Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File:                     T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier:          /0vkiSuVH8tfO5DY+jYo+beyqPCvYQaXFubTIcU7Iec=
Subject key identifier:   8B:EB:0C:2E:7D:F1:F2:16:EA:FF:3F:5B:47:2A:31:15:A2:1F:78:7B
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer:       /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial:       01962E986FB0B2F83B0CE208148EACADB0F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number:          117B
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: XljzRaSBXnLr7sQdkBfLo9gAkOwHrKudtuOYIVgTJ/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:6f:b0:b2:f8:3b:0c:e2:08:14:8e:ac:ad:b0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=8beb0c2e7df1f216eaff3f5b472a3115a21f787b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:d1:8c:e3:88:6e:8f:59:f3:cb:98:28:e5:
                    45:a5:57:8a:d4:3a:71:19:f6:cd:6d:68:3b:e3:35:
                    6c:48:9e:70:f6:2a:ad:6f:62:aa:a3:05:38:0f:20:
                    38:78:b9:c4:51:aa:68:fb:8b:1b:76:f5:90:25:64:
                    f3:f8:1d:af:b6:93:2d:56:75:0f:b9:03:20:73:6a:
                    94:de:91:bc:f4:26:65:cc:e5:9e:6a:db:48:32:84:
                    23:ae:a1:ab:c0:77:7b:18:7c:c9:5c:ce:b6:11:4e:
                    0b:89:a3:ea:19:a8:f7:a9:d8:35:c2:ce:8d:ab:68:
                    1f:d0:e2:07:0f:3a:27:03:19:e3:4f:a7:85:36:97:
                    88:ee:7d:cb:8a:03:da:81:8b:9e:2b:c3:32:61:a7:
                    f2:33:ad:0e:b0:4f:ef:65:ce:7a:4c:f8:2f:cb:8a:
                    f1:a9:4d:91:f4:85:8a:68:7e:8c:5b:f1:b8:7f:16:
                    51:ce:38:69:f6:8d:d0:4c:f2:16:02:38:c3:eb:bb:
                    a8:51:5b:36:57:90:85:39:80:7e:46:06:5c:93:90:
                    e9:15:91:d5:c8:52:b1:cd:30:13:77:25:96:77:26:
                    6b:ec:42:65:10:99:b2:95:b5:78:ac:74:65:8f:ae:
                    bd:91:b2:f2:29:dc:7a:ec:c3:63:bf:d3:69:ef:96:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EB:0C:2E:7D:F1:F2:16:EA:FF:3F:5B:47:2A:31:15:A2:1F:78:7B
            X509v3 Authority Key Identifier:
                keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:42:16:39:54:00:a0:d6:02:2e:f0:6a:b0:8e:66:9f:73:92:
         8e:00:6b:f7:a9:d8:43:06:f5:f7:8a:85:bb:b1:b9:a0:5c:42:
         0f:6d:34:b7:79:6a:aa:58:18:78:65:30:a5:3b:be:80:82:74:
         8e:31:48:6c:c4:ce:ed:c9:ad:c2:b9:6a:65:c1:d4:78:0e:64:
         d3:ea:08:03:b7:41:95:67:9e:cf:ed:ce:f2:9e:d9:60:5c:ce:
         91:a2:89:67:7f:df:16:cb:15:8e:62:4b:5e:a8:b3:1e:14:d5:
         7d:3d:ab:76:da:b6:50:4e:b4:27:23:d8:a8:95:6f:26:8d:24:
         e1:0e:58:5e:85:1d:57:0b:1c:e3:15:ce:5f:ae:08:01:38:16:
         14:42:fb:6b:86:02:de:09:9f:15:8d:ba:e6:46:5f:2b:41:f1:
         59:d7:5d:9d:ea:13:de:eb:a7:d0:c9:07:4e:3c:d1:1c:91:01:
         c9:ba:6a:c4:27:43:2b:0d:59:ca:fb:4c:e4:c7:8e:f0:37:df:
         2b:cf:e7:76:86:f4:9c:7f:99:3b:c9:91:ef:77:c1:87:11:23:
         a0:22:46:03:6b:60:42:fa:06:51:da:b7:46:82:ae:b5:b3:06:
         97:a4:97:db:2e:e5:38:6e:1d:f7:27:ed:39:12:69:ff:bf:01:
         1b:62:92:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumG+wsvg7DOIIFI6srbDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNGQ3ZTFhYmIyY2Q4M2U5YTJkZTlhMDZiMzkxYjNhNTI0
NDQ0MWIwHhcNMjUwNDEzMTAwMTA0WhcNMjUwNDE0MTAwMTA0WjAzMTEwLwYDVQQD
Eyg4YmViMGMyZTdkZjFmMjE2ZWFmZjNmNWI0NzJhMzExNWEyMWY3ODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux3RjOOIbo9Z88uYKOVFpVeK1Dpx
GfbNbWg74zVsSJ5w9iqtb2KqowU4DyA4eLnEUapo+4sbdvWQJWTz+B2vtpMtVnUP
uQMgc2qU3pG89CZlzOWeattIMoQjrqGrwHd7GHzJXM62EU4LiaPqGaj3qdg1ws6N
q2gf0OIHDzonAxnjT6eFNpeI7n3LigPagYueK8MyYafyM60OsE/vZc56TPgvy4rx
qU2R9IWKaH6MW/G4fxZRzjhp9o3QTPIWAjjD67uoUVs2V5CFOYB+RgZck5DpFZHV
yFKxzTATdyWWdyZr7EJlEJmylbV4rHRlj669kbLyKdx67MNjv9Np75ZPGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvrDC598fIW6v8/W0cqMRWiH3h7MB8GA1UdIwQY
MBaAFE9Nfhq7LNg+mi3poGs5GzpSREQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMmY2YTAtMWNhYy00NmMzLTg3NDAt
NTFmNWM0NThmMTJjLzEvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMmY2YTAtMWNhYy00NmMzLTg3NDAtNTFmNWM0NThmMTJj
LzEvVDAxLUdyc3MyRDZhTGVtZ2F6a2JPbEpFUkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEIWOVQA
oNYCLvBqsI5mn3OSjgBr96nYQwb194qFu7G5oFxCD200t3lqqlgYeGUwpTu+gIJ0
jjFIbMTO7cmtwrlqZcHUeA5k0+oIA7dBlWeez+3O8p7ZYFzOkaKJZ3/fFssVjmJL
XqizHhTVfT2rdtq2UE60JyPYqJVvJo0k4Q5YXoUdVwsc4xXOX64IATgWFEL7a4YC
3gmfFY265kZfK0HxWdddneoT3uun0MkHTjzRHJEBybpqxCdDKw1ZyvtM5MeO8Dff
K8/ndob0nH+ZO8mR73fBhxEjoCJGA2tgQvoGUdq3RoKutbMGl6SX2y7lOG4d9yft
ORJp/78BG2KSQA==
-----END CERTIFICATE-----