Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
File:                     GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft (raw, json)
Hash identifier:          sSMfS48G3D7FBTqFi0XbknbLbACOlyEQ/GNhOuLmGm0=
Subject key identifier:   8D:07:3F:EF:81:44:F3:8D:A6:C9:A2:3A:98:A2:BF:94:F6:01:34:8B
Authority key identifier: 18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71
Certificate issuer:       /CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
Certificate serial:       01962E61B3CB5E0F2300690743AE2BAF96EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: ENddU71AWsbfb-qIFVaxmAFw8qU.roa (hash: XIdLWvH5+lzPfcvEbUgIrNoDUrBQA7L4fLl6rSwliqY=)
                          2: GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl (hash: 9aiAMlMNryB/R+EDLCX6MpFSy8zqKOYMpFpttHZN084=)
                          3: MSDHR_z1F6FqWBNXSkxPnj1ablA.roa (hash: RJ4vnptjVrEEWuf/sAemu9W0c/8mcf0S1SNfmGPwZ+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b3:cb:5e:0f:23:00:69:07:43:ae:2b:af:96:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1808bf7fe48b057f9f2f3d5d1a6310fd9e14c571
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=8d073fef8144f38da6c9a23a98a2bf94f601348b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:08:b9:3f:1b:50:97:d3:70:7e:42:c2:e5:
                    de:d0:f1:84:8e:a7:46:29:cf:0b:a3:ef:65:47:22:
                    d0:b6:e8:e4:a0:36:d5:37:34:dd:a9:94:54:19:81:
                    dc:d3:ee:17:0b:f8:c7:ef:16:ff:a2:92:43:6f:e2:
                    39:09:f5:3b:09:fb:2c:07:b2:75:90:f9:ec:79:ac:
                    3a:46:0a:5a:19:f0:fe:f4:1a:94:12:46:41:fc:eb:
                    0a:40:10:df:f1:83:6f:e5:b3:82:07:a7:28:b4:10:
                    5d:90:82:e3:35:63:15:fb:b7:a6:e5:b3:f0:31:9d:
                    87:25:bf:74:25:0f:d8:72:3a:cf:df:78:c3:32:57:
                    00:57:c3:c8:98:6a:d6:0c:57:d2:8e:b8:dd:2e:53:
                    9d:c4:d1:68:3e:f3:86:aa:e7:17:57:ce:39:06:b7:
                    8b:b9:64:fa:9b:27:16:1a:92:0c:0a:bb:3d:68:45:
                    46:5d:1a:84:59:47:23:51:32:d1:8d:63:62:8e:8d:
                    34:a1:f7:05:b8:08:b2:9d:6c:f1:cb:b8:f9:d2:76:
                    63:8b:77:40:d0:5a:9d:11:a7:21:45:74:3a:e3:8c:
                    54:6c:15:e0:ce:f4:68:b9:4a:45:bb:11:6c:fc:7e:
                    cb:48:d5:9a:45:d4:36:ab:9c:46:6b:6f:73:c6:6d:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:07:3F:EF:81:44:F3:8D:A6:C9:A2:3A:98:A2:BF:94:F6:01:34:8B
            X509v3 Authority Key Identifier:
