Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
File:                     GjHcqIfYvmBgGdChWToW_9Of1pI.mft (raw, json)
Hash identifier:          2XDWKDozBCg3BW2cj72NOeAivtLrnheaDatHrSNMy6A=
Subject key identifier:   8B:3E:D0:BA:80:9D:41:90:D0:A1:D2:BB:E1:1F:35:34:8E:56:2A:3F
Authority key identifier: 1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92
Certificate issuer:       /CN=1a31dca887d8be606019d0a1593a16ffd39fd692
Certificate serial:       01962E989DC1D9DD09DBBCB86A30C589A714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft
Manifest number:          06CE
Signing time:             Sun 13 Apr 2025 10:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:15 +0000
Files and hashes:         1: GjHcqIfYvmBgGdChWToW_9Of1pI.crl (hash: Lt6DdTKVyJjXpqG8ED91Im0/LBrvSiZPwfeB3yDsVS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9d:c1:d9:dd:09:db:bc:b8:6a:30:c5:89:a7:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a31dca887d8be606019d0a1593a16ffd39fd692
        Validity
            Not Before: Apr 13 10:01:15 2025 GMT
            Not After : Apr 14 10:01:15 2025 GMT
        Subject: CN=8b3ed0ba809d4190d0a1d2bbe11f35348e562a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:3d:cf:c3:00:14:6d:a3:27:ba:48:f0:75:
                    c3:f1:9b:9a:65:cf:41:f6:3a:e9:47:06:f4:3b:30:
                    2f:ff:a6:29:0c:6c:df:00:d6:67:dd:49:17:fe:1c:
                    99:f3:df:23:d4:7a:fc:c8:bc:54:48:1c:af:64:a2:
                    e9:37:ee:b8:6b:0c:79:81:b8:4f:83:20:24:71:30:
                    46:af:31:cc:08:45:3d:a5:ae:21:b2:42:ae:89:19:
                    d0:c4:e2:ad:45:00:d9:0d:c1:dd:cb:26:e3:89:4d:
                    0c:64:a9:cb:d6:4f:27:af:b7:97:47:dc:11:60:be:
                    71:4f:a1:11:ca:74:4e:11:a6:79:35:63:d9:13:e0:
                    cf:9c:fa:01:78:a0:b6:95:69:07:2e:d2:9b:a6:d1:
                    ae:d7:d9:5b:63:f2:90:e2:56:2f:17:77:6d:35:55:
                    b3:ab:2f:68:72:13:15:52:e1:84:90:a0:2e:a4:da:
                    93:ef:ad:6a:c1:ce:fb:e5:a0:72:3e:94:48:68:ca:
                    9a:7b:23:f1:11:eb:1d:32:7e:ce:d1:05:3b:e9:8e:
                    8c:12:29:af:19:5e:41:63:70:89:a1:4f:04:52:7b:
                    ec:0f:8b:4c:fd:1e:84:9e:c9:7e:79:13:b6:61:77:
                    49:3c:ed:e0:ad:ee:81:6e:2e:5a:bb:49:21:b6:35:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3E:D0:BA:80:9D:41:90:D0:A1:D2:BB:E1:1F:35:34:8E:56:2A:3F
            X509v3 Authority Key Identifier:
                keyid:1A:31:DC:A8:87:D8:BE:60:60:19:D0:A1:59:3A:16:FF:D3:9F:D6:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GjHcqIfYvmBgGdChWToW_9Of1pI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2780ce-4f26-4b64-b7f1-90c999d35ed8/1/GjHcqIfYvmBgGdChWToW_9Of1pI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:5e:91:41:74:ca:84:04:54:35:e9:29:0a:52:cd:9a:9a:
         1f:26:a4:03:87:fe:5e:da:51:77:2b:50:05:ac:1f:bf:ff:e8:
         3d:b5:c7:4c:fb:30:53:00:71:33:da:3a:f7:b1:ea:cf:17:a3:
         d3:b3:13:54:21:83:6c:0d:c2:88:ff:08:31:e9:00:c7:e1:c5:
         81:45:27:60:d6:00:54:d3:ff:6a:00:44:b3:5a:23:75:a3:c7:
         fe:b0:a6:e7:be:bc:7b:72:9c:37:21:47:7f:1c:07:d7:f6:e0:
         52:22:b6:cf:1b:cf:ba:48:f7:27:29:4b:d5:e2:c0:d0:33:5c:
         a6:74:46:d9:0d:0f:6c:32:53:38:73:01:85:8c:00:f3:d6:aa:
         aa:ea:9a:d7:18:92:f7:48:a7:0f:90:78:60:18:e6:c9:15:f7:
         4e:f3:a2:64:a3:47:99:33:5e:17:d8:94:8d:90:cf:59:ca:31:
         9c:5b:a9:67:eb:6e:81:98:97:ed:04:ef:5f:12:20:c5:89:93:
         7f:a0:21:da:dc:72:28:1e:77:cd:60:e5:fe:dd:4d:ba:e0:95:
         3a:7d:be:95:ca:84:87:9d:83:76:41:2b:9e:92:82:9e:1b:67:
         fb:eb:c2:73:84:27:97:be:1b:14:f1:90:8a:0f:86:d8:76:1d:
         d2:32:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----