Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/703358-b69b-4893-ab4e-e0699d304919/1/gY1FuJShqq5kDmhOV8_bUw36umk.mft
File:                     gY1FuJShqq5kDmhOV8_bUw36umk.mft (raw, json)
Hash identifier:          C5pXEdPSEIbiI7Xh3gUZQOT7qLpfw/eiwS0Khg3vHXA=
Subject key identifier:   C5:7C:4C:8C:39:9B:88:81:09:03:30:02:D1:55:FB:2E:5D:7C:9B:56
Authority key identifier: 81:8D:45:B8:94:A1:AA:AE:64:0E:68:4E:57:CF:DB:53:0D:FA:BA:69
Certificate issuer:       /CN=818d45b894a1aaae640e684e57cfdb530dfaba69
Certificate serial:       01962F063F14DC48411235E62A769A6B53AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gY1FuJShqq5kDmhOV8_bUw36umk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/703358-b69b-4893-ab4e-e0699d304919/1/gY1FuJShqq5kDmhOV8_bUw36umk.mft
Manifest number:          0978
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: gY1FuJShqq5kDmhOV8_bUw36umk.crl (hash: PkAXPCm/dAWyqLwC5kMbDtjbOSwzkwFSURzNwmSYU8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3f:14:dc:48:41:12:35:e6:2a:76:9a:6b:53:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818d45b894a1aaae640e684e57cfdb530dfaba69
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=c57c4c8c399b888109033002d155fb2e5d7c9b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:8e:bf:07:bd:09:d1:d7:7f:f5:c2:8b:d6:
                    6e:83:66:3e:11:15:2b:d7:8c:88:68:2f:fa:4d:94:
                    1f:91:dc:b1:d8:0d:b3:78:ab:c5:2e:a2:a4:da:f4:
                    6c:a5:8a:bf:ca:71:2c:82:04:42:2c:f4:f5:01:9e:
                    d2:00:ad:2e:84:96:a0:37:8c:b0:57:d0:fd:9e:37:
                    bf:eb:a3:da:13:fb:a3:a7:58:18:32:c9:16:e4:17:
                    1f:9b:80:1a:53:f2:6c:76:01:37:ae:1e:8d:47:61:
                    71:12:9e:1e:88:71:83:3d:58:da:a6:55:f8:ee:52:
                    9b:cc:7c:2c:70:18:38:67:62:97:33:47:0c:44:b4:
                    2e:59:c5:24:92:19:30:ee:e1:23:8e:b5:b5:4b:6f:
                    16:94:15:41:e2:fd:cb:c9:bc:99:d6:8b:90:70:fd:
                    20:e7:2a:3d:b0:36:fa:bb:86:e0:39:14:5d:8d:d2:
                    1a:51:da:5a:92:eb:a0:5e:97:c9:7c:49:41:5b:f9:
                    53:a6:37:01:6c:3c:6f:d6:58:a4:f3:bd:4c:17:29:
                    86:fc:6d:f0:71:05:f7:e2:b1:01:28:58:99:9c:ce:
                    1c:a1:da:2f:4c:4f:b9:31:4b:d6:4e:16:4b:56:b6:
                    f2:4c:fa:c1:8f:0a:0e:8e:5e:b8:4d:dc:aa:9f:4d:
                    11:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7C:4C:8C:39:9B:88:81:09:03:30:02:D1:55:FB:2E:5D:7C:9B:56
            X509v3 Authority Key Identifier:
