Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
File:                     01GoxXA90UCJWao1WSVY_1GiQ-k.mft (raw, json)
Hash identifier:          Opq7K3PVbze4kWvdMG9aLNIz3UxJ2RcNayF3SYt7x+8=
Subject key identifier:   0F:B5:01:00:F6:19:FF:DF:E9:82:D9:AF:CF:44:EA:DC:28:1B:52:E5
Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9
Certificate issuer:       /CN=d351a8c5703dd1408959aa35592558ff51a243e9
Certificate serial:       01962E2B0D3BAF29C2164A5D7F714999F482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft
Manifest number:          0109
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: 01GoxXA90UCJWao1WSVY_1GiQ-k.crl (hash: 6ni2ELnG8g1/UgjTtJZHgEe2mcs7RbkJfUGwHCuvi64=)
                          2: M7R2UHHJlETHSR8o10ZhPmjnSrQ.roa (hash: 48LCEV6BiMysqNLuoMNmOC2etuBDhXK4TMcdmnpSDVw=)
                          3: QBnJw99597zp1MOGO0aw50ZWWWw.roa (hash: Sivngawcknlc7BG16HCXOssKTWMLVcvalL4l8eCv6+o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0d:3b:af:29:c2:16:4a:5d:7f:71:49:99:f4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=0fb50100f619ffdfe982d9afcf44eadc281b52e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:44:b6:9c:d7:18:f8:04:fd:3f:0e:34:e2:
                    03:b7:69:54:09:f5:0a:25:e8:f3:d6:cd:b9:d8:10:
                    17:3f:80:24:07:66:b1:bc:8b:20:25:09:63:b1:15:
                    a6:00:e0:8c:59:ca:f5:f8:fb:96:0f:51:eb:e9:d0:
                    01:93:b7:7d:d4:ab:ba:c0:06:15:1d:cc:94:22:3c:
                    2f:0a:98:24:4b:7a:ab:19:64:7f:73:ec:62:6d:b4:
                    b6:f3:c2:62:05:2c:d2:b3:ff:df:4e:35:8f:d8:34:
                    c2:d0:28:46:fc:53:63:1e:ca:0e:a7:0d:d7:4c:3a:
                    9c:f5:35:b5:72:37:dc:08:c4:cb:06:e1:28:2f:df:
                    75:4b:36:8e:77:c1:c5:5b:7a:8b:d1:dc:17:e8:4b:
                    66:c7:44:2f:8d:e5:4b:af:4e:14:ef:87:e4:db:03:
                    67:01:d9:79:f7:76:1f:eb:5f:c9:e4:ab:85:52:92:
                    45:7f:c1:73:8a:3b:e4:18:bf:d8:42:cb:37:ff:40:
                    be:19:f8:2e:28:0e:b9:aa:8e:0c:91:f4:f6:d2:2b:
                    d5:47:21:27:43:b1:fd:1f:71:18:35:fa:94:f8:76:
                    05:69:e7:06:79:22:ad:2e:2c:4d:3e:c0:04:c2:9c:
                    43:0e:47:17:4b:d2:22:76:f4:df:52:89:c3:19:ce:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:01:00:F6:19:FF:DF:E9:82:D9:AF:CF:44:EA:DC:28:1B:52:E5
            X509v3 Authority Key Identifier:
                keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:6d:1d:1d:b0:98:c1:ee:13:43:d9:87:8f:ed:f9:8c:7a:45:
         73:f3:c6:de:4f:3e:ab:5a:62:7b:a2:c1:2b:eb:ce:26:87:13:
         74:e9:46:94:1e:2e:8d:a5:8d:5a:40:c7:f2:2f:a2:9c:a0:c6:
         b2:b8:c7:f1:99:3b:1b:af:15:a7:e7:76:4d:ce:12:0d:a5:81:
         ed:25:7a:dd:c0:ac:9a:a5:69:f5:71:1a:a7:c7:30:e5:fc:f6:
         cf:cf:76:0c:dd:aa:c8:12:40:5d:fd:c4:54:b9:fc:48:80:c4:
         5e:03:8b:a6:e4:7b:1f:d1:f5:d7:59:18:aa:e0:26:2c:be:56:
         99:44:d7:19:f2:bd:db:05:e4:5a:fe:7c:16:9c:64:98:75:c3:
         ed:07:4f:57:97:f8:0c:fc:2d:cf:7d:e1:5d:7c:82:b7:37:ab:
         d8:49:5e:bc:f2:99:f3:62:da:15:27:ee:31:7e:4f:91:f4:1e:
         c2:06:ac:e9:8f:c3:4e:63:56:4f:61:c0:2a:26:b1:1a:d2:cb:
         f5:d5:09:db:c6:c7:eb:7a:bc:26:5a:e1:62:1e:bd:8e:56:a6:
         04:38:67:e8:59:6f:27:8b:4e:40:57:84:94:5b:66:20:3d:28:
         fe:9b:02:8b:9d:bd:b5:f5:d2:d3:e2:d1:a1:80:f2:b5:0c:1a:
         71:c6:c2:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKw07rynCFkpdf3FJmfSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh
MjQzZTkwHhcNMjUwNDEzMDgwMTM1WhcNMjUwNDE0MDgwMTM1WjAzMTEwLwYDVQQD
EygwZmI1MDEwMGY2MTlmZmRmZTk4MmQ5YWZjZjQ0ZWFkYzI4MWI1MmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFNEtpzXGPgE/T8ONOIDt2lUCfUK
Jejz1s252BAXP4AkB2axvIsgJQljsRWmAOCMWcr1+PuWD1Hr6dABk7d91Ku6wAYV
HcyUIjwvCpgkS3qrGWR/c+xibbS288JiBSzSs//fTjWP2DTC0ChG/FNjHsoOpw3X
TDqc9TW1cjfcCMTLBuEoL991SzaOd8HFW3qL0dwX6Etmx0QvjeVLr04U74fk2wNn
Adl593Yf61/J5KuFUpJFf8FzijvkGL/YQss3/0C+GfguKA65qo4MkfT20ivVRyEn
Q7H9H3EYNfqU+HYFaecGeSKtLixNPsAEwpxDDkcXS9IidvTfUonDGc4t0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+1AQD2Gf/f6YLZr89E6twoG1LlMB8GA1UdIwQY
MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt
ODc3Y2YyMWM4ZjdiLzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi
LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxm0dHbCY
we4TQ9mHj+35jHpFc/PG3k8+q1pie6LBK+vOJocTdOlGlB4ujaWNWkDH8i+inKDG
srjH8Zk7G68Vp+d2Tc4SDaWB7SV63cCsmqVp9XEap8cw5fz2z892DN2qyBJAXf3E
VLn8SIDEXgOLpuR7H9H111kYquAmLL5WmUTXGfK92wXkWv58FpxkmHXD7QdPV5f4
DPwtz33hXXyCtzer2ElevPKZ82LaFSfuMX5PkfQewgas6Y/DTmNWT2HAKiaxGtLL
9dUJ28bH63q8JlrhYh69jlamBDhn6FlvJ4tOQFeElFtmID0o/psCi529tfXS0+LR
oYDytQwaccbCFA==
-----END CERTIFICATE-----