Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
File:                     G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft (raw, json)
Hash identifier:          D2bPoFBdv4hmc1vm5/aZNpzwcsdGXrP+agPAVgGwteg=
Subject key identifier:   DD:1D:4A:67:F2:03:EB:A1:72:79:FE:08:58:3A:16:BB:B4:3A:12:CC
Authority key identifier: 1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4
Certificate issuer:       /CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
Certificate serial:       01962F06865F5C45FDF2C3F8394000F34FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft
Manifest number:          0969
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl (hash: qAJjxN5Q68lhMVKV3+dISX9N7lIuilc7Ue3vFpbLG/Q=)
                          2: ogliIW3uJqaM5LS-fzkMZKt_cLk.roa (hash: LLZA+4CzPtqrtq7hIsuRZwdNW4zECVbIb6kWURR2Rw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:86:5f:5c:45:fd:f2:c3:f8:39:40:00:f3:4f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be36fcfb047b8c653ffa327fc2ca51169e947a4
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=dd1d4a67f203eba17279fe08583a16bbb43a12cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:af:e5:f5:28:ea:84:a3:12:34:77:93:e3:7c:
                    f8:fd:6a:52:a9:64:4e:27:e7:53:d6:0e:c8:18:85:
                    46:13:7f:9a:2f:8b:d5:cb:a9:50:7b:80:c9:af:00:
                    72:11:92:c5:ea:13:75:fc:6c:b7:e6:17:f4:97:04:
                    49:33:d8:69:e2:fb:c2:1b:56:43:5a:c9:4b:02:43:
                    5a:e1:c3:01:61:d9:48:a3:7c:48:b1:f0:91:4e:6c:
                    42:e5:e3:47:ed:18:d3:d4:a8:a8:2f:4f:00:0c:55:
                    39:d4:9b:ca:09:59:2c:d5:84:08:ed:9e:f9:c1:04:
                    45:3f:ef:22:bd:3d:67:02:5e:89:c4:3d:ee:88:37:
                    92:c3:f4:a3:ef:36:ed:68:cc:e2:a4:46:84:46:3c:
                    59:75:2b:bb:cd:a5:50:f0:61:51:3f:9e:7a:0b:a1:
                    20:b1:fa:95:a4:bd:6d:c1:3f:dc:62:d1:bb:9a:f1:
                    77:59:56:38:45:a7:ed:1c:be:14:1f:63:a5:08:be:
                    67:9e:75:7f:bf:6b:d7:31:7f:10:a0:20:13:7a:8e:
                    c2:9c:56:3d:43:db:86:73:f2:6f:a3:f8:e5:24:10:
                    43:b6:40:7d:ed:5b:ea:fb:7a:8f:54:8c:ac:14:20:
                    84:7f:31:be:22:b0:5f:7e:f1:3d:11:74:28:96:22:
                    24:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1D:4A:67:F2:03:EB:A1:72:79:FE:08:58:3A:16:BB:B4:3A:12:CC
            X509v3 Authority Key Identifier:
                keyid:1B:E3:6F:CF:B0:47:B8:C6:53:FF:A3:27:FC:2C:A5:11:69:E9:47:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5ddd92-41d6-469f-896c-e0c966c15d5f/1/G-Nvz7BHuMZT_6Mn_CylEWnpR6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:59:46:ce:5c:77:23:17:08:4d:3c:39:7e:1a:09:1c:e3:
         25:21:35:70:75:1c:cd:c3:bb:86:4a:24:57:ff:b8:e8:46:95:
         83:e5:0a:37:dd:fa:11:f7:0a:e3:20:6c:31:41:cc:96:25:01:
         cd:e2:b2:9f:a1:dc:e5:f3:52:07:69:af:96:14:1e:1f:57:18:
         f7:1a:c2:7b:d0:63:ba:32:39:a1:7e:a7:b8:ba:95:57:7a:8e:
         ca:0f:35:81:44:7e:97:f3:d2:e3:13:c2:26:14:43:c6:d5:ff:
         00:39:11:02:a2:b1:6e:fb:ff:01:c5:c6:6f:23:56:48:58:69:
         71:3c:ab:86:d5:e3:aa:c9:8b:fc:50:14:3d:cc:21:db:b9:19:
         94:d5:54:66:0b:c4:ba:bc:a0:b3:88:5f:6d:6a:0e:e0:87:f4:
         5e:53:c5:3f:17:31:2c:23:f4:60:38:e5:46:28:79:64:5a:2d:
         8e:84:4c:19:05:38:aa:7f:e2:47:cf:85:38:a3:00:88:a6:1c:
         42:78:35:da:6e:4c:f1:46:19:1f:6b:72:d0:19:0c:22:e3:52:
         19:00:a2:4f:79:98:2f:28:99:4f:18:28:db:cf:08:07:59:c1:
         19:25:7c:cc:6b:21:6e:71:f9:05:8f:f5:7e:7c:7f:a0:c7:96:
         ba:eb:f1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----