Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File:                     8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier:          GeCTQWo8V424ea/QAa4q5wAAzC0YGn0qoyTLjVN1v1o=
Subject key identifier:   B9:74:8B:EF:72:47:92:EA:87:42:CD:87:7D:95:18:1F:10:1B:6A:F8
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer:       /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial:       01962DF460322EC1F233AA2EBA62843FC9E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number:          0481
Signing time:             Sun 13 Apr 2025 07:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:52 +0000
Files and hashes:         1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: ribvBc+LTrXgPfJChvUlQO42L5tMMI9UHIbUR5W3/OM=)
                          2: ZD2S6baBTMbxPOLjQxmOZb9ReoU.roa (hash: iIrhMwDo93l/J/AT32VhLXHCXDQvEKjJ60z+mXLZ3rc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:60:32:2e:c1:f2:33:aa:2e:ba:62:84:3f:c9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
        Validity
            Not Before: Apr 13 07:01:52 2025 GMT
            Not After : Apr 14 07:01:52 2025 GMT
        Subject: CN=b9748bef724792ea8742cd877d95181f101b6af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:07:6e:92:f2:7c:7d:c3:83:5d:26:44:7f:cc:
                    33:f0:f9:54:54:63:2e:4c:27:80:dd:f0:8f:c8:d2:
                    17:c1:55:e9:03:72:0f:c6:83:7a:29:cd:b6:9a:1a:
                    bc:8b:73:ec:e1:82:14:e0:e9:18:89:cc:82:80:8e:
                    34:2f:5f:6a:75:d7:16:2a:84:f5:77:c0:ca:e8:e7:
                    76:16:c7:86:e7:5d:90:3a:25:7c:4c:17:3c:37:e9:
                    c1:95:05:49:c7:4d:22:3f:14:e0:d1:7e:1d:68:9f:
                    b6:a6:da:c3:5f:24:3d:51:f3:fb:2f:ae:fe:12:69:
                    2c:f4:27:d2:85:5f:ed:90:99:05:a7:af:0f:f5:a3:
                    e3:df:95:db:f8:64:db:b1:7c:de:68:36:52:0a:31:
                    46:e5:50:dd:66:2b:84:72:3d:fc:2d:ad:61:12:fe:
                    92:3d:06:44:59:82:13:49:d0:3d:80:0c:8e:fe:c4:
                    62:23:1c:a1:b7:70:a1:64:17:4e:65:9f:28:cd:8c:
                    92:fe:9c:fa:d1:6d:95:78:a1:c3:ee:e3:45:73:11:
                    f7:5e:bd:12:10:62:7b:46:2e:6f:33:a2:2f:0e:bc:
                    f6:12:76:b6:db:9e:4a:83:3c:b3:1b:17:b5:73:4a:
                    06:10:5b:b0:58:53:cb:f9:0f:4c:c8:42:c6:98:8d:
                    d0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:8B:EF:72:47:92:EA:87:42:CD:87:7D:95:18:1F:10:1B:6A:F8
            X509v3 Authority Key Identifier:
                keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:35:81:13:87:24:c9:76:3e:57:72:16:7e:70:f6:81:46:f1:
         4c:fc:fb:d4:0b:26:85:32:5f:62:e6:d0:20:93:f6:bd:63:13:
         19:14:5b:7f:bb:94:33:18:41:35:c3:bb:9f:f7:ef:32:a2:40:
         8d:3b:4a:99:b3:7d:c5:b2:37:46:81:a7:ea:f2:a8:b0:78:7e:
         a5:dd:5b:90:15:a4:f5:e9:4b:62:e8:b6:9f:22:d8:05:da:e3:
         82:34:8e:5e:ee:f0:e9:e6:99:49:d1:88:b4:46:fc:c1:6a:74:
         92:4e:f3:06:49:0e:2f:03:3b:65:67:e5:8a:06:74:68:db:3d:
         3a:5c:4e:6d:23:ba:4f:9f:68:89:ad:e6:f1:96:43:50:fc:ed:
         05:8c:95:b3:fb:36:d1:49:a5:32:fa:31:5e:e2:d9:ac:57:ce:
         f7:fd:29:5a:4e:b7:47:d7:02:d8:74:23:46:3e:e6:99:75:a9:
         aa:6c:a3:dd:26:c5:ce:70:bd:6e:c3:ee:b9:55:57:c9:74:db:
         0e:63:ce:0c:aa:cd:04:12:31:a6:8e:f5:3c:fa:b0:23:56:59:
         2c:4b:97:35:16:cf:49:d5:c9:c4:05:a5:93:0d:11:ab:da:ec:
         d0:d3:ef:51:a3:09:f6:a4:9b:ef:28:a4:fe:87:67:20:44:c9:
         c8:c8:96:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9GAyLsHyM6ouumKEP8nkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNjFhNWZhMzdlNWNkMTAxNTA4NTI2M2VjMDI5ZTFhZmY3
OTM4ZDcwHhcNMjUwNDEzMDcwMTUyWhcNMjUwNDE0MDcwMTUyWjAzMTEwLwYDVQQD
EyhiOTc0OGJlZjcyNDc5MmVhODc0MmNkODc3ZDk1MTgxZjEwMWI2YWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wdukvJ8fcODXSZEf8wz8PlUVGMu
TCeA3fCPyNIXwVXpA3IPxoN6Kc22mhq8i3Ps4YIU4OkYicyCgI40L19qddcWKoT1
d8DK6Od2FseG512QOiV8TBc8N+nBlQVJx00iPxTg0X4daJ+2ptrDXyQ9UfP7L67+
Emks9CfShV/tkJkFp68P9aPj35Xb+GTbsXzeaDZSCjFG5VDdZiuEcj38La1hEv6S
PQZEWYITSdA9gAyO/sRiIxyht3ChZBdOZZ8ozYyS/pz60W2VeKHD7uNFcxH3Xr0S
EGJ7Ri5vM6IvDrz2Ena2255KgzyzGxe1c0oGEFuwWFPL+Q9MyELGmI3QeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLl0i+9yR5Lqh0LNh32VGB8QG2r4MB8GA1UdIwQY
MBaAFPBhpfo35c0QFQhSY+wCnhr/eTjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYt
MThiMTI4YzhiNDg2LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9jNzkwOTUtOGMyYi00MmEzLTk0NmYtMThiMTI4YzhiNDg2
LzEvOEdHbC1qZmx6UkFWQ0ZKajdBS2VHdjk1T05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDWBE4ck
yXY+V3IWfnD2gUbxTPz71AsmhTJfYubQIJP2vWMTGRRbf7uUMxhBNcO7n/fvMqJA
jTtKmbN9xbI3RoGn6vKosHh+pd1bkBWk9elLYui2nyLYBdrjgjSOXu7w6eaZSdGI
tEb8wWp0kk7zBkkOLwM7ZWfligZ0aNs9OlxObSO6T59oia3m8ZZDUPztBYyVs/s2
0UmlMvoxXuLZrFfO9/0pWk63R9cC2HQjRj7mmXWpqmyj3SbFznC9bsPuuVVXyXTb
DmPODKrNBBIxpo71PPqwI1ZZLEuXNRbPSdXJxAWlkw0Rq9rs0NPvUaMJ9qSb7yik
/odnIETJyMiW5g==
-----END CERTIFICATE-----