Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
File:                     GHRUZrThRoMLlit0kG2xxtCB_HA.mft (raw, json)
Hash identifier:          x4xaWNxk0ErYuBhkgdwd857inslQXbewDgs/2T/WKpI=
Subject key identifier:   BB:8A:E3:DF:7B:A5:0D:88:18:65:D0:96:7A:3E:1F:3E:90:9C:BC:FC
Authority key identifier: 18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70
Certificate issuer:       /CN=18745466b4e146830b962b74906db1c6d081fc70
Certificate serial:       01962F06C075D53826465937C8FFD64B7F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
Manifest number:          14B0
Signing time:             Sun 13 Apr 2025 12:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:33 +0000
Files and hashes:         1: GHRUZrThRoMLlit0kG2xxtCB_HA.crl (hash: ircXa7ND1Z5nfSxvxNVO4SdnryJbLk6SsuCGQ7u7nc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c0:75:d5:38:26:46:59:37:c8:ff:d6:4b:7f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18745466b4e146830b962b74906db1c6d081fc70
        Validity
            Not Before: Apr 13 12:01:33 2025 GMT
            Not After : Apr 14 12:01:33 2025 GMT
        Subject: CN=bb8ae3df7ba50d881865d0967a3e1f3e909cbcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:1f:da:ac:88:14:c4:20:c0:37:9a:c1:96:
                    0b:ce:13:d6:28:c8:1e:a8:ae:d8:05:a9:38:89:7f:
                    77:5b:9a:ff:c7:ff:ba:dd:c7:17:59:65:ab:4a:03:
                    44:d4:72:46:ca:96:d7:cf:e8:48:c6:0d:96:f7:8d:
                    c5:6c:b6:b0:9d:91:fa:8a:69:e5:c7:ed:05:e7:df:
                    86:8e:68:1f:18:cf:53:af:e3:25:ab:61:e9:bb:23:
                    23:96:77:65:da:25:81:bc:60:b7:dd:6d:83:20:df:
                    ec:1c:c0:83:b9:b3:3e:99:cd:fc:d1:4e:97:9e:49:
                    63:5a:72:08:85:d7:96:a9:3a:9f:1f:78:15:5c:3c:
                    fa:d1:a8:ae:75:47:e3:81:26:79:51:0b:2e:3b:99:
                    df:9c:9e:a1:34:a5:f3:b1:fb:1f:bd:2a:7f:12:61:
                    cb:7b:db:e9:2b:9d:e8:89:cd:b4:0b:80:f6:25:d7:
                    b2:86:3c:06:e8:d4:c2:d0:76:e5:d7:9d:aa:c3:b0:
                    70:e1:a5:ee:11:59:18:07:3a:bc:12:8e:ad:7b:be:
                    c1:b9:eb:73:75:2c:db:b9:ec:9c:a6:6f:c3:e6:3b:
                    ef:af:3f:8a:23:e6:ea:28:b7:25:7b:3e:06:56:50:
                    42:c4:09:61:89:9f:82:47:30:52:73:a0:ca:06:a0:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8A:E3:DF:7B:A5:0D:88:18:65:D0:96:7A:3E:1F:3E:90:9C:BC:FC
            X509v3 Authority Key Identifier:
                keyid:18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b5:e0:7f:e5:9b:dd:37:75:fe:90:75:b2:13:e9:10:16:6f:
         23:f4:04:89:57:c6:be:c2:06:d5:e5:7f:05:ab:ba:0f:52:47:
         1d:3f:b1:90:b0:7a:61:c6:70:3b:7a:c6:cf:02:f9:78:60:4c:
         25:52:3f:c4:4b:5a:d9:a1:2f:21:95:7a:12:1c:69:71:64:ce:
         4d:2d:72:dd:1a:c2:db:32:c3:47:a8:a2:4a:2a:15:88:70:3e:
         79:d4:74:cb:28:6b:f1:82:20:4c:b0:1b:7b:b7:c6:39:87:93:
         f5:44:0f:6e:7a:64:9e:8c:7c:35:5d:4d:c3:03:36:bc:7e:63:
         0e:26:df:f3:b4:87:1f:91:05:61:65:d8:20:fc:3f:d2:d0:17:
         cb:c3:17:0e:ee:6f:e5:5c:45:f7:92:63:27:24:2f:a5:1a:d9:
         92:5c:2f:0f:ad:40:e8:0e:a5:36:fc:ca:3b:7d:bc:af:28:17:
         22:48:c0:bc:9b:eb:52:e3:9f:f2:38:5f:60:5d:a8:14:12:9b:
         00:7a:3b:54:21:20:ac:3e:ec:82:d2:4c:62:04:5d:7e:f9:ee:
         a4:5b:c2:1c:4f:f1:ce:ab:09:c9:c9:5d:b0:a1:a9:4d:69:ce:
         4c:6e:40:d5:0c:17:3f:02:e4:b4:06:be:2d:0d:0b:ea:7b:ab:
         30:40:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----