Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File:                     GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier:          QSnh64gtx2rr4d/4iX05wZlhabp+ltva9xazeegVx+Q=
Subject key identifier:   D2:AA:41:21:25:5B:52:50:D4:0E:59:E6:25:91:DE:5F:65:C0:CA:EC
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer:       /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial:       01962F3D43D90E4674F3D8ACFE9A4268668B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number:          8A
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: cNQZGM3y79ulA7/whoFoKQoTEZrRGf015AfmbkURg1Q=)
                          2: rJMIHQLkxom4E-e7Qy3aYsdGMVA.roa (hash: Fg5t4xG81KRwBzgiOaCNb7xH+qvhUM++MTkXaN72cEY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:43:d9:0e:46:74:f3:d8:ac:fe:9a:42:68:66:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=d2aa4121255b5250d40e59e62591de5f65c0caec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:89:65:b1:04:a4:c2:a1:b7:04:f8:2b:a2:2a:
                    c2:68:47:57:83:c6:36:3b:8f:c9:e5:1e:87:85:05:
                    ef:2e:ff:fa:0a:0f:c7:67:01:e6:47:f3:79:b9:9e:
                    af:d1:a5:45:7e:08:9b:ee:c3:5f:51:17:40:c6:c3:
                    a5:b5:9b:6a:df:87:80:3f:d2:8e:b5:db:32:21:be:
                    3b:8c:68:bf:9c:39:27:4c:b0:17:6e:e2:d9:cf:dc:
                    3d:4b:5f:fb:b9:3c:68:3d:3b:29:ac:4d:52:c5:c4:
                    cd:e5:fa:51:80:ad:60:3e:2c:fd:19:a8:c9:90:33:
                    e3:8e:57:bc:8b:7c:00:eb:3b:6a:a2:3a:89:d1:2b:
                    1d:89:a1:2b:28:d3:36:e0:36:d4:b2:55:1a:ff:c1:
                    12:77:00:d5:f8:16:77:bc:f0:7e:5c:59:b1:c5:0d:
                    7d:ec:ce:4b:a1:89:40:69:26:2c:e5:e8:b7:4c:ce:
                    c7:98:40:d8:e3:06:6c:42:1b:62:21:5d:c0:49:e9:
                    45:cc:b9:f8:12:d3:1b:ed:56:b7:b0:90:df:11:28:
                    7c:d0:50:20:14:21:f2:43:51:db:84:dc:a6:c7:f7:
                    69:6c:78:93:54:a5:4a:d5:f0:74:d8:d0:2f:81:db:
                    89:54:29:aa:9d:e4:ae:36:bd:ed:10:1f:27:55:28:
                    8a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AA:41:21:25:5B:52:50:D4:0E:59:E6:25:91:DE:5F:65:C0:CA:EC
            X509v3 Authority Key Identifier:
                keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:0a:82:35:60:17:34:8e:92:ca:93:06:08:f2:c3:a2:ae:80:
         58:55:07:8f:07:43:96:6a:cc:5d:ab:6a:23:3f:c3:54:d8:2b:
         ce:09:20:a1:1d:06:e5:27:d8:24:12:59:d2:31:40:f1:55:fb:
         d9:0f:99:a9:57:97:c7:88:db:75:f9:fc:52:97:d5:5a:67:aa:
         63:3a:d1:e7:21:34:1a:fc:3d:fc:28:3a:a7:d0:b7:a8:af:09:
         29:df:d4:ed:fc:a6:05:0e:a3:65:12:4c:c9:75:99:a9:1f:14:
         d5:3a:6d:1a:2e:47:a8:62:a5:2d:09:a4:65:f4:b8:55:d5:27:
         b0:08:f7:75:38:05:76:e7:43:0f:82:5c:98:7f:09:eb:ab:47:
         c2:92:5a:93:58:22:f8:9a:eb:d9:6b:d8:c8:e7:d4:25:ce:e1:
         a8:28:ff:2c:18:16:71:eb:f5:dd:c3:1e:bb:db:d2:68:31:88:
         93:b2:ac:e1:78:b9:c9:5a:6e:62:df:98:37:ca:97:fb:32:eb:
         90:63:a8:64:98:74:e7:45:94:ad:b4:1d:01:77:74:59:73:42:
         db:b3:6b:22:19:f8:8d:91:c1:e7:01:81:0b:49:0a:db:26:21:
         52:eb:a9:ab:b5:65:64:82:49:e7:1d:e9:67:58:aa:16:30:1e:
         8b:ae:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----