Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File:                     GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier:          0pwnxdrsdyq6v5AEHNGuUbgz3OTVWwV/wqbtpR05sXE=
Subject key identifier:   FD:45:CC:4D:18:23:96:7C:95:E4:9B:70:C3:CB:DB:C9:C5:9F:D0:27
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer:       /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial:       01962ECF92B87316ED04069E97ACDFA995E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: 5e-_Trj6W_VvY6i2dnnp3w-mcfM.roa (hash: rbJ/g1lxaGdX1l1Qsb1CM90SCy/vuc2QYKPLcuERRRA=)
                          2: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: H2r2CyNnk2C59wjQvSLKzziNuf8NreeYmQMntxfs1Cc=)
                          3: HaiHFPazwgQRJw4yytWvokUzRVs.roa (hash: Pe9HBJh+6DQK8Oywez23C2fyZVdlN/Z1EykYUUEzvY8=)
                          4: S8o_O7bWlN_dw6Lg8CuwZ8LoUHc.roa (hash: jCRliwE7M56nachVgLavJu6eAn/WCFjPFVilXX1EXTs=)
                          5: kRGf0bWxjWUh8sdGXabcomhWjno.roa (hash: 9dSAfgPcrU0QfkObtWRj3oGya1C5FzdCWWHZarkr0hs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:92:b8:73:16:ed:04:06:9e:97:ac:df:a9:95:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=fd45cc4d1823967c95e49b70c3cbdbc9c59fd027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:80:01:6a:8e:99:2a:28:9e:68:b2:e4:88:23:
                    94:cd:91:0d:7f:fe:3e:c8:10:db:9a:71:93:ac:70:
                    6b:3e:8a:24:27:c4:18:d4:e9:1a:16:68:a9:61:ff:
                    b3:93:30:84:b8:93:0d:d6:6e:cc:73:d6:28:df:0d:
                    bb:35:45:0a:96:de:07:21:b2:81:32:ee:b0:f2:c6:
                    02:81:f5:25:b0:02:b2:aa:85:41:4a:b9:64:0f:0b:
                    7e:7f:25:e6:32:9a:32:68:31:f4:55:e2:af:29:76:
                    33:ce:4a:e2:02:45:11:9b:02:7b:a7:04:a8:54:6b:
                    b2:b3:f1:b1:1b:52:18:52:9a:4b:d4:70:a8:1c:f2:
                    b3:73:b9:e6:89:57:b4:84:0f:a8:8b:20:b3:94:7d:
                    63:85:68:44:25:41:a4:30:21:f5:e6:d4:27:0e:6a:
                    96:82:61:c7:ae:c2:cf:26:fd:21:54:8f:5c:ef:c2:
                    d4:7e:bb:37:6a:53:9e:59:02:5b:c3:ca:75:86:33:
                    09:02:14:2d:6c:31:33:e7:73:33:57:25:bd:2c:ea:
                    9b:d8:b9:a0:e3:34:40:fb:aa:8d:cc:d7:9b:f9:51:
                    72:39:7d:8a:28:46:3f:ae:5e:cf:be:c9:df:fd:66:
                    b2:82:8b:e1:56:75:0a:0d:3a:2c:9f:0a:84:07:fc:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:45:CC:4D:18:23:96:7C:95:E4:9B:70:C3:CB:DB:C9:C5:9F:D0:27
            X509v3 Authority Key Identifier:
                keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:64:03:de:e6:42:b2:ab:f0:62:0f:8e:c3:39:6b:4d:0b:79:
         78:f1:1a:96:0f:7e:bf:3b:3f:1b:cd:f3:3a:56:ce:49:eb:75:
         2a:ee:1c:65:58:99:e4:d9:41:6d:6d:ba:f7:77:44:b7:29:4e:
         e7:dd:ee:46:0d:32:4c:56:f9:4c:58:2c:22:e4:08:dd:b9:a5:
         78:44:00:fc:ca:40:2f:8e:12:ce:75:b0:18:09:0e:2a:cf:08:
         9e:23:4c:ca:64:99:15:86:c8:ff:ec:0f:af:e7:d5:ba:d7:bc:
         d2:a6:5f:28:b4:ec:8f:92:70:c4:6e:42:8a:f6:c8:d0:3f:55:
         68:50:1e:df:4d:77:dc:c2:bb:29:a2:e6:77:f5:74:22:5f:1e:
         e4:85:c1:a0:ff:94:ca:7c:9e:d0:02:5d:27:7a:57:01:69:7a:
         b6:e6:49:43:b5:2b:70:f2:07:51:ae:a7:bf:e6:c5:99:05:1a:
         75:d7:b9:f7:1a:6f:7e:a6:d8:4d:f1:e9:4b:e3:0c:27:5c:ff:
         8f:18:bf:9b:74:3e:4d:23:b1:58:c2:ed:ce:be:4d:9f:92:24:
         3a:c0:e2:7a:8b:25:2b:55:4b:90:db:31:d2:3b:01:6b:4a:10:
         8d:46:31:d2:2d:c1:70:90:73:80:68:05:e6:f9:11:02:eb:d8:
         d5:26:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----