Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
File:                     Gsiv14efVVs88EP38zpmDV5htdw.mft (raw, json)
Hash identifier:          sYTCiZrwGi2dVUsv05rqiYsumuwScgTyVGK1en6wvoA=
Subject key identifier:   6C:F9:A5:BC:1C:0C:BC:7A:A9:C1:5E:21:99:A0:59:1C:61:68:BA:9F
Authority key identifier: 1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC
Certificate issuer:       /CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
Certificate serial:       01962E6196577429EB6A304A1F0E0707709C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft
Manifest number:          0816
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: Gsiv14efVVs88EP38zpmDV5htdw.crl (hash: g3hP19bm4lbYETJ9bgW+azX3bxANj9L0PX1E3bIPwns=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:96:57:74:29:eb:6a:30:4a:1f:0e:07:07:70:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ac8afd7879f555b3cf043f7f33a660d5e61b5dc
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=6cf9a5bc1c0cbc7aa9c15e2199a0591c6168ba9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:07:c2:5c:e8:29:e7:2f:00:76:ec:46:bb:cf:
                    de:0a:05:c6:27:9e:95:ca:fe:f4:75:8a:02:75:52:
                    64:d3:4e:93:93:df:e3:02:51:67:4a:bb:a4:e6:71:
                    2c:8b:4e:d7:f2:c3:c3:77:a7:80:90:9b:4f:64:77:
                    51:ac:43:97:dc:7c:8d:aa:99:04:e9:24:45:8f:4f:
                    85:e9:1e:6c:7f:ff:55:19:07:85:00:27:26:d4:49:
                    1e:f0:c9:a0:65:d1:1e:a5:75:12:bd:a3:5e:a0:27:
                    79:27:c6:53:64:cf:3b:43:e0:1a:a2:1d:17:09:ba:
                    ec:b4:a9:ee:5c:e2:d5:6b:8a:d6:55:02:0d:9e:06:
                    42:02:0c:56:7f:e5:12:39:85:fd:72:c5:18:b3:4d:
                    1a:14:8e:91:84:27:11:03:8b:55:dc:8d:38:36:cf:
                    eb:e7:29:5f:15:eb:25:9d:d6:76:29:61:cf:61:56:
                    06:12:b2:12:2c:13:28:e1:6e:04:05:d8:3e:95:59:
                    a6:49:4f:77:58:42:2c:d5:15:18:33:21:7f:8c:19:
                    80:f8:ab:aa:d3:c6:b8:80:79:ee:9a:fc:e7:7b:63:
                    a9:b0:23:8e:79:ad:6b:f6:f4:9b:21:fa:cb:23:91:
                    06:28:ac:d3:1c:d1:6c:da:0f:03:f1:bb:af:92:2b:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F9:A5:BC:1C:0C:BC:7A:A9:C1:5E:21:99:A0:59:1C:61:68:BA:9F
            X509v3 Authority Key Identifier:
                keyid:1A:C8:AF:D7:87:9F:55:5B:3C:F0:43:F7:F3:3A:66:0D:5E:61:B5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gsiv14efVVs88EP38zpmDV5htdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5765cd-ca98-45cf-a4cd-cb1283735485/1/Gsiv14efVVs88EP38zpmDV5htdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7a:e2:0f:c2:d0:82:ab:c1:a4:a3:a3:9f:d3:f6:8e:c7:8d:
         59:d3:ba:28:71:59:62:d4:46:be:7c:69:82:27:9a:85:ca:26:
         47:ad:2c:9e:bd:5f:8a:26:f0:4f:21:d9:6a:d3:d4:15:03:71:
         23:30:3a:82:25:85:07:e3:9f:46:e7:73:58:16:14:e7:bb:fc:
         5a:94:95:ae:3d:e8:3d:60:71:4d:23:38:9f:74:c1:c5:7a:e7:
         99:32:66:2b:b6:c7:cd:79:8c:5d:3c:b0:be:e8:5b:cf:10:3f:
         e4:32:33:d5:28:48:3c:38:e8:c3:f0:b8:52:db:81:41:2b:09:
         33:df:ff:f4:9b:ec:38:89:9e:da:7e:c8:5c:aa:d7:93:71:5f:
         34:c5:31:b3:74:97:d4:15:eb:d1:ea:66:d5:c1:dd:93:14:b6:
         f6:ac:2e:64:53:f3:42:69:fa:2e:1b:b1:87:be:29:5f:9c:e3:
         07:e9:a5:62:85:c6:09:4b:78:bb:bc:6c:d5:91:8a:58:3a:a0:
         52:68:55:94:2a:04:b5:17:af:d6:c6:32:ba:7e:9f:71:c8:e3:
         32:f2:48:2b:27:c4:c5:35:b8:da:2b:bd:3b:6d:41:84:0e:3c:
         19:9c:33:8d:d3:b9:16:f8:0d:39:bd:cf:5a:16:69:9a:83:b3:
         47:01:70:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----