Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File:                     gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier:          s9217j+8Yen4LqlGvKQPYKs3ytNOjdQZ/MF1JphK8cg=
Subject key identifier:   D1:8A:EB:B5:BD:93:90:6D:C1:BA:C0:46:41:09:37:42:86:97:04:1D
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       01962E995A107AF9F2B25D5207928566763D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number:          157C
Signing time:             Sun 13 Apr 2025 10:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:03 +0000
Files and hashes:         1: TVTY8940R-JLK3g0bC-55INlCR4.roa (hash: G8fybb1dVxSY3d5NiOJGlSrI9zs27WohVNGxcPiP+KM=)
                          2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: 1OdGWDX/00H/v2JXWHfj4JLlSYHh7t5g5b9k8XK1UdI=)
                          3: znbCSfa62MjugadmDs4WgFylkOE.roa (hash: BgJAdJjqsI+/hgUR8pI1g1wNl4LGRoW3tmialyMKGr8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5a:10:7a:f9:f2:b2:5d:52:07:92:85:66:76:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Apr 13 10:02:03 2025 GMT
            Not After : Apr 14 10:02:03 2025 GMT
        Subject: CN=d18aebb5bd93906dc1bac046410937428697041d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:03:f3:e7:c4:61:8c:5c:08:f3:98:91:ce:
                    a7:a3:fa:35:ee:c9:c9:b1:ba:e4:a3:72:17:e5:e5:
                    bb:03:fd:cb:3b:74:60:b7:2a:3d:ce:5c:94:71:0a:
                    fc:13:bb:72:b0:3f:6f:fb:55:85:5b:97:c0:34:5b:
                    97:1a:b6:cb:bd:f5:fc:e9:7e:0d:06:c5:58:d6:be:
                    8f:87:c6:cc:d5:9f:c0:e6:82:3c:df:66:0c:64:ee:
                    a7:c0:67:91:33:7c:c6:95:f7:84:ef:73:3a:96:8f:
                    4d:d4:2a:b3:79:ba:96:15:f1:94:d4:c1:5b:9b:8b:
                    1b:2f:18:e2:48:f0:5f:df:2c:f9:f6:7e:4a:25:36:
                    58:d5:11:39:2f:77:e1:c9:d6:7b:d7:1b:b7:d6:f5:
                    81:01:06:8e:f1:18:9c:8d:af:37:27:fc:ac:04:54:
                    26:f9:0a:21:4e:e3:f0:9d:1a:95:92:cf:36:73:c6:
                    c5:6f:07:d5:67:1e:82:25:75:97:5f:08:3e:fb:64:
                    ef:c6:df:c9:83:b9:25:3e:85:9c:d6:df:c0:d5:6a:
                    7d:bc:73:93:95:dd:06:f3:c3:cd:6b:09:6d:13:83:
                    05:dc:60:a5:cb:92:f1:ad:09:6e:b7:dc:5e:77:b7:
                    77:01:86:b0:bd:8c:d5:54:26:d9:7f:f9:0b:8b:1d:
                    e9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:EB:B5:BD:93:90:6D:C1:BA:C0:46:41:09:37:42:86:97:04:1D
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:90:c3:2c:f0:5c:e1:ee:62:b2:05:0a:d0:f5:87:f9:3c:01:
         5f:5c:d6:d3:3b:cf:bb:0d:63:38:36:10:0f:1d:c0:a3:6e:9f:
         cc:ba:4a:ba:92:a5:39:81:21:c3:7c:81:c7:5d:b4:70:c6:86:
         53:09:52:92:77:59:5e:f0:2e:1f:c8:88:5b:84:39:bb:98:a5:
         81:b0:8e:ba:64:9e:52:eb:33:9b:06:a3:ee:f3:d6:a1:55:33:
         ab:29:14:66:a2:0b:74:65:e1:30:66:35:94:e0:c7:bc:89:f3:
         79:7b:99:5c:ce:a6:33:69:5e:be:0e:c9:c5:1b:8b:8b:94:d6:
         94:27:a5:44:31:0a:77:5e:70:d6:45:a7:c8:f1:65:4d:6d:e2:
         c2:cc:69:18:25:ed:74:c8:26:10:cf:96:18:dc:94:ec:56:7b:
         02:e0:08:a6:03:dd:d2:37:0b:ff:06:4a:32:1e:9d:b0:ce:30:
         40:76:5a:d9:5d:bb:b3:7f:99:74:37:15:87:5c:a9:04:f5:f1:
         45:39:3c:f6:79:98:af:0c:ec:47:84:d5:7f:e2:9f:c6:a6:86:
         45:4a:6f:93:fd:5e:0c:9c:73:2f:a5:81:16:99:e4:3a:c7:1b:
         4e:08:15:93:4f:53:98:7c:2f:67:6e:7b:33:93:9f:9c:d0:c4:
         4c:3f:b8:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVoQevnysl1SB5KFZnY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjUwNDEzMTAwMjAzWhcNMjUwNDE0MTAwMjAzWjAzMTEwLwYDVQQD
EyhkMThhZWJiNWJkOTM5MDZkYzFiYWMwNDY0MTA5Mzc0Mjg2OTcwNDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr8D8+fEYYxcCPOYkc6no/o17snJ
sbrko3IX5eW7A/3LO3Rgtyo9zlyUcQr8E7tysD9v+1WFW5fANFuXGrbLvfX86X4N
BsVY1r6Ph8bM1Z/A5oI832YMZO6nwGeRM3zGlfeE73M6lo9N1CqzebqWFfGU1MFb
m4sbLxjiSPBf3yz59n5KJTZY1RE5L3fhydZ71xu31vWBAQaO8Ricja83J/ysBFQm
+QohTuPwnRqVks82c8bFbwfVZx6CJXWXXwg++2Tvxt/Jg7klPoWc1t/A1Wp9vHOT
ld0G88PNawltE4MF3GCly5LxrQlut9xed7d3AYawvYzVVCbZf/kLix3pGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGK67W9k5BtwbrARkEJN0KGlwQdMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZDDLPBc
4e5isgUK0PWH+TwBX1zW0zvPuw1jODYQDx3Ao26fzLpKupKlOYEhw3yBx120cMaG
UwlSkndZXvAuH8iIW4Q5u5ilgbCOumSeUuszmwaj7vPWoVUzqykUZqILdGXhMGY1
lODHvInzeXuZXM6mM2levg7JxRuLi5TWlCelRDEKd15w1kWnyPFlTW3iwsxpGCXt
dMgmEM+WGNyU7FZ7AuAIpgPd0jcL/wZKMh6dsM4wQHZa2V27s3+ZdDcVh1ypBPXx
RTk89nmYrwzsR4TVf+KfxqaGRUpvk/1eDJxzL6WBFpnkOscbTggVk09TmHwvZ257
M5OfnNDETD+4Hw==
-----END CERTIFICATE-----