Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
File:                     gz4OSAQRuciOkW3vkPw6kBAmOUo.mft (raw, json)
Hash identifier:          2zLtKiw29T8Rso2vKG1+szeUpamdLRmXE/gsS4/SEKE=
Subject key identifier:   6F:20:67:D9:91:61:E8:79:94:BB:32:05:79:B9:B2:38:CF:1D:20:2C
Authority key identifier: 83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A
Certificate issuer:       /CN=833e0e480411b9c88e916def90fc3a901026394a
Certificate serial:       01962FAB4B900E13F3514289853D6B293AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: Ihlsr9rpvmkWxK02pmiA4lbKi7A.roa (hash: 1gw28Etq9hJVkaq3S2dfCHriH+wtNxKLqiZRcbkKaJU=)
                          2: SaJps5NdZ3bVeOz3Y_T6YWQuimI.roa (hash: oi4EjPg7CTNf9EIHp927YsWRKdaqfzD1cBc8zdJg5ac=)
                          3: gz4OSAQRuciOkW3vkPw6kBAmOUo.crl (hash: 6etVgIb9IAZMyvljrBs+jQqfLP/TUXxw8uAZn9i+ZDo=)
                          4: ncstDbEEJNmrMxxK2UE_gBED9t8.roa (hash: bytivv4P7l0F7luhHCBlkP+IGUZ4L9tUQ43UhSBpNYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4b:90:0e:13:f3:51:42:89:85:3d:6b:29:3a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833e0e480411b9c88e916def90fc3a901026394a
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=6f2067d99161e87994bb320579b9b238cf1d202c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:a0:c1:2e:4c:ec:89:25:94:88:c3:67:af:
                    12:e2:b8:c8:35:5a:59:21:1d:2e:82:ad:50:7a:f0:
                    9e:81:6d:0d:75:fc:5a:27:03:c2:f4:ce:76:4f:73:
                    df:2d:a1:a8:b1:9e:0c:b5:e0:de:01:62:9e:25:3a:
                    48:57:cb:1e:72:29:99:9a:78:fb:6f:d3:5a:20:2f:
                    2d:fc:62:23:6c:d3:8a:3a:87:76:49:2b:72:f0:74:
                    0b:5a:c2:45:81:a6:1d:f7:42:20:76:67:30:d6:2e:
                    ab:46:a6:91:87:6f:0b:a4:78:66:06:f3:6d:52:df:
                    4c:9f:0c:f9:f0:39:b5:4e:1c:ba:36:62:4e:12:a3:
                    a3:39:28:95:fd:d1:86:db:76:2a:8e:f0:95:13:79:
                    db:e3:fc:34:45:2a:5b:2b:53:e5:90:54:28:8d:fe:
                    bf:fc:cb:33:91:06:56:a2:9a:a6:45:a9:d3:4f:da:
                    4e:ec:3c:7b:4b:16:ec:c2:66:4a:e6:09:60:fe:c8:
                    24:38:77:11:7e:fd:68:bb:8e:8d:f2:3e:c1:a7:8d:
                    48:d8:81:f8:59:5f:ac:ea:e4:9c:a9:ff:5e:64:5c:
                    9f:f0:5a:da:bb:ba:3e:dc:d5:36:87:fb:f1:be:2f:
                    60:d4:89:de:80:dd:ac:ff:cf:4b:73:a0:fb:cd:c8:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:20:67:D9:91:61:E8:79:94:BB:32:05:79:B9:B2:38:CF:1D:20:2C
            X509v3 Authority Key Identifier:
