Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
File:                     GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft (raw, json)
Hash identifier:          +0fwvddhZhWBscZvX565O+g30pl/sCBHteMbvoh5pz8=
Subject key identifier:   19:D9:8C:26:6C:6E:FD:DA:9B:8E:61:6C:E5:1C:0D:A1:38:94:BF:85
Authority key identifier: 1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D
Certificate issuer:       /CN=1a66819ed62a71090cf437e4263012d4c035067d
Certificate serial:       01962F069F9A5B8D039798F7A7AB65E530E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl (hash: 7dwwZX38zE6pviGIxr61ORhKIxB3Pr0FPnADzxKcTM4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9f:9a:5b:8d:03:97:98:f7:a7:ab:65:e5:30:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a66819ed62a71090cf437e4263012d4c035067d
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=19d98c266c6efdda9b8e616ce51c0da13894bf85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8f:b3:8d:49:00:ef:92:3e:bc:64:9d:7b:7d:
                    cf:ae:89:18:8e:e7:2c:0c:5f:8e:9a:72:1d:d1:3f:
                    18:82:10:74:52:1e:f6:90:bd:ce:a1:4b:26:f5:34:
                    c1:ba:40:79:05:73:f2:11:03:9f:69:89:b8:90:89:
                    b8:ed:b2:9f:e2:00:23:32:58:76:5f:c0:7b:7b:78:
                    01:19:e2:4d:02:af:c0:8d:5e:46:87:40:c5:b6:27:
                    a0:9d:56:a1:8e:13:0d:22:68:20:29:3f:99:e7:a7:
                    8d:6f:21:5b:f8:ab:77:e4:5d:2a:4c:ee:bb:f3:ea:
                    cf:1f:e7:1a:70:63:1d:8f:99:1a:12:b1:4e:7f:5e:
                    60:7c:ba:16:65:a3:77:11:c0:24:e9:fe:1f:6e:2e:
                    c1:44:c9:c4:3f:c4:62:ba:d1:b8:0f:e7:6d:c3:94:
                    19:80:f3:44:7b:ed:84:07:d9:4a:25:2c:7a:c1:72:
                    e8:37:86:37:14:b8:dd:2f:07:cd:0c:b3:5a:38:b9:
                    1e:69:1d:b8:dc:28:c9:c9:6a:5e:e4:e2:67:b0:f6:
                    b6:6c:d9:c6:8b:33:9a:b3:3b:9b:91:0b:34:e0:71:
                    1b:99:c9:b2:e3:6f:1a:cd:3e:5b:33:d3:65:26:03:
                    9a:38:3f:b4:d0:92:cc:d9:80:65:c8:dc:ba:5e:61:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D9:8C:26:6C:6E:FD:DA:9B:8E:61:6C:E5:1C:0D:A1:38:94:BF:85
            X509v3 Authority Key Identifier:
                keyid:1A:66:81:9E:D6:2A:71:09:0C:F4:37:E4:26:30:12:D4:C0:35:06:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmaBntYqcQkM9DfkJjAS1MA1Bn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/693e38-1c7d-4c84-a064-764f822ddc57/1/GmaBntYqcQkM9DfkJjAS1MA1Bn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a9:93:b1:93:36:00:22:00:0f:fd:4a:bd:50:ed:eb:ad:31:
         6a:9c:07:f2:06:f8:af:d7:05:00:14:f1:33:ea:56:70:8d:12:
         9f:47:5d:62:27:23:ea:06:d9:3d:48:29:26:76:3f:0f:b1:e6:
         31:7f:36:5b:b2:6f:ef:a8:88:51:58:e3:57:fb:18:43:18:b7:
         20:ce:11:2f:e9:d8:b6:33:7b:95:cf:56:5d:4e:40:85:4b:b7:
         3e:77:90:0d:25:dc:0c:aa:11:2e:59:d6:87:ae:c8:8c:44:7e:
         48:a0:d1:46:2b:6a:f8:bf:e9:7d:a9:10:89:e3:c9:c7:11:45:
         a0:ea:25:d0:ae:59:09:90:b8:93:3c:54:53:76:05:4a:79:dd:
         ea:5b:99:7a:b9:c3:e0:10:b6:92:f9:59:b5:ae:0e:93:09:73:
         85:b5:2e:f8:70:d4:99:6f:33:a6:e6:57:47:80:5e:8a:67:3b:
         ba:8d:9a:f4:c2:d1:b3:5b:57:a5:27:2c:0d:65:39:c8:fb:dd:
         1f:d6:c0:c0:62:73:4c:7d:2c:c8:1a:ac:63:db:72:1e:04:4b:
         6e:74:2f:00:e4:8e:47:e2:9d:2a:10:dc:ae:7d:cd:5f:c3:3f:
         25:1e:30:e2:09:75:97:3f:12:6e:3a:57:e8:87:29:86:8f:a3:
         db:35:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----