Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
File:                     GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft (raw, json)
Hash identifier:          IIOimllMv1h9pzUmnZ2ZH+LsK7VytTXGgCXv1VeOz8Y=
Subject key identifier:   5F:2E:7B:34:81:CA:FD:72:D0:A3:0E:95:F0:35:48:E4:86:28:7F:47
Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4
Certificate issuer:       /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
Certificate serial:       01962F3DCA2579CD2830CE3F7F8BBB30A49D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft
Manifest number:          1235
Signing time:             Sun 13 Apr 2025 13:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:40 +0000
Files and hashes:         1: 1-iPwYqnaIFqm8UVhvCM9Cf-VdqM.roa (hash: sCHzgAeRpQdZzF/zNLlEwDSVoRCf/M2pntB/Cm9KAcM=)
                          2: GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl (hash: yQW+2cQTurGOn/M4sXfEbAQHRfhzbS4m5CBv/CnxuHQ=)
                          3: LxkUadsRFDdYsFJ-gKw9GVGE9Ho.roa (hash: 88sHhNn/ivNW7D74QIciwn/7KiQqxUap1drrgZ4Kr/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ca:25:79:cd:28:30:ce:3f:7f:8b:bb:30:a4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4
        Validity
            Not Before: Apr 13 13:01:40 2025 GMT
            Not After : Apr 14 13:01:40 2025 GMT
        Subject: CN=5f2e7b3481cafd72d0a30e95f03548e486287f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:42:cd:e1:72:3e:5e:c7:35:76:72:51:31:
                    d9:33:0a:52:d4:cd:37:3f:39:63:b2:68:0a:2a:3a:
                    a5:32:71:e3:61:8d:10:ed:0a:00:af:03:e2:9d:e3:
                    bc:cd:4f:68:53:9e:a7:c4:3b:2f:42:12:a4:08:9c:
                    69:53:27:11:c6:e1:d9:09:3e:0a:26:8b:60:ca:ec:
                    25:16:8a:92:b5:21:77:94:59:67:42:37:93:56:7e:
                    64:e2:5c:57:37:66:8a:36:2b:19:d7:8f:27:a9:24:
                    8e:cf:b2:10:a2:4a:c6:d0:04:7e:83:57:f8:7f:d5:
                    bf:e2:e1:86:d4:62:ee:85:89:a2:37:89:8d:72:b2:
                    66:f2:a8:3b:42:7c:39:15:8b:45:3c:2a:76:33:cd:
                    dc:d3:e4:28:f2:f2:c2:34:00:ac:6f:21:b7:f8:ba:
                    36:ba:39:13:59:d6:0e:68:e8:c5:e4:2d:2f:ac:6a:
                    1e:df:be:5e:6e:b6:2e:94:b3:e8:96:c1:f4:40:52:
                    9c:15:30:09:2c:34:ee:95:db:83:93:42:40:4d:8b:
                    de:b0:52:6e:68:69:71:41:26:76:ff:98:84:50:c1:
                    55:0a:53:5c:88:2d:25:6a:96:8e:51:f8:35:0c:e0:
                    65:e0:9b:01:04:d4:07:62:6b:21:d0:6c:7b:c6:22:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2E:7B:34:81:CA:FD:72:D0:A3:0E:95:F0:35:48:E4:86:28:7F:47
            X509v3 Authority Key Identifier:
                keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:1d:5f:91:96:e7:a9:47:10:77:28:88:08:d5:81:33:e3:
         e0:fd:98:10:f9:30:1b:f5:e6:0e:16:17:7d:ba:7a:fd:fb:83:
         93:c0:bd:73:c4:07:94:82:a9:b4:a7:d3:37:43:6b:c4:af:f8:
         91:b8:8d:03:07:8d:13:80:aa:5f:3c:8a:fe:35:f2:f1:70:05:
         a1:3b:f2:32:65:da:5c:65:5e:f1:03:3d:15:bc:19:90:e2:44:
         c1:dc:91:83:ad:a2:11:9b:19:82:d3:f4:9e:b2:6a:ed:51:f4:
         63:ad:cc:15:e3:cc:0e:77:13:f7:86:83:ab:b0:a2:4c:1c:63:
         8c:72:5e:15:dd:12:c3:43:3a:71:e5:41:f3:24:59:e5:44:12:
         d3:6a:14:fa:35:a1:03:a6:84:15:d5:be:7e:ce:ff:a7:31:70:
         aa:a8:b6:a2:2e:58:d7:3a:77:07:a8:98:90:0b:86:25:06:82:
         42:fc:c2:fc:e4:b2:11:84:47:81:56:3e:48:d1:06:1e:77:0e:
         fa:38:b1:2d:6c:e4:74:66:22:a7:02:d0:86:46:7b:c3:20:1b:
         7f:89:80:13:30:97:1d:71:bc:c0:5d:7a:dc:c8:74:ed:08:69:
         57:1b:d0:f4:59:59:df:4d:52:f4:85:27:e4:53:21:27:be:76:
         4a:60:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----