Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File:                     G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier:          uwz8ZbRDxGTfUA82dyz9zl0xNTgfQnNbXuD5b1H8Ou0=
Subject key identifier:   17:BF:2A:38:CE:3D:AE:56:4C:DC:AB:3D:B5:F0:57:50:D1:8D:86:2C
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer:       /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial:       01962E98F61F2D0F189AC2C46B821F7B56D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:38 +0000
Files and hashes:         1: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: OlqVbcBpHBDpZT63fy/DI/KPqmHCgBYLoC1bOHVYNVU=)
                          2: a6z9s2B5USpArv-yW1XShxJdtpo.roa (hash: hfVnswmh8KT0yGpguvtRDoEqQ95xhx5KsIsgaJn/9yM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f6:1f:2d:0f:18:9a:c2:c4:6b:82:1f:7b:56:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
        Validity
            Not Before: Apr 13 10:01:38 2025 GMT
            Not After : Apr 14 10:01:38 2025 GMT
        Subject: CN=17bf2a38ce3dae564cdcab3db5f05750d18d862c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f5:4f:b8:74:fa:6b:14:23:40:af:47:e1:cc:
                    7d:ed:9e:3d:62:0e:9e:35:48:01:95:72:0e:84:23:
                    ee:2c:4c:94:70:63:44:75:56:86:aa:70:b4:cb:a6:
                    c4:60:5a:ee:fc:9e:30:fb:e9:41:d5:48:eb:67:17:
                    28:c6:64:13:bb:46:a1:62:b4:f5:6c:68:76:e6:ee:
                    18:7a:0d:c7:39:d2:fe:65:17:af:1b:ee:22:53:ef:
                    00:c3:d9:15:89:c2:f5:b8:ec:44:bd:50:17:d7:9f:
                    74:19:4c:38:7f:d7:26:e7:6b:db:a7:79:5e:a8:a7:
                    e6:5d:18:14:2b:e9:ba:4c:e6:25:0b:ba:d8:b2:81:
                    3b:9e:8d:d2:1d:71:fc:14:09:bc:6b:4c:21:1c:c4:
                    c9:00:25:93:ec:27:bf:74:c9:95:1d:ea:3d:46:cd:
                    69:50:3f:12:89:44:63:9f:12:a6:ab:2e:86:1c:1c:
                    36:b8:f1:d8:cd:95:54:c0:03:4e:b9:97:fb:62:13:
                    4f:60:53:5a:44:ff:6d:da:0d:b0:33:83:87:f1:d7:
                    1b:be:82:ec:f8:33:80:a8:ff:7d:61:c8:83:91:10:
                    b9:92:3d:0f:90:b4:03:e6:78:78:4b:c0:1d:e9:a9:
                    f2:03:b4:ac:b9:d4:7f:ea:84:18:0f:da:df:ff:65:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BF:2A:38:CE:3D:AE:56:4C:DC:AB:3D:B5:F0:57:50:D1:8D:86:2C
            X509v3 Authority Key Identifier:
                keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d6:3e:f0:3f:b5:bf:67:62:42:93:19:f1:4f:ef:e9:13:9f:
         dd:f1:25:84:45:5e:75:08:b2:01:8f:93:e5:82:06:79:87:6e:
         e0:29:02:86:56:4a:e1:58:bc:4f:a1:bc:78:8f:71:b5:ee:13:
         78:6b:82:69:bb:82:50:e2:17:15:8a:9a:fb:57:ca:5b:0f:b5:
         c7:c0:4c:7d:6a:ab:7f:50:75:c6:df:77:6c:ef:f0:10:b3:09:
         07:36:fb:1c:47:12:7b:b5:b6:84:c7:f9:f2:3d:51:03:02:c4:
         45:a5:7b:67:fd:77:c5:e6:02:82:db:a6:3f:5a:e4:a5:c8:fd:
         98:4e:c1:77:fc:ea:47:71:c3:42:0e:eb:0c:4c:7b:0c:c3:d1:
         b1:f0:b8:40:e7:09:30:b5:57:f0:eb:70:ff:e4:78:f3:82:f2:
         e6:c7:87:0c:ed:37:ec:27:69:0c:26:3b:72:b8:42:8f:2a:16:
         3a:ed:f5:6b:54:5c:d3:8f:5b:00:58:be:d6:2d:46:dd:ba:20:
         5f:75:f2:b0:66:0c:7b:cd:84:ed:e5:8b:18:c1:f6:2a:7f:ea:
         b4:b0:72:d7:0c:b1:f6:ff:04:14:85:1a:32:aa:d8:6d:8b:f4:
         2a:c2:76:ea:79:66:43:d2:e2:73:77:e7:e6:8a:10:0a:8a:16:
         83:6e:da:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----