Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
File:                     GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft (raw, json)
Hash identifier:          LfnrOhsOVnNYEgL+3J/LX1zl73oYPlyZhosT/tBwNoI=
Subject key identifier:   91:10:98:6A:56:3D:8F:D9:90:E0:D5:49:BD:BC:AA:43:E7:30:C0:22
Authority key identifier: 1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A
Certificate issuer:       /CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
Certificate serial:       01962ECF7D4EA07D83754CC5EBC438E8152C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft
Manifest number:          0BD2
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl (hash: mbHdanbbJJvz+ICu55kiIl2CwicsfZi1oi0oxKsfGg4=)
                          2: JoxmLN3rVb0orFwC4m3JMhLjTCQ.roa (hash: PzCXitZFdSdIv2MGzL6nDSn7PkwlOAE3nyB9vmo6lwY=)
                          3: oXajxfRbk6N8eRRiT_ohkuBIZx0.roa (hash: pxyqg3KNDxfYN2gXtBCfn7xtRncbmC2U24gMFivJT6A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7d:4e:a0:7d:83:75:4c:c5:eb:c4:38:e8:15:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad6d2d40fb1d5b2cf95429bfb9319fc2b1cc24a
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=9110986a563d8fd990e0d549bdbcaa43e730c022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:26:d7:3b:ba:5e:ea:c4:21:db:b3:00:1b:
                    b5:bd:a2:65:8e:f7:17:f5:df:14:6b:bd:93:a9:15:
                    2a:c3:bd:44:55:7f:71:80:73:b5:19:28:d9:12:fa:
                    e2:12:74:68:31:df:ed:97:58:38:c2:7a:0d:fb:e9:
                    19:69:0c:30:7c:f4:d0:fe:7d:3e:96:2e:55:ff:38:
                    b6:f7:96:34:1a:23:2d:cd:8d:88:a5:57:47:92:17:
                    2e:16:f8:b3:2b:53:5d:80:ca:a1:0c:00:54:36:22:
                    1f:3b:d9:a5:d4:fb:77:6a:b8:25:80:c1:52:93:84:
                    b5:e9:d0:86:06:4d:d5:e0:e8:e2:d8:1a:0c:01:9e:
                    c1:79:e2:a4:65:a4:34:e5:97:2e:ca:56:4d:3e:56:
                    e9:49:4a:e7:ff:c5:30:8c:06:b9:ea:26:2b:8c:1d:
                    0b:5a:da:14:fc:07:d8:da:c4:f5:69:15:ad:65:66:
                    93:64:48:27:33:fc:cb:56:73:70:08:ad:d6:c5:2e:
                    9b:16:b3:a3:6d:72:50:92:2e:69:ca:9f:0a:df:99:
                    2e:12:57:3c:10:ec:64:85:dd:ce:25:8d:86:56:12:
                    4a:6e:78:06:a8:12:b2:04:58:f0:19:d5:d5:60:9a:
                    77:f0:4e:25:59:7c:b3:4b:9c:b8:6d:00:ec:ec:91:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:10:98:6A:56:3D:8F:D9:90:E0:D5:49:BD:BC:AA:43:E7:30:C0:22
            X509v3 Authority Key Identifier:
