Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
File:                     GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft (raw, json)
Hash identifier:          e1dUtCH6Q0vdTkB3IuB8N6MZbjdWx/qrmU5VtQIZtdQ=
Subject key identifier:   40:01:B4:C0:6E:62:A5:A1:A7:15:80:5D:65:CA:5C:7B:24:01:F4:5C
Authority key identifier: 1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03
Certificate issuer:       /CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
Certificate serial:       01962ECFE4C44E492793BFA1B05DC719D484
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft
Manifest number:          1317
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl (hash: 5ztYuDyZ0wKNwNQsUBI4snhP+3D9JzKhLCDQEuF+Iow=)
                          2: eUeAvm73-2L5UqqKdbnJ3M6g16M.roa (hash: Y9d2L+uaXCF5y4wJiUN6TycT1kpDQNqljoU9Xps8N/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e4:c4:4e:49:27:93:bf:a1:b0:5d:c7:19:d4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae1c7aa0b395e0612ec423fe07fb0389aaa4003
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=4001b4c06e62a5a1a715805d65ca5c7b2401f45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:6a:38:11:81:02:2f:26:99:17:c9:65:49:
                    26:64:bc:38:b6:26:d3:0f:df:fe:71:04:68:dd:1d:
                    57:26:08:dc:b2:a7:fa:35:84:47:b2:ba:61:2b:8a:
                    ec:67:a8:81:e3:c6:20:8c:5b:e5:49:10:22:28:11:
                    12:e9:8a:0c:54:e1:c2:54:c8:a6:0b:d4:e0:a2:79:
                    04:80:89:de:b9:dc:fb:ca:92:02:c3:b6:f8:70:27:
                    99:8d:1b:26:48:40:27:25:db:e3:81:74:5b:24:fa:
                    ac:1b:64:17:77:a5:1d:9d:6a:94:a6:af:5f:c6:d1:
                    33:41:2d:f9:f7:57:75:5e:4c:b2:a2:be:99:1c:59:
                    39:e4:b2:b7:32:d0:5f:9b:79:db:68:2c:50:1a:ca:
                    aa:9b:7e:d2:28:8d:a5:25:d8:40:eb:64:1b:f9:f5:
                    f4:c3:73:4a:a5:1a:9c:67:9b:9a:d5:29:0c:2a:81:
                    59:ab:a4:68:69:d4:fa:d3:38:68:b2:b2:63:83:cb:
                    01:34:58:e4:f7:cf:05:fd:e7:8b:71:12:18:f5:43:
                    22:38:b8:13:a8:77:a7:c5:e5:ea:8f:9b:97:1b:46:
                    89:90:5a:e0:1f:bb:5f:60:b7:33:3b:3d:6e:8e:1d:
                    3c:b1:ea:25:64:c4:46:fd:95:f3:72:c3:e3:5f:01:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:01:B4:C0:6E:62:A5:A1:A7:15:80:5D:65:CA:5C:7B:24:01:F4:5C
            X509v3 Authority Key Identifier:
                keyid:1A:E1:C7:AA:0B:39:5E:06:12:EC:42:3F:E0:7F:B0:38:9A:AA:40:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GuHHqgs5XgYS7EI_4H-wOJqqQAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/abe628-fce7-447e-853e-94fdc9fbdcac/1/GuHHqgs5XgYS7EI_4H-wOJqqQAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:36:ac:7a:bb:13:6c:28:ac:54:a2:a3:d1:10:7e:ee:b0:39:
         a5:ef:7d:88:1d:c2:b4:81:6e:78:76:c3:00:fc:f7:9d:33:0b:
         76:87:08:38:70:93:98:60:df:ee:81:64:ca:f8:6f:2c:1b:cc:
         b4:64:11:08:2f:28:20:9a:3d:98:d9:73:00:ce:e0:ba:52:08:
         73:91:03:2a:cf:a6:7d:a8:03:a8:97:48:72:b3:f0:bd:bd:53:
         56:df:e8:a0:99:99:7b:53:2f:57:3a:db:b3:28:42:f4:b3:5b:
         61:87:61:ec:6e:76:4c:6c:e4:65:c1:f0:0f:bb:8c:45:51:ab:
         5b:30:76:21:91:9f:1b:91:f5:7b:ff:be:d7:df:40:e5:cf:3c:
         cd:53:92:db:b5:af:27:6c:ae:32:41:26:ac:47:a2:87:68:d4:
         ca:bd:eb:25:ff:63:e8:99:bd:99:1c:b1:e6:ca:68:4e:aa:2a:
         b6:19:76:b8:f2:2d:ce:cd:5a:41:dd:da:29:e2:04:f9:24:f9:
         8f:49:45:3f:20:5a:17:21:ef:93:2f:7d:46:8b:4a:90:41:1d:
         e3:2f:1f:08:86:26:e1:c7:ba:38:dd:65:ee:dd:54:30:d2:26:
         50:1c:ad:0f:3b:03:dd:de:e2:7f:67:6d:11:e9:98:3d:7e:a1:
         6d:a8:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----