Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
File:                     GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft (raw, json)
Hash identifier:          lK1oSe+nRvEWM4aLdUBaSYaZd37jnqEZDtrCgA7sDzQ=
Subject key identifier:   BD:31:8C:83:69:0E:B9:E6:30:B9:22:D7:01:1E:C1:B0:DC:F5:AA:12
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Certificate issuer:       /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial:       01962E2B1910F778D5E696AF0797EAFA96BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft
Manifest number:          05C4
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: 5lbTUO-rP5txsV_jlKv3vzS10Vc.roa (hash: VgScyBVTOIb/scuSoZmb+259XQHu/6r7pBA0Gc4Wdqs=)
                          2: GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl (hash: qJ1srIXut0ksRa9O9Jc1RjAFAH+JmWSiqRkUlYbFB38=)
                          3: RR-wG56YXYGUEbsQFd9GOjHnKvM.roa (hash: eG7mgkU6tN6hBwmEUuDYJD2Lxu/DlOxJUe50nzg9em4=)
                          4: TdRFPSiE6z0QGX9lW2WUDs-qrvc.roa (hash: uIOA5ClG5A+YjWezToN8AYQViV6aWN3VOQLxA91W/R8=)
                          5: W9jLQPfJ-gf7W45fE6xy024pvso.roa (hash: myRMJIwFBs9jjITp4SZwdlJzPIPHFfsrLal6I49sinM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:19:10:f7:78:d5:e6:96:af:07:97:ea:fa:96:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=bd318c83690eb9e630b922d7011ec1b0dcf5aa12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a8:bc:1b:40:12:77:22:9b:09:dd:1a:a9:5c:
                    a8:c0:a7:5e:1a:63:9f:68:ec:a1:6b:7c:cc:a0:4e:
                    fb:f5:18:3c:56:35:e8:22:4a:de:5c:62:96:d2:f5:
                    33:be:34:54:4d:27:b8:74:33:ff:a8:03:a6:66:b7:
                    e0:f6:27:53:01:19:d5:b7:6a:b8:d9:36:4f:60:22:
                    a3:ba:a1:96:56:c8:b0:35:30:9a:54:ac:c0:91:db:
                    46:a6:d2:84:bf:93:6d:4c:be:f9:4c:55:85:29:10:
                    ec:4c:88:a4:88:64:33:55:d1:ea:41:63:2a:a9:22:
                    64:5e:41:16:1b:6f:25:0d:b6:11:d8:85:a1:4c:5f:
                    49:a3:1c:82:80:ff:fe:68:34:19:9b:b6:45:21:1c:
                    70:c1:8c:52:db:e4:1d:a5:ff:08:3c:ca:73:bb:9e:
                    b3:1d:1f:f2:17:10:9c:bc:45:bc:96:6d:76:b6:fd:
                    bd:ea:a1:20:53:e9:f1:3b:06:27:b7:5f:51:ab:f5:
                    d1:b1:d7:e1:5e:33:2c:c7:1b:b8:78:37:e8:d0:e2:
                    78:39:03:4f:72:26:94:27:f2:62:40:f8:27:60:b4:
                    46:b5:33:6b:fe:6c:78:75:81:43:de:57:c8:77:e3:
                    35:74:a7:e4:d6:ae:78:d2:63:83:56:d5:00:b3:cd:
                    71:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:31:8C:83:69:0E:B9:E6:30:B9:22:D7:01:1E:C1:B0:DC:F5:AA:12
            X509v3 Authority Key Identifier:
                keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4f:0f:4d:5f:83:a8:32:68:91:f0:50:ba:6e:6a:32:0c:fb:
         8e:29:c5:9f:d2:b3:2c:f3:ff:13:29:97:d1:55:e7:33:f4:c9:
         f4:ac:d7:78:6e:ac:fa:ec:66:30:f4:46:87:81:71:93:ab:f8:
         ae:22:4e:c3:bf:51:cc:af:8a:02:af:37:4b:48:b5:32:2c:6a:
         43:be:39:84:94:02:9f:97:15:c1:26:26:d6:4c:2f:ca:8f:44:
         33:d7:93:86:5e:9e:c6:ef:50:00:4e:48:75:a1:2c:68:2d:19:
         2a:a2:86:a7:c0:bc:7d:dd:64:cd:84:2a:66:ec:37:17:2b:2e:
         36:9d:01:e5:bd:24:37:83:d6:09:94:a3:e9:51:95:c4:2b:99:
         4e:46:4d:4c:0b:77:08:46:ee:11:7e:da:69:05:55:07:b5:32:
         1c:73:e4:ed:dd:21:4a:6b:2d:5f:3e:1e:58:d5:70:46:ac:a2:
         1b:90:d7:d0:6d:34:bd:d9:0a:3f:f0:9b:47:b5:c3:99:01:91:
         4a:e7:93:03:dd:10:78:4a:1e:ec:34:ee:01:d0:7e:9f:41:68:
         38:5b:bf:02:03:e4:e5:07:a8:e0:70:cb:53:6e:13:ff:1f:1c:
         ae:32:28:f0:43:c6:50:56:59:03:ae:a9:7d:cd:b2:9d:25:55:
         31:c0:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----