Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
File:                     GipL_SwMaXZagpnvdJZfhipxSLc.mft (raw, json)
Hash identifier:          I31lU1QnjxFbvJglFv3aF+z4BiEBgBzsNCPvlltzOYw=
Subject key identifier:   F8:4D:3D:01:56:AE:28:62:AF:12:C2:16:16:D3:63:B3:40:71:05:AD
Authority key identifier: 1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7
Certificate issuer:       /CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
Certificate serial:       01962F3DBEB179B30407E7F1E8F40C2AA1AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft
Manifest number:          0954
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: GhmYyJ6NhLrMATspm8yks47OFRw.roa (hash: Mk0qCKuGDlDFXNi4NL9kSzM+2bvWbE9B+uo6x+Vxb1E=)
                          2: GipL_SwMaXZagpnvdJZfhipxSLc.crl (hash: WOwMxhYudcczydfEGizil6lrH7xjU5iVT3ntiSMR5No=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:be:b1:79:b3:04:07:e7:f1:e8:f4:0c:2a:a1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2a4bfd2c0c69765a8299ef74965f862a7148b7
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=f84d3d0156ae2862af12c21616d363b3407105ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:cf:e2:03:0e:fd:6c:86:4c:5f:1f:8c:b5:
                    4e:c6:9e:d5:00:ae:ab:91:0f:cc:29:89:81:80:b0:
                    90:65:58:b5:dc:5c:2c:73:a5:6e:0e:63:6a:e0:d0:
                    16:7c:64:47:ed:a1:07:a1:11:55:b5:c6:36:d6:49:
                    e1:fe:74:9c:08:1a:b5:44:53:7b:db:74:73:17:7a:
                    d4:76:29:27:da:23:98:50:04:63:08:2b:8e:fe:2a:
                    ce:71:d2:7b:b6:03:ef:b3:67:4f:55:2c:da:82:f2:
                    81:9b:ae:74:29:e5:56:28:2a:20:e9:68:14:6b:ce:
                    3b:e0:d1:d8:11:79:2d:56:69:a2:fc:4b:e2:6c:da:
                    a1:ef:4a:14:fd:d0:aa:3c:f1:a4:b4:74:f3:f7:7f:
                    26:07:48:0d:2f:04:4d:10:8b:62:0d:ca:f8:52:9a:
                    ea:dc:d6:2e:ae:85:93:77:3e:9a:30:66:40:d4:ab:
                    d4:56:38:20:3c:f0:32:98:3a:f9:cc:80:c0:d6:18:
                    59:0d:28:22:99:56:b7:c1:6f:ce:60:67:25:7b:16:
                    e9:15:69:b3:7f:1a:74:6c:30:a9:54:9f:a6:f7:37:
                    ce:34:18:4e:83:ba:8c:9d:2e:ed:de:e6:de:95:6c:
                    50:81:81:55:31:77:81:64:73:5f:43:8c:85:e0:c7:
                    aa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4D:3D:01:56:AE:28:62:AF:12:C2:16:16:D3:63:B3:40:71:05:AD
            X509v3 Authority Key Identifier:
                keyid:1A:2A:4B:FD:2C:0C:69:76:5A:82:99:EF:74:96:5F:86:2A:71:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GipL_SwMaXZagpnvdJZfhipxSLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/677af8-853e-493b-8b85-bb70800c2a65/1/GipL_SwMaXZagpnvdJZfhipxSLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7c:7f:bd:af:2a:c8:9c:48:41:76:c9:bc:69:55:b2:cf:b3:
         79:99:31:c4:1d:a7:0b:7f:46:9f:40:c4:ee:80:c6:1c:db:38:
         da:c5:9b:4f:f0:a4:dc:e9:b4:fc:9a:5d:47:84:5d:fe:14:54:
         22:a4:b8:e3:ba:3a:0e:34:23:fe:12:5f:88:02:b3:65:20:02:
         8c:28:51:76:b3:bf:9f:98:db:38:26:ad:fc:87:30:6c:43:91:
         99:71:ac:59:62:85:b9:52:e9:84:52:28:82:e2:45:eb:cc:07:
         b5:a9:49:7f:85:fe:b9:0a:8e:3a:3f:30:03:cd:cd:ec:2e:7d:
         43:b9:a8:91:c8:c1:62:87:bb:d0:63:33:18:6e:b1:4f:d8:bb:
         26:f8:68:51:fa:e7:ed:c2:53:50:43:87:d1:f2:6b:3a:e9:1b:
         60:87:f8:67:15:3f:a0:4b:5d:c4:91:1b:aa:f2:91:cd:f1:4c:
         df:ed:9c:e6:d2:87:56:61:ba:81:cf:31:e6:14:62:e5:0d:94:
         38:f9:38:e5:16:f2:5f:1f:c2:07:57:eb:23:1a:f6:7b:e9:bb:
         c6:01:b0:51:84:c4:8c:4f:e8:6e:98:30:bc:39:7d:79:64:93:
         18:a5:a4:81:87:88:7a:75:c2:e8:c6:1f:c1:94:f1:70:15:58:
         e4:84:1f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----