Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
File:                     Gw4VwVrnA6iXkEavXezEky7cf24.mft (raw, json)
Hash identifier:          jdWHYbpDJJ6bvrj6DG8Fgaduf6d+4bwPIfBFKOP9lzY=
Subject key identifier:   D7:67:E6:DD:91:AD:6B:D7:AC:51:C1:54:8E:32:3F:9A:15:39:0C:BB
Authority key identifier: 1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E
Certificate issuer:       /CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
Certificate serial:       01962E99B852E57901B31B49D638210EB367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft
Manifest number:          062C
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: Gw4VwVrnA6iXkEavXezEky7cf24.crl (hash: 7mbwGnWPFX9jBozQmN0+NE8WRgQe/+I3dRjeSBN/Gro=)
                          2: WB9kjcUG_eK70F_25abwXmjO6D0.roa (hash: jo9Io4lvr31QdGnhzj2S5UeQzPHc2sTqLWFX7n7f+po=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b8:52:e5:79:01:b3:1b:49:d6:38:21:0e:b3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0e15c15ae703a8979046af5decc4932edc7f6e
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=d767e6dd91ad6bd7ac51c1548e323f9a15390cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:29:74:16:57:f7:09:24:6c:a6:b9:c3:3e:59:
                    52:d1:47:95:8d:d8:27:eb:2f:3f:f9:bc:e3:4e:cb:
                    a3:e7:0e:9c:c9:db:89:65:2d:a3:34:e7:ef:9f:76:
                    77:16:2e:71:bf:4f:22:45:bc:22:0c:05:2d:50:45:
                    45:b4:64:04:1e:33:0d:c3:6f:81:d8:51:67:e9:bd:
                    25:24:40:ca:e4:97:4b:8c:83:39:bf:b6:ff:33:b5:
                    cc:90:7e:fd:56:5a:9f:0b:bc:fe:1e:c2:40:5e:4c:
                    12:dd:c9:69:88:43:a5:d1:10:29:94:46:f4:a4:ac:
                    f6:79:66:4c:c4:11:13:40:3a:4b:76:4a:43:8f:4f:
                    9c:1d:da:c6:bd:fd:91:76:7c:1b:25:36:40:c8:70:
                    a3:ae:3f:c2:73:90:37:d7:35:d3:24:5f:94:3c:43:
                    40:d3:20:db:5f:41:2e:43:69:ce:cb:f9:54:37:42:
                    3b:e5:42:48:63:1a:0a:8e:39:31:c0:9d:6f:60:cc:
                    50:66:98:77:fb:d9:48:8e:3c:7f:9d:79:18:08:e9:
                    f3:7c:52:29:6a:fe:58:da:0f:f6:f8:5e:b6:c5:4c:
                    51:41:06:88:43:1d:78:25:41:19:be:f9:5f:78:68:
                    64:19:11:b9:0f:1c:93:9e:d1:4d:0d:6c:55:2f:cc:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:E6:DD:91:AD:6B:D7:AC:51:C1:54:8E:32:3F:9A:15:39:0C:BB
            X509v3 Authority Key Identifier:
                keyid:1B:0E:15:C1:5A:E7:03:A8:97:90:46:AF:5D:EC:C4:93:2E:DC:7F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gw4VwVrnA6iXkEavXezEky7cf24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3975b1-074c-4fd0-9661-d1d6c3f92ffb/1/Gw4VwVrnA6iXkEavXezEky7cf24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a3:6d:4c:ef:bc:8a:2a:17:a8:d9:c5:48:96:22:17:82:07:
         0c:cc:f4:f2:59:48:4e:0b:d3:d2:9c:70:b2:fd:e0:51:d4:eb:
         ae:4b:1a:f1:0c:5f:55:5d:03:6e:65:45:63:cf:19:62:38:e6:
         2d:a2:89:63:32:92:33:ec:39:3d:10:23:36:12:6a:5d:55:84:
         42:64:66:0a:3c:2e:97:04:48:3d:6e:e0:3c:08:4d:68:9a:1e:
         ca:19:1a:b3:c8:77:7b:84:16:f9:7a:8a:73:9e:73:0f:52:3d:
         f3:3f:d8:a3:f4:d6:f6:b4:ed:ff:b9:f1:46:b7:56:78:e6:00:
         2d:3f:34:76:a1:3d:28:90:f6:54:6f:a1:5f:17:f7:1c:bf:4f:
         c8:5d:d2:7c:f9:8a:b8:e2:ef:72:5a:2a:3f:7e:ff:32:43:c1:
         86:98:43:d5:5c:ab:75:b0:6d:33:d7:b8:13:40:72:24:74:21:
         d4:cd:b8:50:67:ba:3e:c2:74:54:37:96:b2:a1:0d:85:3b:f4:
         24:5b:46:4f:1e:27:62:06:e0:cf:b3:c2:03:18:85:e5:d3:31:
         a5:95:e8:30:89:85:ac:f7:36:fa:3d:a0:d1:b6:68:2d:aa:f5:
         e1:55:88:ff:df:39:09:57:85:da:13:bc:cd:66:b4:ce:71:b5:
         3f:53:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----