                keyid:18:08:BF:7F:E4:8B:05:7F:9F:2F:3D:5D:1A:63:10:FD:9E:14:C5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/510c3b-f870-476b-a163-9d392eee0f66/1/GAi_f-SLBX-fLz1dGmMQ_Z4UxXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:08:b8:60:80:df:24:07:05:f8:e1:73:7b:5c:2d:f4:db:88:
         91:cf:97:94:3d:be:01:62:8b:05:bd:19:3f:9a:c4:00:4b:3e:
         9e:ce:5f:7d:34:5f:c2:16:33:2d:b6:21:b8:1a:43:13:88:6c:
         25:36:cd:10:ed:93:44:be:61:fc:27:8c:7c:47:83:2e:83:37:
         aa:e9:74:27:ba:01:11:28:53:17:67:1d:5f:c2:2f:4f:2a:85:
         5a:fc:e4:60:81:0d:85:76:f0:18:02:78:7b:b3:a6:8c:4d:98:
         cf:87:48:a8:c7:56:81:06:6b:f2:b1:d4:a2:1c:b8:a2:33:58:
         72:12:b7:ab:4e:2d:86:48:59:2e:28:91:e2:3e:b3:48:a2:90:
         45:ac:09:8a:85:42:90:7c:2d:dc:8e:50:d1:e4:cd:e4:4b:8b:
         c5:a8:7f:4d:5d:7f:de:1e:5f:7a:03:70:42:ed:bf:6d:ca:d6:
         cc:7b:0a:c3:23:99:b9:be:3c:26:fe:5c:89:85:fa:0a:c4:35:
         11:d3:f5:e1:e1:31:86:6c:fe:27:8d:2d:d3:ba:fb:f8:a5:c2:
         31:71:1f:79:3e:af:00:f2:bf:b0:e9:53:81:a6:7f:24:76:2c:
         23:da:17:f5:27:83:b1:e8:34:19:fd:d7:01:bd:72:60:fc:1d:
         a2:92:18:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbPLXg8jAGkHQ64rr5bvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDhiZjdmZTQ4YjA1N2Y5ZjJmM2Q1ZDFhNjMxMGZkOWUx
NGM1NzEwHhcNMjUwNDEzMDkwMTE3WhcNMjUwNDE0MDkwMTE3WjAzMTEwLwYDVQQD
Eyg4ZDA3M2ZlZjgxNDRmMzhkYTZjOWEyM2E5OGEyYmY5NGY2MDEzNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrYIuT8bUJfTcH5CwuXe0PGEjqdG
Kc8Lo+9lRyLQtujkoDbVNzTdqZRUGYHc0+4XC/jH7xb/opJDb+I5CfU7CfssB7J1
kPnseaw6RgpaGfD+9BqUEkZB/OsKQBDf8YNv5bOCB6cotBBdkILjNWMV+7em5bPw
MZ2HJb90JQ/YcjrP33jDMlcAV8PImGrWDFfSjrjdLlOdxNFoPvOGqucXV845BreL
uWT6mycWGpIMCrs9aEVGXRqEWUcjUTLRjWNijo00ofcFuAiynWzxy7j50nZji3dA
0FqdEachRXQ644xUbBXgzvRouUpFuxFs/H7LSNWaRdQ2q5xGa29zxm3U5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0HP++BRPONpsmiOpiiv5T2ATSLMB8GA1UdIwQY
MBaAFBgIv3/kiwV/ny89XRpjEP2eFMVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMt
OWQzOTJlZWUwZjY2LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MTBjM2ItZjg3MC00NzZiLWExNjMtOWQzOTJlZWUwZjY2
LzEvR0FpX2YtU0xCWC1mTHoxZEdtTVFfWjRVeFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAi4YIDf
JAcF+OFze1wt9NuIkc+XlD2+AWKLBb0ZP5rEAEs+ns5ffTRfwhYzLbYhuBpDE4hs
JTbNEO2TRL5h/CeMfEeDLoM3qul0J7oBEShTF2cdX8IvTyqFWvzkYIENhXbwGAJ4
e7OmjE2Yz4dIqMdWgQZr8rHUohy4ojNYchK3q04thkhZLiiR4j6zSKKQRawJioVC
kHwt3I5Q0eTN5EuLxah/TV1/3h5fegNwQu2/bcrWzHsKwyOZub48Jv5ciYX6CsQ1
EdP14eExhmz+J40t07r7+KXCMXEfeT6vAPK/sOlTgaZ/JHYsI9oX9SeDseg0Gf3X
Ab1yYPwdopIY8A==
-----END CERTIFICATE-----