Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
File:                     Gf__KJ8trQ_AhFawutVNe6RJpJI.mft (raw, json)
Hash identifier:          Xg4QdgOzfRgpuDYWpqtzWJJE5Y/xdPRBAPt/sT/tOos=
Subject key identifier:   23:6E:D6:3B:47:9E:93:92:56:E7:4B:C3:74:DB:CA:C1:58:69:99:80
Authority key identifier: 19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92
Certificate issuer:       /CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
Certificate serial:       01962E99847CB2022959843910C756B839C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft
Manifest number:          14F7
Signing time:             Sun 13 Apr 2025 10:02:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:14 +0000
Files and hashes:         1: Gf__KJ8trQ_AhFawutVNe6RJpJI.crl (hash: 6C75NhlYzyPkHQ1kLSuR7rOrJAq2XkQKANVDQYUEsn4=)
                          2: s5NfBBJCWwkg56h64SxZMZxnlwg.roa (hash: FJxF1xFcRFmlC4MqQuyUXAAPNu/l5AbVFkQWsYjIQ3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:84:7c:b2:02:29:59:84:39:10:c7:56:b8:39:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ffff289f2dad0fc08456b0bad54d7ba449a492
        Validity
            Not Before: Apr 13 10:02:14 2025 GMT
            Not After : Apr 14 10:02:14 2025 GMT
        Subject: CN=236ed63b479e939256e74bc374dbcac158699980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:26:76:79:4d:b4:c2:91:7d:c6:ea:cf:ae:
                    b3:5f:65:7c:d0:9e:ec:96:ec:67:e6:b3:83:5c:49:
                    f0:b9:e3:db:69:1d:89:c7:b7:8f:18:00:4a:f2:5b:
                    ed:5e:f0:61:e6:df:ed:4a:a9:22:7f:ff:17:ff:24:
                    ed:b6:7f:2f:5c:76:71:19:67:ec:ad:7b:b7:2b:7f:
                    b8:45:eb:12:96:a2:2a:e3:da:83:fc:40:0a:b0:fd:
                    ac:67:cc:55:03:d6:9c:fe:5d:f8:31:52:91:9e:1b:
                    82:5e:c9:8b:3b:da:26:f4:65:90:dd:0d:43:e6:ba:
                    64:7a:b3:34:7d:ec:a3:02:41:92:8f:0b:50:72:5c:
                    9b:9e:5b:6d:27:0a:d3:17:09:b5:20:df:37:db:a5:
                    b9:fa:a9:f5:46:89:e2:c6:69:11:c8:42:4e:29:ba:
                    28:79:18:ed:45:8b:62:37:23:ef:29:22:09:41:e9:
                    52:4f:85:74:cb:46:21:52:bf:79:5b:80:c0:e6:f9:
                    ba:22:98:93:a4:31:e8:f0:20:d7:ca:08:c3:1b:98:
                    77:d3:4e:d2:b7:b0:cf:fc:04:36:4c:01:df:c8:14:
                    53:f1:7d:a7:14:2a:20:49:9f:6a:13:ec:cd:be:1a:
                    88:7a:b9:4a:ec:73:6b:b8:ce:59:57:89:bb:43:c3:
                    c4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6E:D6:3B:47:9E:93:92:56:E7:4B:C3:74:DB:CA:C1:58:69:99:80
            X509v3 Authority Key Identifier:
                keyid:19:FF:FF:28:9F:2D:AD:0F:C0:84:56:B0:BA:D5:4D:7B:A4:49:A4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gf__KJ8trQ_AhFawutVNe6RJpJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c11c87-efbb-45e8-9b03-d525718aa44a/1/Gf__KJ8trQ_AhFawutVNe6RJpJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:e0:9f:89:0c:a7:8d:dd:ad:fa:b6:ba:88:82:23:6e:6f:
         b3:eb:db:c6:85:48:fa:28:95:ee:f4:03:1c:54:8f:7d:4b:96:
         a9:a6:b9:18:80:d6:e3:45:1b:55:ad:13:d9:d6:2c:f1:f9:9f:
         47:73:8e:7b:e6:e1:4e:dc:6f:23:ce:50:68:18:80:ea:2e:19:
         7d:00:ee:2e:b7:a8:f0:08:85:6c:1c:ab:b3:e8:b7:9e:6e:93:
         da:f1:aa:9b:97:4e:e7:4c:1e:2d:39:97:38:8c:db:d0:08:e6:
         7b:77:1e:4c:4a:bd:2d:1f:a1:2a:15:8b:5f:f4:e2:4e:f6:02:
         8e:ef:da:13:89:4a:b8:d4:6d:37:35:40:e0:88:51:93:be:57:
         a2:81:35:76:0c:74:87:90:fc:c1:58:08:9e:ff:6b:23:67:01:
         67:81:74:e4:94:71:95:78:36:54:a5:b2:8d:52:3b:8b:61:a6:
         98:ca:db:78:cd:0a:dd:26:69:3c:32:9c:81:c7:05:8f:3c:d8:
         a7:22:25:e6:b0:4a:6a:9b:94:19:a5:c1:d0:3a:7f:d0:f0:49:
         92:a1:ae:e9:8e:22:a9:c3:6f:6a:f9:5d:65:9f:c0:9f:f7:cf:
         f4:c3:d2:fa:ea:c7:53:a5:65:39:00:83:cd:7c:42:dd:ed:6f:
         34:8f:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----