Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
File:                     GMGsaILeCJMGD4CRfXuFjFww8GE.mft (raw, json)
Hash identifier:          zq8/czYjf1yw3ZprpnwkbYELKcSgOKQ7v0Ej4j2fxGQ=
Subject key identifier:   CD:A0:CF:1C:4A:B8:6F:C8:4E:A3:C8:FD:29:6C:5E:09:B5:F5:C2:25
Authority key identifier: 18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61
Certificate issuer:       /CN=18c1ac6882de0893060f80917d7b858c5c30f061
Certificate serial:       01962E6201E05BBFE328536BE1688E5463A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft
Manifest number:          099F
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: 1-cZStwlj5eI6jlJCB1BXc15373o.roa (hash: I0GqFp4Dbfgnv5Z9j0gQ2jnYzCKu+2KsKw+2hj0yLI0=)
                          2: GMGsaILeCJMGD4CRfXuFjFww8GE.crl (hash: elHVjQei/AfyOoQ9+HPm2NoAgEYASZJCvJVTWVOAMUc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:01:e0:5b:bf:e3:28:53:6b:e1:68:8e:54:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18c1ac6882de0893060f80917d7b858c5c30f061
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=cda0cf1c4ab86fc84ea3c8fd296c5e09b5f5c225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:e2:89:0d:45:a8:e1:c3:44:a3:47:fe:e9:da:
                    3b:91:d3:6c:20:97:b8:3e:77:d9:f6:bf:34:71:65:
                    4d:d0:9d:64:89:cf:a7:ed:bc:fa:6f:8c:d4:d0:b2:
                    75:51:6a:04:82:c2:eb:2a:88:36:85:ba:c3:3d:72:
                    60:bd:02:f3:29:7a:bb:15:2a:01:eb:b6:43:29:cf:
                    b8:17:e4:94:32:2f:11:30:f2:b2:2b:43:76:35:c8:
                    83:2a:68:f0:a5:b0:e8:f2:c4:c3:37:00:a0:5c:1a:
                    f2:21:0a:68:2d:53:e5:40:e2:6b:8e:51:89:a6:26:
                    a2:2b:1a:58:2e:e0:90:43:62:da:b2:9a:fc:ad:27:
                    dc:14:f6:b6:9b:fe:58:21:2d:15:2c:a1:c0:32:39:
                    97:55:a1:60:60:f0:90:9f:1e:5e:db:93:c3:e9:57:
                    75:7e:82:d5:17:6e:9a:bb:39:fc:52:71:4d:8e:fc:
                    6a:36:68:ec:78:e6:dd:9c:d9:c7:cc:1d:7c:c3:39:
                    c8:95:ad:1e:6f:b2:cc:b8:11:32:e3:48:ed:59:c5:
                    fb:47:a4:cf:cc:b5:65:f2:6f:d4:81:5f:83:ff:6c:
                    eb:9e:4d:78:f4:14:52:60:b2:74:88:3a:e1:08:35:
                    ce:aa:78:47:de:b0:25:77:2a:af:f2:98:bf:fe:a3:
                    d8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A0:CF:1C:4A:B8:6F:C8:4E:A3:C8:FD:29:6C:5E:09:B5:F5:C2:25
            X509v3 Authority Key Identifier:
