Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File:                     GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier:          u2TJvyt/nnHVx2tgMOCtUAaLdUQAVg0ZKQiBZsgkrwM=
Subject key identifier:   E6:95:15:39:D1:33:F0:95:0B:42:8C:8F:D7:84:80:F1:C5:65:5B:7E
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer:       /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial:       01962F06E77D2CE86FBF80012E208666BF7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number:          046D
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: CnKZaW0Gi+dBYqW5HaXDwzWThEGtxCdK95AdyxikmI0=)
                          2: Kef5Ht8ih3zCR7oI2xwNCCek_c0.roa (hash: PcoTymr3WCdK/2NTP+Gx/1hjHNciVhC2nMEqt8P6Dww=)
                          3: QdqTKHoiqUSS3YbPBuNzrQhQ9-U.roa (hash: q0TCHE5AUt7fjjG6UbQUxp5tdbPD8QNzCCk/O3w0dcI=)
                          4: bJaPvlpLwHUl9ZMeCz6Qju7dCQ4.roa (hash: P7xXaDBj8KlM/Rm+qxd2RUE4iuJ1o4jB4LwpB/1ek+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e7:7d:2c:e8:6f:bf:80:01:2e:20:86:66:bf:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=e6951539d133f0950b428c8fd78480f1c5655b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:1f:16:e0:3a:77:35:bd:23:53:42:ee:7c:
                    83:e9:22:af:72:fe:5f:9f:88:88:79:e4:f1:61:4c:
                    25:98:1c:ff:0e:b1:9d:48:ea:f2:b0:d7:5b:cd:64:
                    43:85:5d:4d:41:a9:f9:a0:7f:6f:db:42:c2:07:1a:
                    78:da:d4:02:73:63:7c:57:85:38:12:54:b2:ab:fb:
                    48:2d:18:a7:77:06:5c:65:ec:86:dd:a3:da:64:60:
                    3d:32:c7:30:70:ce:c4:9c:1c:fd:94:b5:ec:70:94:
                    7f:89:ba:7e:cf:eb:67:c7:f9:d5:60:f0:a5:73:69:
                    a8:ce:50:60:ae:91:c4:6f:58:62:6e:4b:9d:df:8f:
                    8c:56:f9:64:3c:33:b1:fb:dd:8a:c2:ed:6b:47:71:
                    3f:8b:df:44:5a:8e:f2:ba:99:b4:d1:eb:7c:00:f0:
                    06:f0:32:39:69:7d:f3:0e:b4:bd:1f:db:65:ab:c2:
                    dc:aa:19:51:b5:10:24:09:46:e9:9c:16:95:97:77:
                    a6:2a:67:f4:5c:d1:a6:eb:5f:97:3f:24:c3:58:21:
                    01:ff:9f:c6:80:18:1f:69:47:95:d7:71:62:52:1e:
                    cb:f7:b2:0c:90:6d:a3:98:a3:37:bf:49:da:17:18:
                    fa:8b:23:b9:64:58:f7:d4:8d:bc:9c:07:74:d6:59:
                    43:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:95:15:39:D1:33:F0:95:0B:42:8C:8F:D7:84:80:F1:C5:65:5B:7E
            X509v3 Authority Key Identifier:
                keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d7:73:d2:17:35:1d:1d:c4:e6:40:38:9f:90:c9:ba:f5:85:
         fe:1b:af:f3:c1:8e:a7:17:e8:81:ea:04:ff:33:67:7e:f1:a6:
         12:12:96:11:34:df:08:19:70:27:28:7a:3c:3e:d8:21:bf:4a:
         32:55:84:7c:a5:19:2e:bb:0d:d8:d1:76:5d:65:7b:73:33:74:
         2e:e0:bf:c6:b0:05:f8:d2:23:98:6b:d6:29:a2:f8:90:7e:44:
         ec:2c:75:94:97:c2:60:21:2d:68:bb:a3:80:5a:a1:67:11:9d:
         e6:0c:7b:26:55:71:da:be:39:b5:99:d2:f0:af:32:23:1f:7f:
         2a:1c:b1:cf:10:04:49:b1:ef:ea:e8:46:56:a5:d7:0b:6f:99:
         21:42:9e:02:ba:01:4a:5a:f7:91:35:b9:8f:55:c9:31:20:99:
         61:fc:c4:df:ae:ed:4c:48:9c:04:18:51:aa:6e:49:fc:d1:14:
         fc:98:7d:56:24:13:eb:f8:63:56:9e:d5:af:3d:ac:f5:78:2e:
         dd:a8:a8:e4:5a:cd:3e:ef:56:8c:2d:70:11:e7:30:8f:6d:f8:
         0e:6b:ad:18:55:d4:57:9b:7e:c2:6c:86:4a:80:e0:27:75:4e:
         33:78:50:76:e6:9d:8f:a5:2d:92:54:1a:31:c6:32:ed:8d:50:
         98:da:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----