                keyid:81:8D:45:B8:94:A1:AA:AE:64:0E:68:4E:57:CF:DB:53:0D:FA:BA:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gY1FuJShqq5kDmhOV8_bUw36umk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/703358-b69b-4893-ab4e-e0699d304919/1/gY1FuJShqq5kDmhOV8_bUw36umk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/703358-b69b-4893-ab4e-e0699d304919/1/gY1FuJShqq5kDmhOV8_bUw36umk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:84:38:e4:c2:df:06:91:6f:0c:e1:43:81:07:1a:61:87:39:
         bd:dd:70:72:b8:13:cb:d5:64:f3:23:a7:0c:4a:0f:d6:49:da:
         ac:51:6d:f6:af:38:be:1a:41:5c:bf:76:1d:3c:7e:38:c0:10:
         cf:54:1f:1d:06:f9:02:3c:bb:de:bd:54:7e:ac:bc:43:23:ac:
         30:7e:6e:82:a8:5a:14:d6:f6:be:d3:10:1d:e2:ab:66:e0:35:
         47:f3:a7:6f:f1:6a:0e:25:fa:cc:56:a7:20:4e:e3:62:03:dc:
         9a:02:33:8e:5b:e0:64:e0:ed:f1:98:89:bc:5c:21:a8:15:6c:
         8b:fa:06:cf:ee:c3:59:f5:e0:02:af:64:29:1a:84:93:2f:a0:
         d7:0f:39:cb:a2:05:2f:37:5f:14:b8:b5:d9:f9:c7:4a:9e:79:
         24:d7:78:96:ff:72:be:2e:87:3d:8f:b0:9e:47:ac:85:0e:be:
         20:60:78:73:cf:84:e3:fe:ee:a6:d5:53:1f:ca:07:89:c7:17:
         be:44:02:48:16:3e:d8:df:ea:b8:ed:42:40:cd:aa:c6:eb:5c:
         20:a9:13:d5:f1:00:25:0d:85:2c:92:ba:dd:59:be:c6:bf:8b:
         18:53:65:55:c4:44:36:09:ac:09:cd:34:58:b0:a9:d7:cd:73:
         6c:23:c1:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBj8U3EhBEjXmKnaaa1OtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOGQ0NWI4OTRhMWFhYWU2NDBlNjg0ZTU3Y2ZkYjUzMGRm
YWJhNjkwHhcNMjUwNDEzMTIwMTAwWhcNMjUwNDE0MTIwMTAwWjAzMTEwLwYDVQQD
EyhjNTdjNGM4YzM5OWI4ODgxMDkwMzMwMDJkMTU1ZmIyZTVkN2M5YjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgKOvwe9CdHXf/XCi9Zug2Y+ERUr
14yIaC/6TZQfkdyx2A2zeKvFLqKk2vRspYq/ynEsggRCLPT1AZ7SAK0uhJagN4yw
V9D9nje/66PaE/ujp1gYMskW5Bcfm4AaU/JsdgE3rh6NR2FxEp4eiHGDPVjaplX4
7lKbzHwscBg4Z2KXM0cMRLQuWcUkkhkw7uEjjrW1S28WlBVB4v3LybyZ1ouQcP0g
5yo9sDb6u4bgORRdjdIaUdpakuugXpfJfElBW/lTpjcBbDxv1lik871MFymG/G3w
cQX34rEBKFiZnM4codovTE+5MUvWThZLVrbyTPrBjwoOjl64Tdyqn00R1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMV8TIw5m4iBCQMwAtFV+y5dfJtWMB8GA1UdIwQY
MBaAFIGNRbiUoaquZA5oTlfP21MN+rppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1kxRnVKU2hxcTVrRG1oT1Y4X2JVdzM2dW1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC83MDMzNTgtYjY5Yi00ODkzLWFiNGUt
ZTA2OTlkMzA0OTE5LzEvZ1kxRnVKU2hxcTVrRG1oT1Y4X2JVdzM2dW1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC83MDMzNTgtYjY5Yi00ODkzLWFiNGUtZTA2OTlkMzA0OTE5
LzEvZ1kxRnVKU2hxcTVrRG1oT1Y4X2JVdzM2dW1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4Q45MLf
BpFvDOFDgQcaYYc5vd1wcrgTy9Vk8yOnDEoP1knarFFt9q84vhpBXL92HTx+OMAQ
z1QfHQb5Ajy73r1Ufqy8QyOsMH5ugqhaFNb2vtMQHeKrZuA1R/Onb/FqDiX6zFan
IE7jYgPcmgIzjlvgZODt8ZiJvFwhqBVsi/oGz+7DWfXgAq9kKRqEky+g1w85y6IF
LzdfFLi12fnHSp55JNd4lv9yvi6HPY+wnkeshQ6+IGB4c8+E4/7uptVTH8oHiccX
vkQCSBY+2N/quO1CQM2qxutcIKkT1fEAJQ2FLJK63Vm+xr+LGFNlVcRENgmsCc00
WLCp181zbCPB+A==
-----END CERTIFICATE-----