Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
File:                     GpnHX-V3fhNlc-HlHvumeB86WxY.mft (raw, json)
Hash identifier:          TpOChVUSvpedekJsXPaN5UJ78UPtAibQpinqftZSX2Q=
Subject key identifier:   2D:8C:5D:68:82:EF:3E:00:3C:AD:06:82:EF:9C:D3:9E:7A:B3:98:1C
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Certificate issuer:       /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial:       01962DF3AE1CD7EFF91E3C95EED830B7BDFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: 1-xyQHxf_deE9-ViNoog6kflfJho.roa (hash: QIveh9vpkORylUTH9OU36DpDEaTwHICeGuuojxGmoA4=)
                          2: GpnHX-V3fhNlc-HlHvumeB86WxY.crl (hash: dP7+SWvt+f8UGhkpQ0jQ6d7nwQ2UXICN+1ThIb0Ssi8=)
                          3: vDjAWnb2U_Zni3rwGpwjWOad_gQ.roa (hash: YF5FP9GizLuKXZzGN/kv4NsbvKt5L3RdIPXM7DuHQbw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ae:1c:d7:ef:f9:1e:3c:95:ee:d8:30:b7:bd:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=2d8c5d6882ef3e003cad0682ef9cd39e7ab3981c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9d:b9:7d:da:07:7c:92:a0:88:fc:bd:0c:ae:
                    35:41:9f:31:25:dc:b0:4d:e6:77:20:a0:d1:b0:49:
                    96:f5:65:75:8e:35:cd:a7:9b:1e:60:15:cd:e3:be:
                    88:a7:9c:07:5f:e7:cb:b5:d3:04:dc:49:68:e0:95:
                    68:4d:63:c9:99:bf:14:5f:69:c5:e9:2e:5c:64:ff:
                    ee:d4:30:29:76:62:56:89:57:52:a1:28:9d:7f:f3:
                    03:32:15:9d:fa:68:26:63:77:8a:0e:77:ac:06:1b:
                    30:d0:24:6d:0e:d3:a8:15:05:4f:6b:1c:c1:95:7c:
                    f4:e1:15:c9:19:9d:6b:99:fc:bc:53:f0:c5:78:4e:
                    2d:29:fb:32:ce:15:84:6f:94:79:3b:b4:a7:7c:f0:
                    6c:40:0d:ff:3b:79:09:43:02:35:9e:75:f0:4b:b5:
                    ae:21:9d:93:fb:29:8c:59:71:05:ea:88:85:8e:2e:
                    bb:e2:74:a4:ed:2a:95:fc:67:d3:c2:17:25:60:02:
                    b6:bb:66:a0:8c:f9:c1:53:15:6f:50:3a:44:60:80:
                    9e:cf:1a:ab:03:8f:73:2e:6e:95:df:05:1f:c0:86:
                    5e:32:30:8f:ac:cb:89:21:b4:16:54:63:0c:f7:0d:
                    7d:fc:8a:ea:e2:93:4e:1e:5e:48:55:21:5d:5e:26:
                    1e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8C:5D:68:82:EF:3E:00:3C:AD:06:82:EF:9C:D3:9E:7A:B3:98:1C
            X509v3 Authority Key Identifier:
                keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:e6:11:34:36:06:7b:93:67:1d:06:61:ea:f7:e5:b1:e4:6e:
         6a:91:e7:53:14:38:4b:67:d3:c5:41:b9:33:5a:f5:e2:01:6c:
         61:29:7b:9b:33:0c:b1:18:7c:e4:14:37:bf:5e:c0:0a:0f:92:
         72:f6:11:57:3f:49:f1:cb:7a:c2:a8:c1:ed:a0:37:e0:15:a7:
         2f:b1:64:7c:fe:02:ff:98:70:b1:1b:e9:6e:e0:d7:2f:ef:65:
         54:68:45:56:65:65:4a:1b:04:19:e1:2b:c7:66:54:2c:a1:5e:
         b0:20:52:3c:89:e7:65:9f:7b:49:98:68:ba:6c:cd:be:30:85:
         1e:4f:93:7d:d8:94:c1:86:53:06:d1:bd:ee:9e:90:33:e3:5e:
         13:28:b2:43:d0:87:43:52:b6:a2:35:8a:7a:3c:ae:71:81:d4:
         56:d6:e3:e4:ba:37:f1:01:1b:cb:3a:58:4b:53:b2:e1:f3:98:
         58:52:7e:ab:ba:fe:e4:5e:51:4c:59:83:ba:ab:c9:f7:a1:4c:
         b4:fe:a2:ad:ae:33:45:d7:04:b3:4b:e9:2d:bf:68:22:15:7b:
         d5:16:2b:b4:00:47:53:01:ae:c7:82:63:5d:52:ad:29:7c:e0:
         08:99:97:63:aa:74:9f:b3:3b:0d:cb:50:a4:98:2c:5d:90:16:
         7f:2e:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----