Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File:                     GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier:          059d0XO02F3JtZQgMYFTlfBzm1qnlfD88KDPjyvJU6U=
Subject key identifier:   DF:C4:39:DF:70:BE:4F:9D:73:DD:32:F2:C8:83:4A:9F:FF:C0:8D:15
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer:       /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial:       01962E99906BBDD2F58F35043C51C3B3F366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: ZPviB8O9iHUoLS+xu19cPs8cc2WhUfDTq8lWfIypWlo=)
                          2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:90:6b:bd:d2:f5:8f:35:04:3c:51:c3:b3:f3:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=dfc439df70be4f9d73dd32f2c8834a9fffc08d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:de:ef:0b:29:e2:e7:2b:92:17:07:54:a8:
                    dd:59:81:e0:dc:b8:56:5b:88:2e:9f:2a:97:26:45:
                    a8:47:42:6a:a2:c7:28:72:aa:22:95:76:17:4b:92:
                    92:03:6e:bc:5d:86:01:9f:9a:8a:66:e3:9c:4d:a3:
                    b0:94:45:e7:15:41:77:e2:4e:c1:ed:82:ad:dc:f5:
                    b2:f7:ca:36:dc:80:9e:23:d1:db:26:07:07:54:4d:
                    0c:94:25:61:9f:03:93:a2:16:35:93:9c:b1:04:aa:
                    8b:53:8e:53:c3:75:5e:c8:97:97:8d:0c:c4:1b:be:
                    58:ed:ef:45:d7:ce:75:5e:3c:82:c2:58:03:5d:4d:
                    8e:9d:1a:07:c7:f2:54:c5:12:29:82:d6:cc:40:91:
                    5a:fd:f9:5d:03:81:58:3e:08:91:52:2d:9d:72:be:
                    ea:62:04:bd:b1:b4:94:f3:0b:40:c5:84:5c:17:16:
                    32:91:df:5a:f8:a4:4d:8c:df:26:2a:6d:0b:22:50:
                    55:34:44:d1:03:44:5d:a1:d5:ca:0b:7f:d8:79:51:
                    a7:35:2d:11:0f:17:5c:96:73:4f:a0:d7:32:8b:96:
                    3d:83:30:34:15:cf:ca:b9:49:2f:d0:7e:4b:86:5b:
                    96:6a:99:60:c1:72:94:32:63:5b:09:e1:09:e8:f3:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C4:39:DF:70:BE:4F:9D:73:DD:32:F2:C8:83:4A:9F:FF:C0:8D:15
            X509v3 Authority Key Identifier:
                keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:68:98:a2:b9:c9:10:08:68:2b:62:36:c6:82:9d:27:4e:6d:
         e0:a6:9a:32:4f:ab:7c:58:ac:fa:13:e9:73:4b:18:04:c9:74:
         cf:e5:6c:0c:a8:95:8a:19:56:68:7f:47:1c:23:09:ba:56:45:
         a6:d8:22:86:a7:c5:ee:6e:2a:b4:6b:82:db:17:d4:91:04:75:
         57:12:6d:47:a1:32:d8:5f:b7:c4:60:c8:9c:1b:fe:db:58:c8:
         62:f6:60:5e:df:41:96:cc:35:2a:7d:e1:22:0b:e6:87:5c:8f:
         14:4e:6f:ab:d8:57:a6:34:2f:69:90:4b:3b:44:e3:a5:69:27:
         94:02:a1:20:20:81:51:3e:74:7e:9e:d1:23:04:9e:88:5b:55:
         8f:e9:10:63:74:3d:96:56:ed:8b:c8:54:a4:9c:b1:b7:e7:a3:
         2a:b7:33:78:f6:f6:f3:21:78:79:41:b8:bf:c4:51:7e:f6:4d:
         8d:1d:f3:65:28:f6:d7:25:33:4d:9f:95:cd:52:97:8b:c8:2b:
         39:c0:17:aa:41:ee:cb:0d:5b:e7:a3:49:85:f6:6f:1c:d8:f0:
         f0:6f:37:a6:04:bf:aa:1c:11:da:7f:23:3b:df:02:3c:7b:d5:
         6f:32:98:05:a2:42:78:4f:3f:aa:b7:96:4a:49:fd:64:59:57:
         1d:44:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----