Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
File:                     GheAknBHDXwlZxEvtAqe9xJgBRY.mft (raw, json)
Hash identifier:          z9+qM/tBLYOBY1JrXqeHYJJsnio1jDyLMeywrsGZyWk=
Subject key identifier:   B4:A9:D1:47:22:27:29:19:9C:A8:D9:3C:C6:8D:55:44:66:89:3C:CB
Authority key identifier: 1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16
Certificate issuer:       /CN=1a17809270470d7c2567112fb40a9ef712600516
Certificate serial:       01962F3DC58F2311188515034B4A1FD12820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: 3n_Nd4cUj6teASapK4pWavXgfU0.roa (hash: KngeXtbNNWR05hMf2WkynvKsVClU9oGlPMx0Mk7lMOM=)
                          2: GheAknBHDXwlZxEvtAqe9xJgBRY.crl (hash: plMq1Upym2/79+/wCKvooBmuNj/5kLRIRjdQqSWRiGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c5:8f:23:11:18:85:15:03:4b:4a:1f:d1:28:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a17809270470d7c2567112fb40a9ef712600516
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=b4a9d147222729199ca8d93cc68d554466893ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:2d:7f:f2:3d:92:09:47:74:49:6c:45:72:
                    7d:ed:82:82:5d:0d:2c:df:3e:69:77:be:9d:10:51:
                    2c:67:7f:b8:78:d6:3b:bb:b4:f2:42:99:52:73:d9:
                    0a:cf:3f:7f:9a:20:91:09:83:1d:e2:70:3d:9b:82:
                    cb:fb:56:c1:63:54:fd:60:7f:a4:10:13:74:16:36:
                    04:1f:1b:99:91:53:26:ac:7f:15:be:09:55:87:19:
                    97:83:bd:e7:57:46:39:f4:7c:0d:5e:21:a1:76:5b:
                    47:36:c3:09:92:91:87:5e:28:07:06:79:83:ee:95:
                    fe:39:e6:01:61:b6:5b:4f:ee:84:07:12:a8:ef:91:
                    77:a4:8c:cf:45:13:6e:82:d8:ad:4a:f7:ae:73:2d:
                    9e:0e:43:13:07:c4:43:18:51:cc:e9:a7:95:75:9f:
                    7a:ee:21:7c:1b:b1:2e:f5:84:dd:a7:b4:19:08:ce:
                    b4:2e:31:f8:bd:4c:f1:b1:ee:c8:68:81:4d:83:66:
                    56:92:26:29:a0:ff:af:97:a1:31:ca:e3:51:76:4f:
                    c3:af:6c:a1:24:28:b0:b1:f6:c5:db:86:27:6a:06:
                    87:d3:89:ba:48:21:48:28:94:40:4a:5b:f1:15:4f:
                    d9:36:7c:50:25:3b:d0:49:05:2c:5a:fc:c5:6d:04:
                    8a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A9:D1:47:22:27:29:19:9C:A8:D9:3C:C6:8D:55:44:66:89:3C:CB
            X509v3 Authority Key Identifier:
                keyid:1A:17:80:92:70:47:0D:7C:25:67:11:2F:B4:0A:9E:F7:12:60:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GheAknBHDXwlZxEvtAqe9xJgBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f47710-4a23-4bdc-9541-8afa74d8769f/1/GheAknBHDXwlZxEvtAqe9xJgBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:4b:bf:b5:1c:51:c4:ca:17:64:a6:b7:4d:3e:08:52:cb:3e:
         44:dd:bb:70:b1:7e:98:59:fa:d9:08:96:2e:58:40:a2:3c:53:
         42:0d:8c:e1:98:e4:92:28:90:22:f0:09:7a:2f:b6:59:52:f0:
         f8:51:dd:9d:38:d1:8e:50:30:4b:84:9c:6e:6b:8d:65:42:b6:
         ad:c7:f3:79:84:0b:1a:56:97:b3:ff:1d:c5:ca:81:33:b1:e6:
         45:09:45:28:e4:6e:8f:24:90:3a:cc:e7:b0:dc:e5:41:16:f0:
         35:52:02:83:99:55:d5:8a:2e:0e:07:13:c7:7b:06:a5:0c:f5:
         55:61:14:d1:39:a8:99:e3:a2:2b:ac:8f:b6:b7:d3:21:ab:bd:
         bd:7d:62:75:b8:a7:6c:f9:fd:07:fb:30:fa:26:24:be:a4:28:
         fc:cd:07:de:d8:b5:3f:67:3e:28:1f:67:e8:e4:90:58:9e:56:
         3f:b6:f4:a3:e1:9a:76:78:6a:86:64:9c:18:1d:9e:b0:89:dc:
         fd:34:11:fa:77:f1:ca:fb:cd:e5:f9:5e:9f:4a:05:97:35:29:
         b2:0c:47:5b:f7:18:bf:f2:1c:0e:f7:67:6c:ec:16:90:b7:14:
         ae:8f:65:c7:05:5a:2b:bb:e1:30:35:72:1d:a2:40:53:7e:5c:
         c5:e7:44:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----