Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File:                     GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier:          nLjhFOlQpSAieiPcMMF9YDhdT+ZQT8wj1X7+e5yPKso=
Subject key identifier:   73:96:93:BA:EF:D4:08:95:9D:B6:86:69:64:66:FC:F4:02:E1:C6:AD
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer:       /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial:       01962E98E16D8AAF424D9A1CA0C504052073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: dP2dNv6YkFADnqrQHbqdR/ohj2lfmwuHsJ9BWCn9dkU=)
                          2: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (hash: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e1:6d:8a:af:42:4d:9a:1c:a0:c5:04:05:20:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=739693baefd408959db686696466fcf402e1c6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:76:90:2d:33:3f:13:ef:2a:5c:0e:21:2e:9e:
                    d9:2f:fa:dd:24:57:03:bd:b2:2c:26:42:9b:d3:9d:
                    91:5b:25:ff:5c:19:b4:b6:b4:5e:9a:cc:0b:9c:35:
                    f8:90:f6:f4:9d:5f:f3:d6:3c:11:31:48:65:b5:b1:
                    4a:4b:c9:15:06:7a:60:4d:d7:95:19:50:b5:ad:1c:
                    ba:1c:52:06:99:39:9c:e9:ee:66:94:fc:22:95:c4:
                    65:52:f2:b8:07:a3:3e:0a:93:70:69:cc:dc:c4:3d:
                    dc:d2:f8:9f:12:25:c1:f1:be:21:d2:1d:ec:ed:c8:
                    d0:ea:31:f8:4e:b3:9c:a4:35:55:e2:ae:7a:b8:e6:
                    b9:03:85:4c:ad:00:4c:ca:27:53:aa:aa:36:a2:71:
                    10:ed:0f:68:90:0f:6f:2b:35:e1:18:fa:9e:bf:e6:
                    08:9f:2c:b1:3b:ed:03:b5:79:62:37:91:ca:bb:da:
                    04:c2:9f:51:c5:6f:6b:75:99:65:9b:57:92:90:ae:
                    a7:69:2a:d4:34:14:7c:0d:3f:68:8d:49:1a:ab:83:
                    e5:2f:56:91:7f:fb:e9:32:12:12:37:e9:f3:2e:68:
                    94:e2:46:0b:df:ad:41:f2:80:cc:41:c4:2c:73:7c:
                    b1:04:dc:dc:62:0d:52:4e:e6:ba:ac:8b:44:0d:ff:
                    da:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:96:93:BA:EF:D4:08:95:9D:B6:86:69:64:66:FC:F4:02:E1:C6:AD
            X509v3 Authority Key Identifier:
                keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:06:c9:68:a4:e1:91:14:95:0f:35:b7:9a:71:1f:a3:39:
         9f:08:0b:1a:90:1f:93:46:3f:42:31:77:d6:02:e7:ce:84:4b:
         1e:7f:6a:94:b9:3b:8a:75:96:24:27:62:a0:e9:09:cd:d1:d5:
         01:c6:60:3e:59:4f:cd:4f:f7:04:bc:c9:e8:e4:19:cc:c6:5f:
         2c:29:64:ed:6f:cf:25:53:e1:27:d0:cd:eb:e6:4c:1f:b6:37:
         c7:f5:31:6e:ed:98:4c:56:60:2a:83:48:91:82:16:96:18:8e:
         fe:c7:03:80:06:6d:64:44:78:8e:70:c4:26:01:75:97:7e:00:
         4b:12:2e:96:21:c2:60:ba:42:07:eb:7e:47:3e:fc:c6:0e:8d:
         a1:c3:4a:30:30:fe:54:5e:da:45:61:e3:85:6d:8e:e0:39:70:
         62:18:46:35:80:84:6f:0f:1d:d4:a2:fe:47:af:3c:f9:6c:ee:
         83:a1:07:b7:1c:97:2f:78:96:fe:8a:e9:66:11:d0:96:32:ea:
         a2:11:0d:f9:83:a2:de:45:0f:7f:33:a6:79:d9:18:b5:ed:4b:
         2c:30:f2:6f:51:a2:fe:98:f5:ea:63:71:e3:c6:aa:41:8f:2b:
         31:cf:c3:69:28:36:8f:16:89:53:03:9c:a8:81:31:92:c1:00:
         76:fa:f3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----