Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
File:                     GgAddwJfBSr30OYuFwEBa54i4AI.mft (raw, json)
Hash identifier:          vlTxdcWBuZY4ZWnUhtZTDqkMDqCyGLDukmkhYmV4h6I=
Subject key identifier:   18:90:23:A7:2B:E4:DF:76:03:EF:A0:27:10:94:82:F0:38:58:31:13
Authority key identifier: 1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02
Certificate issuer:       /CN=1a001d77025f052af7d0e62e1701016b9e22e002
Certificate serial:       01962ECF88301AC950C3AFA57EE5A28846E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: GgAddwJfBSr30OYuFwEBa54i4AI.crl (hash: qW1gEFbv+l2vr4CsznzhubpLca9xF4qRHKXRnPBy9fg=)
                          2: _iJsde6qyC_6NAOojw9ckyW4I9Y.roa (hash: eA5RMaI/PSYqnEOMngz7pUxZUouDRioQk9k6T7VnnHw=)
                          3: itzE0xDc7Ed_isK4AHpghv2Rwx0.roa (hash: hFMUWP8HSIa3jUGL4S6vwaZpg8RitcYR7NXIvfp8JAE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:88:30:1a:c9:50:c3:af:a5:7e:e5:a2:88:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a001d77025f052af7d0e62e1701016b9e22e002
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=189023a72be4df7603efa027109482f038583113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4f:82:4b:39:57:09:49:06:11:b9:1c:08:de:
                    a6:bd:1a:c9:13:2e:5d:6f:6b:cb:e5:89:98:1c:71:
                    2e:06:3f:8c:b8:b0:8b:4f:54:b7:4a:e1:03:d9:2b:
                    3b:e6:46:26:e1:aa:a1:10:23:7a:2b:31:e5:e9:7c:
                    26:60:b9:14:08:39:6f:f3:83:fc:88:63:c2:c6:6f:
                    0e:46:a1:ed:f4:06:85:84:57:c6:7d:01:48:04:94:
                    8c:c1:86:35:f1:5c:4b:2c:23:e6:fa:cd:c2:81:87:
                    2b:21:e9:f4:46:59:17:ee:54:ee:4e:33:2f:2b:00:
                    cf:9e:d2:27:4b:3e:d1:fe:19:01:09:a6:0c:e3:98:
                    9c:fc:da:c1:49:0e:5e:2f:30:18:2f:01:02:dd:f3:
                    06:4c:1e:59:76:15:f8:0f:14:0b:a1:6a:7d:89:6b:
                    06:7e:93:86:e8:40:04:a1:30:37:3c:d7:5b:e6:80:
                    9c:77:ca:f1:2c:b9:e6:bb:ee:87:ec:5f:39:47:7c:
                    e6:35:98:eb:8d:10:8c:bd:b9:f2:8f:8e:15:41:2f:
                    83:7b:2e:63:e7:d1:c0:82:03:92:a1:2e:34:41:99:
                    55:7f:0f:34:9d:34:b3:30:b0:48:87:91:93:f9:40:
                    f7:61:0a:8c:08:1f:1b:a6:ed:73:f0:40:9c:a2:e6:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:90:23:A7:2B:E4:DF:76:03:EF:A0:27:10:94:82:F0:38:58:31:13
            X509v3 Authority Key Identifier:
                keyid:1A:00:1D:77:02:5F:05:2A:F7:D0:E6:2E:17:01:01:6B:9E:22:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgAddwJfBSr30OYuFwEBa54i4AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/1f9ced-6bc2-486b-a4b6-09bdeb6afabd/1/GgAddwJfBSr30OYuFwEBa54i4AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:99:a1:3e:02:c3:d8:38:95:ba:96:bd:46:bb:a4:ec:2d:92:
         27:4a:e9:b1:ac:58:53:ea:56:e7:4d:09:53:2d:f1:5c:28:eb:
         c6:a0:8a:a6:45:db:10:af:3d:31:d8:cb:a3:ab:19:15:c8:06:
         18:02:dd:dc:38:e7:e6:68:bf:cd:8a:9b:ed:40:50:52:62:0b:
         1b:db:3b:0d:05:3c:54:19:08:51:bd:15:18:fc:0f:0c:27:c9:
         c2:b5:05:db:fb:da:a1:40:38:07:81:d4:55:53:7c:6b:ab:a3:
         9c:cb:68:d3:1c:20:91:19:6d:63:51:2e:83:89:9b:eb:f8:d9:
         4a:a6:5f:18:4e:5d:fa:60:f8:92:bf:64:53:cd:cf:87:e1:f3:
         07:42:2e:a9:73:2c:e7:16:7b:7d:a5:32:1e:c7:00:ab:86:80:
         b3:c0:2b:44:0f:7a:8f:35:48:c6:b0:17:36:33:6a:05:fd:5e:
         cd:97:b6:7c:9b:a8:fb:4b:a8:cf:49:14:8c:0a:c2:5e:9c:5f:
         49:31:3f:37:ad:d5:27:52:44:79:6e:4e:6c:98:e0:07:84:1b:
         c7:db:68:85:bd:a3:c1:14:4c:5e:be:f6:17:32:1c:c3:3f:ac:
         52:d5:40:7b:60:92:49:5d:16:80:24:6d:2e:1d:dc:1c:56:ce:
         45:f5:68:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----