Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
File:                     Gk-AAcMMrFRuP5IQO0sScy38v1I.mft (raw, json)
Hash identifier:          WdzN8HVXFfuX7GZhGeTL2dpNxRLSVjMfyRkSuEFiB0Q=
Subject key identifier:   51:0C:9C:65:F6:15:4A:C9:A1:A7:37:2E:30:E8:68:99:E6:6C:9A:4F
Authority key identifier: 1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52
Certificate issuer:       /CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
Certificate serial:       0195E00FAFE62FC6595F82039A23EC486324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft
Manifest number:          14C2
Signing time:             Sat 29 Mar 2025 04:01:19 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:19 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:19 +0000
Files and hashes:         1: 03PqHmjkj4TD2ylDKAOumX_8ZTA.roa (hash: x+gVojJiPW6JgGHksggk6Pxvk6Hei1FVA2Qg8c4io0A=)
                          2: F9dWkDI-kpGgHo1RGxktanl_gRQ.roa (hash: BuoIxKvYOd7Wk6s+uxgqf+pVlc2a+8mJGV3BltAm2us=)
                          3: Gk-AAcMMrFRuP5IQO0sScy38v1I.crl (hash: RuLvGDLp/kmfi5vD4JFsO84+ewi3dpnHgBD+C+XBTRI=)
                          4: eWcWfNZ-EfWW-NGvXQCC85ntpH8.roa (hash: JnQ17QGfxQtAemBJMFLXpPFmY/ueJsW7rAduSoORn4I=)
                          5: qa59xb1800lClBGKgPJD3m5Rw8s.roa (hash: g552CxuAT1A0kuubtT8ih3j4BuCostjRts289tICv1Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:af:e6:2f:c6:59:5f:82:03:9a:23:ec:48:63:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a4f8001c30cac546e3f92103b4b12732dfcbf52
        Validity
            Not Before: Mar 29 04:01:19 2025 GMT
            Not After : Mar 30 04:01:19 2025 GMT
        Subject: CN=510c9c65f6154ac9a1a7372e30e86899e66c9a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:01:a4:53:c3:cd:a5:75:74:c5:0c:81:d9:fd:
                    db:73:b9:19:5f:3d:01:17:47:15:58:2c:f9:d7:f1:
                    2a:0e:4a:c4:0a:60:7a:0f:48:24:cd:54:61:a9:f6:
                    ce:d8:5a:27:28:10:fe:b9:58:7d:60:ae:bc:32:b2:
                    a6:06:91:27:91:38:9d:a0:15:ae:1c:a4:25:7a:20:
                    29:9d:bf:26:3d:d7:fd:72:18:ca:c4:1e:66:1f:98:
                    90:24:ca:a3:32:33:dd:a3:61:2c:be:59:3a:70:0a:
                    22:6d:4d:28:0d:1d:80:c6:41:d8:5b:7f:ed:dc:da:
                    21:9f:ab:14:7f:a4:01:2e:0f:03:72:ae:4f:2c:9b:
                    2b:3e:01:24:e9:ce:f0:44:88:26:7c:3b:81:0f:e8:
                    14:24:55:a7:ad:87:98:04:84:e4:94:4c:2f:06:be:
                    fe:05:bb:cc:cc:76:0d:0d:31:33:c9:2f:39:1d:9f:
                    91:7d:11:6f:ca:f6:0e:5e:54:cf:6a:6a:98:02:39:
                    77:75:c8:c9:7e:11:db:ff:56:cc:e0:26:67:e0:d9:
                    d8:db:60:ca:03:ee:d9:6c:50:9d:ce:dc:57:a3:47:
                    2a:a4:05:91:ee:90:f3:04:ab:ff:e7:f2:d0:00:41:
                    40:fe:33:f3:77:c0:36:9a:d7:cf:f4:53:9f:e5:46:
                    10:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0C:9C:65:F6:15:4A:C9:A1:A7:37:2E:30:E8:68:99:E6:6C:9A:4F
            X509v3 Authority Key Identifier:
                keyid:1A:4F:80:01:C3:0C:AC:54:6E:3F:92:10:3B:4B:12:73:2D:FC:BF:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk-AAcMMrFRuP5IQO0sScy38v1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d6c86d-6c65-4a25-a8fa-38d4f3211896/1/Gk-AAcMMrFRuP5IQO0sScy38v1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:77:24:e4:16:e2:d2:e5:9e:8b:38:9b:3f:6d:32:39:83:0f:
         92:ca:58:f3:8f:fa:74:00:aa:34:1d:11:03:bf:d3:67:42:10:
         78:eb:93:eb:24:d9:9c:f3:b7:a4:bf:5b:c8:2e:32:3b:03:b4:
         8a:77:80:1e:79:a2:d2:fc:79:3f:2e:6d:18:0e:ac:d1:05:d8:
         ff:4b:6b:09:69:90:a0:c7:af:e9:e9:0f:87:0e:0f:63:b7:3a:
         e0:39:1e:ae:31:7c:ea:79:ce:95:35:68:30:71:ea:55:4e:a3:
         16:18:4e:57:e6:e5:71:e5:67:04:e9:a1:13:07:38:8c:06:56:
         71:95:6b:f2:30:3f:67:b9:c5:2c:56:1b:ff:7a:f5:f8:10:1a:
         75:03:0b:6b:0b:a8:5d:98:1e:3f:55:ac:4d:ca:09:94:c7:ce:
         56:c9:98:df:60:7d:91:a7:96:86:05:c2:99:a5:03:86:67:fa:
         ef:90:fd:a0:02:9c:ce:52:bc:aa:fd:80:8d:2c:13:43:ce:c4:
         4e:5b:d4:d7:5e:c4:ed:d5:51:66:24:59:1c:26:03:d1:89:b6:
         15:54:14:4e:17:fa:8b:12:b3:28:60:0c:6f:f6:44:b3:6b:85:
         ed:b7:18:6e:67:00:38:e1:f5:e2:05:88:0c:e6:f6:19:e6:07:
         f8:67:c6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----