Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
File:                     GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json)
Hash identifier:          Dd+rMNyO4VYoA7KHPQlVvaB12ePc+jPZ/PPFOuRZoQY=
Subject key identifier:   70:6D:A8:47:8C:D5:B0:B0:13:4E:4B:12:25:D2:B8:79:FD:42:89:80
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Certificate issuer:       /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial:       01962F7479DF625A79921432459ADBA8E0BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 14:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:24 +0000
Files and hashes:         1: 7UAk0cN_93o1IqUzEsLzy3OF8t8.roa (hash: X/DccKCPSXNbl5PAX4IP4Kv17+DSYA35yARpxNApl1o=)
                          2: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: d6Reg3Wk+U5/2mjN4kcESWTNNvwXPvpBpUvpATHklGo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:79:df:62:5a:79:92:14:32:45:9a:db:a8:e0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
        Validity
            Not Before: Apr 13 14:01:24 2025 GMT
            Not After : Apr 14 14:01:24 2025 GMT
        Subject: CN=706da8478cd5b0b0134e4b1225d2b879fd428980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:ef:89:68:d3:71:8a:5f:39:da:c8:be:b8:
                    f9:f9:35:fb:04:56:69:06:b1:ea:d8:13:ac:d7:d5:
                    f2:07:ee:8f:aa:f1:60:c5:1d:c6:3a:ec:b5:c4:30:
                    0e:57:d8:0c:d4:20:c6:10:9f:1f:5d:71:14:63:5d:
                    30:6f:dc:ad:63:a7:50:6c:ec:51:b9:1f:e4:0b:99:
                    ff:1d:7b:1d:57:24:ac:bb:f4:f2:1d:4a:9c:27:6b:
                    36:02:ac:1d:87:8b:e2:df:d9:ef:a4:f6:7a:74:d7:
                    53:85:50:2b:0f:7e:b6:ba:ae:a2:bf:0e:94:c8:70:
                    5f:f9:ec:2c:0b:c4:e7:1d:74:98:95:81:3d:c5:2a:
                    93:b2:bc:32:1e:e0:38:9f:6b:c5:4f:f4:b2:6d:e5:
                    91:8f:90:97:d3:a6:dd:c8:7c:86:89:ac:91:9e:53:
                    8c:c2:0b:aa:2c:8d:72:9a:06:dc:fe:17:5c:4e:9e:
                    a0:43:b2:a1:7f:67:96:42:15:65:17:d1:b5:17:4e:
                    11:52:96:bd:a8:6e:4d:e9:4f:68:58:67:d6:ec:b7:
                    8e:f8:7f:63:62:73:51:a3:c5:6d:5a:cc:70:f1:13:
                    a4:6c:1e:0b:5e:07:ca:93:34:93:f1:fd:cc:f5:19:
                    7b:e3:a8:14:07:b5:d8:c6:be:fb:08:42:e5:d3:60:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6D:A8:47:8C:D5:B0:B0:13:4E:4B:12:25:D2:B8:79:FD:42:89:80
            X509v3 Authority Key Identifier:
                keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:33:0c:f9:5d:dc:d2:4a:62:90:0a:47:91:7c:5d:fe:01:
         86:ec:a1:d6:4c:40:75:67:a2:ba:11:ce:b6:48:97:93:64:21:
         6f:a0:96:b3:a8:3a:ea:00:c5:c7:5f:d9:dd:cd:08:1c:93:c5:
         4b:6e:b5:f2:e1:52:1f:54:30:74:3a:4c:ee:d6:66:3f:df:99:
         d0:33:35:a3:31:45:96:5f:a8:23:80:01:9a:f0:76:01:8f:ac:
         0f:6f:16:3e:93:1c:ca:f3:3a:f3:d1:d6:a4:e9:fa:ba:17:83:
         d0:0a:55:09:8f:1d:63:09:7b:79:4f:db:5b:ef:b6:b5:d3:3d:
         93:0c:67:70:c8:8b:ee:1d:fe:eb:9a:0b:3b:2b:fd:cc:ef:a0:
         77:ed:73:1b:75:d5:d8:69:c0:d8:70:74:cf:82:16:c3:9d:30:
         fd:9c:d1:b2:1d:b0:bf:d3:58:6f:a2:93:18:74:bb:a6:31:4d:
         c9:5e:91:81:f8:9d:cf:41:48:d9:8f:3e:ee:24:dd:39:ee:20:
         14:b1:4d:88:60:88:61:26:93:27:12:f3:b0:f2:5e:86:c1:c8:
         09:7c:3a:fa:d8:59:c3:2f:45:33:41:8f:62:dc:60:92:13:19:
         d3:3e:38:8d:45:8e:51:7e:f6:0e:ee:e3:26:dd:6e:60:1d:1b:
         94:c7:2a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----