                keyid:1A:D6:D2:D4:0F:B1:D5:B2:CF:95:42:9B:FB:93:19:FC:2B:1C:C2:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtbS1A-x1bLPlUKb-5MZ_Cscwko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/61fa3b-4724-4014-8817-bd71effb9b39/1/GtbS1A-x1bLPlUKb-5MZ_Cscwko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:ae:96:db:ef:c3:f2:55:17:1e:cc:41:d4:12:7c:6d:2a:
         e3:dd:3c:c5:d6:80:26:cf:cc:07:1e:ee:7d:e9:c7:89:19:16:
         15:a8:f2:d5:43:c4:4b:f9:aa:81:71:82:f2:15:e9:f6:17:12:
         e8:d0:f1:8b:98:eb:8e:7f:06:f9:1a:bb:99:89:e4:de:28:0f:
         83:63:7f:4c:d9:91:33:15:9f:ff:d1:56:56:67:a5:ab:e4:1e:
         0d:3a:cf:a2:ef:a5:36:b0:31:85:b8:20:17:1d:96:e4:73:c8:
         3f:a6:56:19:89:33:ff:8b:85:49:17:a5:ba:bd:76:71:7a:45:
         7d:8d:57:3a:24:90:90:91:11:b1:d8:d5:8a:ee:64:55:33:dc:
         d1:1d:28:7c:dc:30:ee:5e:dd:ba:ae:9c:6a:f2:cf:04:b6:3d:
         78:36:85:84:32:25:cf:7c:7a:c7:ba:c4:4c:e2:2e:1b:4e:70:
         85:d8:ad:c2:b2:1d:e7:f6:0f:75:df:de:2a:6c:84:a4:9c:9e:
         69:4c:bf:b9:17:13:2e:dc:45:73:64:9a:a2:12:e5:bf:49:7c:
         d3:28:e8:45:45:64:6b:8a:94:ea:44:88:6c:00:d6:4b:48:e0:
         37:93:4d:5c:f4:f6:0d:3c:23:f9:02:53:66:fd:31:d4:52:40:
         8a:55:28:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz31OoH2DdUzF68Q46BUsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDZkMmQ0MGZiMWQ1YjJjZjk1NDI5YmZiOTMxOWZjMmIx
Y2MyNGEwHhcNMjUwNDEzMTEwMTEyWhcNMjUwNDE0MTEwMTEyWjAzMTEwLwYDVQQD
Eyg5MTEwOTg2YTU2M2Q4ZmQ5OTBlMGQ1NDliZGJjYWE0M2U3MzBjMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1Um1zu6XurEIduzABu1vaJljvcX
9d8Ua72TqRUqw71EVX9xgHO1GSjZEvriEnRoMd/tl1g4wnoN++kZaQwwfPTQ/n0+
li5V/zi295Y0GiMtzY2IpVdHkhcuFvizK1NdgMqhDABUNiIfO9ml1Pt3arglgMFS
k4S16dCGBk3V4Oji2BoMAZ7BeeKkZaQ05ZcuylZNPlbpSUrn/8UwjAa56iYrjB0L
WtoU/AfY2sT1aRWtZWaTZEgnM/zLVnNwCK3WxS6bFrOjbXJQki5pyp8K35kuElc8
EOxkhd3OJY2GVhJKbngGqBKyBFjwGdXVYJp38E4lWXyzS5y4bQDs7JFNxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEQmGpWPY/ZkODVSb28qkPnMMAiMB8GA1UdIwQY
MBaAFBrW0tQPsdWyz5VCm/uTGfwrHMJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS82MWZhM2ItNDcyNC00MDE0LTg4MTct
YmQ3MWVmZmI5YjM5LzEvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS82MWZhM2ItNDcyNC00MDE0LTg4MTctYmQ3MWVmZmI5YjM5
LzEvR3RiUzFBLXgxYkxQbFVLYi01TVpfQ3Njd2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegeultvv
w/JVFx7MQdQSfG0q4908xdaAJs/MBx7ufenHiRkWFajy1UPES/mqgXGC8hXp9hcS
6NDxi5jrjn8G+Rq7mYnk3igPg2N/TNmRMxWf/9FWVmelq+QeDTrPou+lNrAxhbgg
Fx2W5HPIP6ZWGYkz/4uFSRelur12cXpFfY1XOiSQkJERsdjViu5kVTPc0R0ofNww
7l7duq6cavLPBLY9eDaFhDIlz3x6x7rETOIuG05whditwrId5/YPdd/eKmyEpJye
aUy/uRcTLtxFc2SaohLlv0l80yjoRUVka4qU6kSIbADWS0jgN5NNXPT2DTwj+QJT
Zv0x1FJAilUogg==
-----END CERTIFICATE-----