                keyid:18:C1:AC:68:82:DE:08:93:06:0F:80:91:7D:7B:85:8C:5C:30:F0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMGsaILeCJMGD4CRfXuFjFww8GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/870123-719d-4506-bf86-e8de059278bd/1/GMGsaILeCJMGD4CRfXuFjFww8GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a9:18:d7:ea:d3:1b:49:8c:e1:6b:1d:1b:c0:60:5e:57:b6:
         d1:53:32:75:2f:5f:43:a4:c0:54:f5:12:9c:91:93:05:12:a9:
         e9:2a:74:04:fb:c7:90:8a:ac:c4:bb:cc:6e:c2:06:f6:cb:c0:
         d4:51:f4:30:31:2f:5c:11:8e:d1:55:dd:73:33:a2:c1:9e:fd:
         6d:75:0f:fd:dd:57:c9:73:60:31:71:21:10:da:b4:b9:75:d7:
         6d:58:ec:1d:23:19:11:71:a9:20:ae:ac:5c:87:73:6f:e9:e7:
         ed:f1:89:05:a4:a5:3c:af:1d:b9:c7:97:d5:ff:5b:21:75:07:
         4b:87:cd:c0:f7:6f:a9:13:bb:67:bf:04:a5:b7:c9:6a:43:6a:
         e4:6c:d7:7b:2a:62:92:b4:08:97:18:02:cf:66:55:61:3c:bc:
         8c:bc:4e:ce:8f:00:c1:5c:a0:a1:8d:15:dc:d5:18:3e:04:21:
         35:c3:ac:36:dc:3b:04:bf:ab:c4:49:fd:9c:b7:11:78:f6:b0:
         fd:e0:17:ab:cb:17:94:57:a8:a8:88:15:15:f0:b6:a6:67:cb:
         05:61:bf:1e:de:49:6d:ba:87:2b:de:31:dc:d6:e5:0a:b9:9f:
         37:52:8b:52:85:4c:85:e7:5d:56:bb:f4:46:dd:d8:93:53:8f:
         c5:8b:55:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgHgW7/jKFNr4WiOVGOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YzFhYzY4ODJkZTA4OTMwNjBmODA5MTdkN2I4NThjNWMz
MGYwNjEwHhcNMjUwNDEzMDkwMTM3WhcNMjUwNDE0MDkwMTM3WjAzMTEwLwYDVQQD
EyhjZGEwY2YxYzRhYjg2ZmM4NGVhM2M4ZmQyOTZjNWUwOWI1ZjVjMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/OKJDUWo4cNEo0f+6do7kdNsIJe4
PnfZ9r80cWVN0J1kic+n7bz6b4zU0LJ1UWoEgsLrKog2hbrDPXJgvQLzKXq7FSoB
67ZDKc+4F+SUMi8RMPKyK0N2NciDKmjwpbDo8sTDNwCgXBryIQpoLVPlQOJrjlGJ
piaiKxpYLuCQQ2Laspr8rSfcFPa2m/5YIS0VLKHAMjmXVaFgYPCQnx5e25PD6Vd1
foLVF26auzn8UnFNjvxqNmjseObdnNnHzB18wznIla0eb7LMuBEy40jtWcX7R6TP
zLVl8m/UgV+D/2zrnk149BRSYLJ0iDrhCDXOqnhH3rAldyqv8pi//qPY4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2gzxxKuG/ITqPI/SlsXgm19cIlMB8GA1UdIwQY
MBaAFBjBrGiC3giTBg+AkX17hYxcMPBhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYt
ZThkZTA1OTI3OGJkLzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84NzAxMjMtNzE5ZC00NTA2LWJmODYtZThkZTA1OTI3OGJk
LzEvR01Hc2FJTGVDSk1HRDRDUmZYdUZqRnd3OEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKkY1+rT
G0mM4WsdG8BgXle20VMydS9fQ6TAVPUSnJGTBRKp6Sp0BPvHkIqsxLvMbsIG9svA
1FH0MDEvXBGO0VXdczOiwZ79bXUP/d1XyXNgMXEhENq0uXXXbVjsHSMZEXGpIK6s
XIdzb+nn7fGJBaSlPK8duceX1f9bIXUHS4fNwPdvqRO7Z78EpbfJakNq5GzXeypi
krQIlxgCz2ZVYTy8jLxOzo8AwVygoY0V3NUYPgQhNcOsNtw7BL+rxEn9nLcRePaw
/eAXq8sXlFeoqIgVFfC2pmfLBWG/Ht5JbbqHK94x3NblCrmfN1KLUoVMheddVrv0
Rt3Yk1OPxYtVKg==
-----END CERTIFICATE-----