                keyid:83:3E:0E:48:04:11:B9:C8:8E:91:6D:EF:90:FC:3A:90:10:26:39:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4OSAQRuciOkW3vkPw6kBAmOUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a782cc-1e09-4480-a6dc-6c20ebaf30a9/1/gz4OSAQRuciOkW3vkPw6kBAmOUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:5e:56:ef:40:2d:83:b8:5e:52:dd:9b:52:50:59:b0:fc:38:
         d1:a0:b4:41:91:5f:f6:cd:ec:50:c3:be:ec:ab:aa:47:6a:64:
         68:77:93:6c:19:a4:24:6e:41:97:52:43:4a:bd:ca:7f:e4:58:
         f8:0b:9b:68:d8:77:5c:36:eb:45:e7:00:cf:4d:eb:a5:b8:3a:
         b0:d7:8c:41:c5:3e:4a:50:c5:f0:67:f4:ed:73:4e:27:de:a9:
         56:e0:b5:c1:0b:81:c7:62:48:a5:5d:87:b1:d1:c4:6e:3d:4e:
         88:c9:49:6e:4e:99:73:54:83:6b:4a:50:69:15:8e:04:05:1d:
         5a:0f:e7:4b:33:f7:58:bc:74:ba:5b:67:be:92:99:4d:43:ee:
         ce:75:58:78:27:e3:47:a4:bc:08:eb:79:70:83:78:21:9e:a9:
         c9:fa:eb:9e:64:15:2a:b0:9a:ea:e9:f4:74:c2:48:9d:1a:26:
         11:1d:ce:85:6a:0b:26:c9:ee:be:86:b6:c7:5e:ab:7d:4d:9f:
         29:e8:f1:28:68:ea:e5:25:bc:65:7a:28:ec:4e:3c:23:3e:b4:
         aa:fa:65:12:08:21:c3:1f:4c:89:41:0f:6e:36:ff:51:15:5d:
         04:67:18:5e:a8:23:cd:e7:1d:ec:62:c3:04:94:b4:35:e6:24:
         8a:f9:e2:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0uQDhPzUUKJhT1rKTq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UwZTQ4MDQxMWI5Yzg4ZTkxNmRlZjkwZmMzYTkwMTAy
NjM5NGEwHhcNMjUwNDEzMTUwMTE3WhcNMjUwNDE0MTUwMTE3WjAzMTEwLwYDVQQD
Eyg2ZjIwNjdkOTkxNjFlODc5OTRiYjMyMDU3OWI5YjIzOGNmMWQyMDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTmgwS5M7IkllIjDZ68S4rjINVpZ
IR0ugq1QevCegW0NdfxaJwPC9M52T3PfLaGosZ4MteDeAWKeJTpIV8secimZmnj7
b9NaIC8t/GIjbNOKOod2SSty8HQLWsJFgaYd90Igdmcw1i6rRqaRh28LpHhmBvNt
Ut9Mnwz58Dm1Thy6NmJOEqOjOSiV/dGG23YqjvCVE3nb4/w0RSpbK1PlkFQojf6/
/MszkQZWopqmRanTT9pO7Dx7SxbswmZK5glg/sgkOHcRfv1ou46N8j7Bp41I2IH4
WV+s6uScqf9eZFyf8Frau7o+3NU2h/vxvi9g1InegN2s/89Lc6D7zchwdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8gZ9mRYeh5lLsyBXm5sjjPHSAsMB8GA1UdIwQY
MBaAFIM+DkgEEbnIjpFt75D8OpAQJjlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMt
NmMyMGViYWYzMGE5LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9hNzgyY2MtMWUwOS00NDgwLWE2ZGMtNmMyMGViYWYzMGE5
LzEvZ3o0T1NBUVJ1Y2lPa1czdmtQdzZrQkFtT1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl5W70At
g7heUt2bUlBZsPw40aC0QZFf9s3sUMO+7KuqR2pkaHeTbBmkJG5Bl1JDSr3Kf+RY
+AubaNh3XDbrRecAz03rpbg6sNeMQcU+SlDF8Gf07XNOJ96pVuC1wQuBx2JIpV2H
sdHEbj1OiMlJbk6Zc1SDa0pQaRWOBAUdWg/nSzP3WLx0ultnvpKZTUPuznVYeCfj
R6S8COt5cIN4IZ6pyfrrnmQVKrCa6un0dMJInRomER3OhWoLJsnuvoa2x16rfU2f
KejxKGjq5SW8ZXoo7E48Iz60qvplEgghwx9MiUEPbjb/URVdBGcYXqgjzecd7GLD
BJS0NeYkivniSg==
-----END CERTIFICATE-----