Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
File:                     GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft (raw, json)
Hash identifier:          qlKurcAf1kX7P3x50terXPp+b1FMXV8nuJEQkwDDvRo=
Subject key identifier:   37:19:A4:E4:4B:9F:FF:BB:7E:11:D1:0C:9F:85:08:EE:7F:D2:06:B3
Authority key identifier: 1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F
Certificate issuer:       /CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
Certificate serial:       01962F3D6F04FFB60E00190E8FD9D5F487DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft
Manifest number:          0FB7
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl (hash: kzO9c23R+eGDthPWHi2RmEnlH4nUiZRhibR4yZzk0wk=)
                          2: fhVodD3Al80st-44wh_3zJPa9hw.roa (hash: fjogseqmXaDswGCqZQtmESnsh5NfjXgWetNNokS6YuY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6f:04:ff:b6:0e:00:19:0e:8f:d9:d5:f4:87:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b18e0a19ae790fa503951559f47d41b47e7fd0f
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=3719a4e44b9fffbb7e11d10c9f8508ee7fd206b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:b2:77:c1:c9:66:75:dc:10:55:2f:5d:b8:
                    07:07:6c:42:f5:e8:33:8f:85:ba:d2:83:8d:ea:b1:
                    32:ec:5d:7e:12:be:55:22:ef:06:6c:17:35:14:d1:
                    95:d4:d5:11:5a:d3:07:53:c9:7d:16:1b:38:74:d9:
                    67:ff:5b:06:bc:b7:b1:08:dc:ea:97:ec:01:1a:b3:
                    c2:0c:f9:fd:8d:b2:ec:db:9d:b5:77:54:81:31:e7:
                    ca:5f:b2:24:78:25:15:d4:3d:8f:00:46:fd:53:a8:
                    f2:ab:d9:9c:11:78:6d:09:f9:f1:02:4f:70:5e:4e:
                    4c:fb:12:94:c7:3a:42:d0:08:99:bf:a3:5f:46:cb:
                    8c:04:55:6a:39:2b:ed:f9:1a:b8:4e:ca:52:1e:38:
                    33:14:c8:cf:ca:e7:e3:81:f5:ab:28:55:6d:0a:5c:
                    34:0a:40:51:b1:69:a2:90:4f:03:f2:c6:c1:02:ad:
                    7b:43:f3:2f:26:e9:f5:5e:19:c6:dc:09:b2:88:a0:
                    e9:fb:26:07:3a:49:47:88:ec:7d:68:37:a3:4a:9c:
                    5a:17:e1:17:00:b2:ec:0e:c7:78:ed:94:b0:62:c4:
                    2e:ec:54:0e:9a:fc:8b:36:5c:3b:d8:a1:2c:dd:fe:
                    0a:06:2f:fd:9e:f1:eb:89:88:73:57:4e:b2:4d:09:
                    af:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:19:A4:E4:4B:9F:FF:BB:7E:11:D1:0C:9F:85:08:EE:7F:D2:06:B3
            X509v3 Authority Key Identifier:
                keyid:1B:18:E0:A1:9A:E7:90:FA:50:39:51:55:9F:47:D4:1B:47:E7:FD:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f2e2c9-ceab-4d7b-a9d8-a105776c3347/1/GxjgoZrnkPpQOVFVn0fUG0fn_Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:dc:eb:e8:cd:eb:9b:8d:a6:47:da:f5:d5:6c:38:3c:c5:dc:
         5e:a2:c1:a9:60:a7:2c:85:d4:ea:8f:69:49:06:a5:12:71:38:
         6e:0b:93:78:c0:e6:02:84:90:22:1b:7f:80:0d:d5:cc:6e:8f:
         4d:1a:e2:27:b5:d5:03:bd:c2:a5:72:59:5c:54:91:ba:01:f7:
         4e:6d:76:9e:f6:23:7b:1c:93:c5:20:1c:84:db:20:e0:87:0d:
         e9:42:58:bc:36:00:87:8a:c6:42:af:6e:3f:28:39:41:b1:e2:
         fd:78:85:02:e7:23:79:fb:a9:36:b5:bb:43:a2:79:cc:12:a4:
         7a:75:d0:78:9e:d4:be:91:0b:fc:78:d0:30:e7:6f:33:a0:c5:
         ee:93:48:36:a2:8b:e7:1c:fe:2c:c0:a3:8f:ca:5a:f8:3b:36:
         de:1a:fe:78:09:1a:7a:91:cf:1a:9a:84:10:92:66:e8:78:cb:
         2d:82:c2:3d:ce:f4:6c:05:ec:c0:8f:25:fa:34:c4:86:76:7a:
         3c:2a:36:58:54:c2:a8:0a:ce:fe:ba:45:db:79:2d:2f:b7:dd:
         cc:b3:a8:c5:e5:bb:0a:5b:c7:3c:59:0c:0c:39:80:49:89:16:
         97:08:0c:fc:1d:85:f3:4c:70:c9:bc:5c:f3:cc:b1:31:13:e2:
         d0:07:7f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----