Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File:                     GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier:          BkdnYpDraNTF6BR0eYZRTBGY71257wlDK6La1W+CK2w=
Subject key identifier:   A0:3C:E2:FE:C6:9C:89:F8:11:DC:55:6A:A7:72:CD:BB:94:5C:0E:32
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer:       /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial:       01962E98FC5C3E93F4BE6BF3C464A0F8F945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number:          0430
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: CVTCDO4j3ew_vvVMZ-5a85iKk6w.roa (hash: 1WlZWQglW9seeMd9Cyv5zgkOiHhAGTdr0i/f1OUkJDs=)
                          2: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: +ajGzxVo/bQFEWEJh2lcWQn0WW2otyo3QShJIBy5lrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fc:5c:3e:93:f4:be:6b:f3:c4:64:a0:f8:f9:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=a03ce2fec69c89f811dc556aa772cdbb945c0e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:97:c5:d6:67:0d:95:b3:67:18:4a:93:d0:1a:
                    9c:03:80:61:50:b2:5c:03:9a:3f:a0:e5:a2:08:16:
                    f9:25:1c:16:28:96:86:f2:39:81:e6:83:6c:f0:b8:
                    9a:67:d2:e6:46:71:e9:eb:bd:d4:15:4d:53:70:d3:
                    50:36:b3:b2:f9:3f:b6:aa:a6:b9:48:c6:ef:b6:6a:
                    3b:22:ac:07:40:9c:61:16:7f:39:23:51:ba:32:f9:
                    9c:1f:c3:ff:3e:ff:1c:38:21:e8:7d:4d:a4:ea:6a:
                    6c:df:0a:db:95:dd:70:f5:e4:75:33:83:16:de:60:
                    47:d0:74:a3:5e:4b:a5:0d:d1:7c:ff:6e:ba:68:c1:
                    1a:01:1f:1f:e3:62:d0:42:83:8f:d7:92:66:ee:39:
                    ec:dc:c3:f0:8b:fe:10:bf:a6:b1:90:22:c8:28:94:
                    5c:8d:d3:65:9f:4d:b2:1a:ae:dc:a1:48:23:0c:36:
                    17:79:c1:5c:52:18:4e:04:c3:54:25:cb:66:37:95:
                    98:65:4a:32:ac:61:13:33:78:5c:69:1d:65:3d:2f:
                    55:b9:ae:6f:c4:ea:2f:53:dc:15:8d:11:c1:18:95:
                    0a:41:03:37:af:72:a1:1a:0a:85:80:6e:0b:bf:d7:
                    66:04:6d:e7:9e:af:80:9b:2a:6f:8e:65:65:f8:0b:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3C:E2:FE:C6:9C:89:F8:11:DC:55:6A:A7:72:CD:BB:94:5C:0E:32
            X509v3 Authority Key Identifier:
                keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:22:61:ed:89:0b:75:95:09:12:c9:fa:5b:ef:83:3f:9a:a0:
         d6:c2:42:c7:e1:d9:9a:af:36:52:63:ba:a9:53:98:6e:03:b2:
         0e:ac:c6:6e:ed:0b:55:e9:e5:aa:02:3b:a1:f0:ab:45:40:ed:
         c8:64:3c:ae:e9:d3:ef:33:0e:0a:d0:4c:72:58:e3:6a:c9:13:
         eb:6e:05:96:5f:ad:a6:0c:c6:a3:a2:16:a8:9d:18:5a:72:c8:
         72:ec:c4:0b:cd:32:1d:6d:92:cf:11:82:26:2c:de:98:16:84:
         3c:a7:03:74:6f:f7:09:ef:30:52:7d:30:d4:3f:14:86:8f:b6:
         f0:8b:f5:e4:c0:d4:99:36:0c:ba:21:e4:cd:b0:c4:f7:c0:26:
         af:de:94:06:3e:0a:0f:ab:15:d0:42:e6:61:50:cb:43:e6:78:
         e0:6a:53:43:62:d5:36:b3:1a:04:af:45:9d:a1:fe:3b:c3:49:
         05:47:fb:1b:43:76:10:30:1e:40:53:af:09:bf:02:25:cd:67:
         e1:d1:d3:56:6d:8e:07:00:c8:aa:ec:19:66:97:11:81:8d:a5:
         7c:6b:51:df:05:94:60:0d:73:50:13:ec:95:de:9f:46:92:bb:
         b1:d4:3e:71:ba:8b:fd:27:44:24:38:40:34:12:10:65:90:8a:
         9d:4c:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----