Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
File:                     GAIUWTANFfrFUHBc9uJYmZ09hro.mft (raw, json)
Hash identifier:          H7ZYNTuA+2Pg6jF3HaliHf66SPxft0Un6iohmRvAjkw=
Subject key identifier:   22:6E:05:65:60:53:BF:48:92:F7:26:82:D6:1C:CA:9D:1F:FE:32:3F
Authority key identifier: 18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA
Certificate issuer:       /CN=18021459300d15fac550705cf6e258999d3d86ba
Certificate serial:       01962DF3F457D969EB6D6EB77211E0C40DA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft
Manifest number:          09CC
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: GAIUWTANFfrFUHBc9uJYmZ09hro.crl (hash: 7FjWimRKxXsv5xCIJtV2Qo0gEmgX1iANrsvC/0yOjzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f4:57:d9:69:eb:6d:6e:b7:72:11:e0:c4:0d:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18021459300d15fac550705cf6e258999d3d86ba
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=226e05656053bf4892f72682d61cca9d1ffe323f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:40:7a:46:48:9c:b6:0f:6c:8b:b0:d4:05:e4:
                    75:90:b5:d8:44:1d:d6:09:0f:6c:49:13:a9:81:d3:
                    03:16:fd:af:f1:62:11:a7:3a:2f:45:24:f8:81:4b:
                    dc:2c:be:69:71:a9:4c:14:74:2c:6f:73:6d:ad:c2:
                    e8:23:7b:c0:6f:b3:fc:a5:47:06:bf:dd:12:8e:20:
                    84:e7:33:08:75:04:31:4e:da:5d:a5:d1:3c:c8:31:
                    ab:36:3d:96:48:0c:47:04:b5:b1:ad:ca:1c:c8:d0:
                    82:fc:1c:d3:ab:bb:2d:3b:dc:e9:ff:bd:61:2f:bd:
                    99:f1:71:34:93:61:f5:8d:fe:7d:95:17:dc:2c:c7:
                    22:bb:f5:dd:49:42:1f:16:30:1a:05:34:a7:64:0a:
                    75:b6:ce:7f:2c:b5:1a:7a:60:b6:f7:bb:a6:e3:ed:
                    3e:d3:e4:f9:46:63:10:e6:1e:c9:aa:11:92:2b:a1:
                    76:44:24:1c:51:4b:d3:9d:72:e6:37:74:94:c2:f5:
                    5a:4b:a9:6e:cd:28:31:46:97:be:aa:2b:58:e7:42:
                    0e:7e:fd:42:be:02:c5:43:a2:68:7b:e2:73:e9:cf:
                    9a:87:00:aa:a4:90:c0:3e:61:0d:cd:a6:08:66:64:
                    cb:27:ce:d9:ba:a2:87:80:b7:a9:1f:9f:d4:cd:67:
                    0c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:6E:05:65:60:53:BF:48:92:F7:26:82:D6:1C:CA:9D:1F:FE:32:3F
            X509v3 Authority Key Identifier:
                keyid:18:02:14:59:30:0D:15:FA:C5:50:70:5C:F6:E2:58:99:9D:3D:86:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAIUWTANFfrFUHBc9uJYmZ09hro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d3327-7084-4ced-9967-9224ce2e965a/1/GAIUWTANFfrFUHBc9uJYmZ09hro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d3:b3:21:27:b4:20:d5:19:a5:df:18:c0:fb:10:6a:fc:62:
         33:dd:f3:8c:96:ad:bb:f9:d4:d8:c1:4e:c0:55:ab:93:eb:1e:
         26:29:ce:43:d2:a5:a2:10:54:6c:0f:55:20:ae:6c:a3:dc:ba:
         5b:2f:c3:aa:86:45:7e:5b:06:9f:cd:03:88:c2:87:d3:d2:13:
         60:f1:af:6c:19:fc:4f:73:5a:83:6b:eb:5c:bf:2a:f7:63:17:
         3d:fc:b5:01:28:21:cd:db:79:99:53:72:bd:1c:2b:29:b2:e6:
         e6:e6:df:d8:53:02:f3:cd:4b:3e:e0:d3:b4:c4:85:2a:d0:eb:
         df:e9:fe:b6:ea:34:28:e1:5c:01:6b:7e:a2:d8:af:40:62:7d:
         18:2a:06:19:24:89:82:65:95:f8:08:eb:63:01:af:ad:14:b5:
         8f:cf:51:eb:c6:ff:8e:69:d9:fa:7f:e6:a0:53:c2:75:57:38:
         36:d3:4c:1d:80:78:5e:74:35:36:eb:78:65:33:8e:63:5b:71:
         b4:78:ac:89:5b:f1:61:84:e2:2c:97:be:1c:5c:5c:5a:da:02:
         2b:51:cd:8e:95:8e:f0:d1:a1:14:68:ea:55:68:db:c3:9c:a9:
         54:76:52:db:f5:58:88:fe:13:a6:bc:80:6d:01:9c:72:9e:2c:
         df:28:08:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/RX2WnrbW63chHgxA2hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDIxNDU5MzAwZDE1ZmFjNTUwNzA1Y2Y2ZTI1ODk5OWQz
ZDg2YmEwHhcNMjUwNDEzMDcwMTI0WhcNMjUwNDE0MDcwMTI0WjAzMTEwLwYDVQQD
EygyMjZlMDU2NTYwNTNiZjQ4OTJmNzI2ODJkNjFjY2E5ZDFmZmUzMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUB6Rkictg9si7DUBeR1kLXYRB3W
CQ9sSROpgdMDFv2v8WIRpzovRST4gUvcLL5pcalMFHQsb3NtrcLoI3vAb7P8pUcG
v90SjiCE5zMIdQQxTtpdpdE8yDGrNj2WSAxHBLWxrcocyNCC/BzTq7stO9zp/71h
L72Z8XE0k2H1jf59lRfcLMciu/XdSUIfFjAaBTSnZAp1ts5/LLUaemC297um4+0+
0+T5RmMQ5h7JqhGSK6F2RCQcUUvTnXLmN3SUwvVaS6luzSgxRpe+qitY50IOfv1C
vgLFQ6Joe+Jz6c+ahwCqpJDAPmENzaYIZmTLJ87ZuqKHgLepH5/UzWcM3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJuBWVgU79IkvcmgtYcyp0f/jI/MB8GA1UdIwQY
MBaAFBgCFFkwDRX6xVBwXPbiWJmdPYa6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZDMzMjctNzA4NC00Y2VkLTk5Njct
OTIyNGNlMmU5NjVhLzEvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZDMzMjctNzA4NC00Y2VkLTk5NjctOTIyNGNlMmU5NjVh
LzEvR0FJVVdUQU5GZnJGVUhCYzl1SlltWjA5aHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANOzISe0
INUZpd8YwPsQavxiM93zjJatu/nU2MFOwFWrk+seJinOQ9KlohBUbA9VIK5so9y6
Wy/DqoZFflsGn80DiMKH09ITYPGvbBn8T3Nag2vrXL8q92MXPfy1ASghzdt5mVNy
vRwrKbLm5ubf2FMC881LPuDTtMSFKtDr3+n+tuo0KOFcAWt+otivQGJ9GCoGGSSJ
gmWV+AjrYwGvrRS1j89R68b/jmnZ+n/moFPCdVc4NtNMHYB4XnQ1Nut4ZTOOY1tx
tHisiVvxYYTiLJe+HFxcWtoCK1HNjpWO8NGhFGjqVWjbw5ypVHZS2/VYiP4TpryA
bQGccp4s3ygIrw==
-----END CERTIFICATE-----