Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File:                     Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier:          ykZgVLNXldlAa+LwyT0jASbfO8HBSTTjO0Mck9T33Mo=
Subject key identifier:   D7:BD:A0:6B:5F:98:1C:83:C0:7F:22:6C:43:BE:6B:4B:7E:30:0D:D9
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer:       /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial:       01962F3D5768831CEA49E503F31FEA171898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number:          08F9
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: 2pz/moolp2WS07I6gm7wGoT1Vla4ZAMnA421oAnbsro=)
                          2: SrGxiEcbv0Zc7-cVhdHTCkDoX9w.roa (hash: iavVdmhGOCEa+iXrvr89fSP+yPeTS+0oRnvgbRj+J3g=)
                          3: qdU5r0eoyeBHUa1NS90_R0v_QXg.roa (hash: VQ2X9ZLs6HKDrETPNNW9FW4YLxSUU+RRG8UFpA6pPfw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:57:68:83:1c:ea:49:e5:03:f3:1f:ea:17:18:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=d7bda06b5f981c83c07f226c43be6b4b7e300dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2e:15:70:21:67:f9:84:32:93:80:a3:4a:1e:
                    05:56:17:43:23:c6:32:e9:b5:90:6c:14:3c:bf:bd:
                    e5:3c:c0:f1:c3:42:6d:6e:eb:9b:8c:4a:a2:ea:1b:
                    1c:91:8b:97:38:58:0f:f4:7c:55:2c:f8:e9:1e:fb:
                    24:d9:24:ea:c2:65:17:96:a3:f9:cf:c9:0c:d3:32:
                    be:28:5d:75:be:0a:4c:a4:40:d9:5b:10:21:b9:c3:
                    1b:b7:46:0a:a5:fe:8b:45:79:73:c0:85:38:00:66:
                    20:30:a5:0c:b1:de:e5:12:00:1e:6e:c1:07:06:2e:
                    f2:70:43:de:d8:0e:24:d6:ba:d8:e2:9c:d2:a3:e0:
                    c4:8a:5e:54:00:4e:60:79:39:61:20:af:c1:7d:f6:
                    4a:78:17:6e:5b:98:79:47:29:9a:97:d0:51:35:34:
                    13:33:af:42:1a:25:e5:c9:c9:18:45:ea:9d:4b:e3:
                    9a:d0:9b:21:7c:ce:83:41:bd:29:8b:51:17:92:6d:
                    ee:1b:23:f0:85:3d:c5:94:b6:3d:a0:9a:56:ac:7e:
                    b9:33:78:9b:dd:51:e5:6e:80:50:d0:e6:a5:66:b1:
                    cc:0c:de:e6:7b:9c:71:e2:c9:92:78:3c:e1:71:59:
                    3d:70:92:d8:29:1a:c4:ed:df:4c:2c:93:8a:91:d9:
                    a2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BD:A0:6B:5F:98:1C:83:C0:7F:22:6C:43:BE:6B:4B:7E:30:0D:D9
            X509v3 Authority Key Identifier:
                keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:81:d9:34:b0:c6:02:41:59:de:22:45:7d:37:a5:77:d0:02:
         8c:e3:5b:53:ed:0b:19:75:f1:ac:99:d5:11:d3:38:97:a8:62:
         ea:e2:c5:37:ab:f6:5d:18:2e:25:a3:6d:3a:05:14:dd:21:48:
         3a:58:ba:99:18:d7:c4:e0:05:95:bf:dd:92:33:ad:88:d2:83:
         d9:4d:39:02:0c:61:64:7f:13:d3:1d:80:b9:41:4a:47:2b:37:
         6c:39:36:66:fc:4d:dc:0d:b7:23:c2:12:8b:75:47:5d:f3:20:
         d2:8e:c9:61:25:b5:f1:7d:bb:02:26:3d:07:97:c3:c8:45:8c:
         ef:1e:09:59:40:8d:cf:16:41:7b:e0:a1:eb:3b:40:c5:ce:25:
         a0:38:3a:59:cc:90:36:75:d8:1a:5c:26:b0:0d:91:77:11:d2:
         d4:99:7f:49:71:19:57:63:1f:e3:36:50:e1:bc:06:a9:8e:8b:
         10:ad:d4:3a:50:42:71:7d:22:09:e2:3d:87:17:b5:2c:db:95:
         f4:2e:31:78:97:27:39:9a:e5:28:e0:28:19:8d:82:79:fb:77:
         03:ca:fa:d6:54:f7:94:79:c0:09:8a:db:00:47:a3:ce:c5:87:
         22:d0:d2:cd:68:3f:e3:c4:ba:5d:5d:18:0b:c0:0c:d0:b4:1e:
         24:fc:d8:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVdogxzqSeUD8x/qFxiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWFiYTdkYTdjOGYzNmM4YjI3NWNhNzM4NDkxY2VkY2Ni
NWUzMTIwHhcNMjUwNDEzMTMwMTExWhcNMjUwNDE0MTMwMTExWjAzMTEwLwYDVQQD
EyhkN2JkYTA2YjVmOTgxYzgzYzA3ZjIyNmM0M2JlNmI0YjdlMzAwZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6i4VcCFn+YQyk4CjSh4FVhdDI8Yy
6bWQbBQ8v73lPMDxw0JtbuubjEqi6hsckYuXOFgP9HxVLPjpHvsk2STqwmUXlqP5
z8kM0zK+KF11vgpMpEDZWxAhucMbt0YKpf6LRXlzwIU4AGYgMKUMsd7lEgAebsEH
Bi7ycEPe2A4k1rrY4pzSo+DEil5UAE5geTlhIK/BffZKeBduW5h5Rymal9BRNTQT
M69CGiXlyckYReqdS+Oa0JshfM6DQb0pi1EXkm3uGyPwhT3FlLY9oJpWrH65M3ib
3VHlboBQ0OalZrHMDN7me5xx4smSeDzhcVk9cJLYKRrE7d9MLJOKkdmi7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe9oGtfmByDwH8ibEO+a0t+MA3ZMB8GA1UdIwQY
MBaAFBqqun2nyPNsiydcpzhJHO3MteMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hNzNmMDktMWI5ZC00YzI2LWIwMWQt
MGU4YTk0ODVhOWEyLzEvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hNzNmMDktMWI5ZC00YzI2LWIwMWQtMGU4YTk0ODVhOWEy
LzEvR3FxNmZhZkk4MnlMSjF5bk9Fa2M3Y3kxNHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIHZNLDG
AkFZ3iJFfTeld9ACjONbU+0LGXXxrJnVEdM4l6hi6uLFN6v2XRguJaNtOgUU3SFI
Oli6mRjXxOAFlb/dkjOtiNKD2U05AgxhZH8T0x2AuUFKRys3bDk2ZvxN3A23I8IS
i3VHXfMg0o7JYSW18X27AiY9B5fDyEWM7x4JWUCNzxZBe+Ch6ztAxc4loDg6WcyQ
NnXYGlwmsA2RdxHS1Jl/SXEZV2Mf4zZQ4bwGqY6LEK3UOlBCcX0iCeI9hxe1LNuV
9C4xeJcnOZrlKOAoGY2Ceft3A8r61lT3lHnACYrbAEejzsWHItDSzWg/48S6XV0Y
C8AM0LQeJPzYVA==
-----END CERTIFICATE-----