hash identifier:          01/gc8ZLxio7JgsnOu0swc9qt+CxSufzmfMZmSgdVy8=
Subject key identifier:   B8:B6:47:02:9D:DC:D3:5F:81:E1:1B:83:4F:CC:73:D8:1C:2C:40:E2
Authority key identifier: 19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74
Certificate issuer:       /CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
Certificate serial:       01962F3DA91AA3374EB42C238EAEECF54942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft
Manifest number:          0995
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl (hash: 2JYSuUWNWBVLNpsAa94fAn4gpMOu71eukGIti1M7xPk=)
                          2: ddpb_wuKnMlAr7zHGIm8AB82iUA.roa (hash: B1F9vY9BeWV/mZWmkHXRYrhz+CLltzOE+dJil3lfRag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a9:1a:a3:37:4e:b4:2c:23:8e:ae:ec:f5:49:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c1bb3fb136abf407a0a51a4a0765174ffdf474
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=b8b647029ddcd35f81e11b834fcc73d81c2c40e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:50:6b:ad:aa:b2:f3:56:c5:2d:a8:1e:ed:2b:
                    fd:2d:f7:2b:19:c8:65:68:1f:2b:7b:bb:57:7d:83:
                    d0:9f:74:95:f6:3b:f2:ab:12:4e:25:3e:79:86:26:
                    36:93:57:8b:38:e5:e9:65:7f:70:74:4f:d9:8e:c1:
                    0b:c8:0f:00:1f:4f:67:6a:44:e4:c7:53:59:a6:3a:
                    b1:32:74:37:eb:fa:43:9b:0d:69:2e:6f:c6:b5:4c:
                    a1:53:aa:3a:75:05:78:d2:4d:c6:e5:bb:b3:38:48:
                    31:05:f7:7c:40:50:d6:48:e5:9a:3b:be:af:b1:2a:
                    45:6d:ba:08:7e:d1:c9:1b:d2:d4:1b:0c:20:e9:e8:
                    9a:ec:b8:1e:ea:54:6f:8f:3b:76:b9:51:b5:aa:fc:
                    68:0c:66:a8:13:82:b3:a6:c8:6d:d1:f0:a1:98:ba:
                    f3:ec:ba:39:2e:94:a7:2a:97:f5:07:ce:17:99:6c:
                    60:59:4f:c8:d9:f0:b1:f9:1d:6c:66:26:2a:6b:f8:
                    50:ba:86:37:fa:90:c8:9e:1f:30:43:50:1c:48:81:
                    54:7b:f0:e1:19:46:13:c7:8d:7b:d0:13:50:0b:5d:
                    91:29:fc:be:d3:66:27:a8:13:36:29:e3:ff:df:42:
                    e3:88:f6:63:13:2b:16:b0:5c:cf:89:d9:b7:57:1d:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B6:47:02:9D:DC:D3:5F:81:E1:1B:83:4F:CC:73:D8:1C:2C:40:E2
            X509v3 Authority Key Identifier:
                keyid:19:C1:BB:3F:B1:36:AB:F4:07:A0:A5:1A:4A:07:65:17:4F:FD:F4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcG7P7E2q_QHoKUaSgdlF0_99HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b582c1-f9c2-4c58-a201-dad18d5b2a3c/1/GcG7P7E2q_QHoKUaSgdlF0_99HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9d:6c:54:6f:67:57:ae:17:ac:41:d6:fe:04:b6:4c:3f:f1:
         a5:27:91:fd:58:8e:df:07:9e:71:b3:89:39:49:7e:4f:67:35:
         c2:d4:27:c1:1c:ee:e0:4d:f2:e3:82:71:fc:95:3a:94:ab:46:
         b8:68:41:ba:07:6f:14:98:58:98:6b:76:2a:04:98:87:2e:97:
         3c:70:35:34:53:86:f4:7e:5b:11:26:26:fd:6a:9d:80:f3:2d:
         14:28:79:cb:e2:d3:f8:3c:ea:66:cb:35:3d:24:29:81:23:29:
         81:b4:44:94:e5:3e:31:05:82:86:52:d4:87:21:09:c2:5e:98:
         3b:8a:9e:82:db:90:7b:4d:10:e9:42:4a:19:b7:86:ec:7b:f1:
         68:d4:0c:ba:8c:6c:1c:42:01:ba:26:45:9e:4b:c6:92:90:71:
         63:c3:35:52:a1:4a:2e:43:1d:4d:fe:7b:c9:9a:43:c9:5f:9e:
         99:c0:b1:c2:f7:40:f7:91:eb:70:42:0c:00:3e:fe:aa:b6:9e:
         6c:0d:3a:c0:5a:a2:e6:1f:3c:50:4a:d1:29:9f:ef:2e:fb:45:
         95:db:8b:87:75:83:4b:23:59:74:f0:8a:a8:7b:7f:a4:6d:46:
         e2:56:25:57:b2:c1:c1:7f:3b:20:c0:1f:64:e8:c1:96:d0:0b:
         dd:58:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----