Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
File:                     GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft (raw, json)
Hash identifier:          ZYA6tDelGcMgJ9u7T0zLGN3i4bwvUQ7iUqxSZAse5fY=
Subject key identifier:   83:87:88:84:1E:01:CC:48:86:E8:BA:52:2C:6C:8C:D7:7E:4F:F1:15
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Certificate issuer:       /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial:       01962FAB2FB78377FC0AD410C6C52A774BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
Manifest number:          0981
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl (hash: jk+ekGcfsOVv08JhcnDy6P4Rpm9P3tTGmTczezBZLuQ=)
                          2: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (hash: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2f:b7:83:77:fc:0a:d4:10:c6:c5:2a:77:4b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=838788841e01cc4886e8ba522c6c8cd77e4ff115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f1:f6:30:17:32:58:90:5f:ff:f6:1e:61:32:
                    50:a5:d5:1b:20:ce:20:90:20:05:75:09:98:82:06:
                    6e:00:b4:9f:79:af:81:be:86:a5:d8:ee:db:7b:66:
                    98:f4:7c:7f:6a:e3:76:5c:da:b8:02:72:d5:60:09:
                    c5:9c:c0:f7:6f:a7:db:b0:55:c9:e6:eb:32:be:75:
                    a1:be:3a:76:29:0e:1f:d7:5a:3d:c6:2b:68:53:10:
                    d6:35:55:c7:13:3e:b7:9f:1a:c1:ba:bf:32:27:80:
                    76:7f:61:3d:e8:f9:1f:1d:05:53:3c:07:be:f8:c5:
                    07:99:a8:f0:7b:70:07:5d:97:c5:13:1b:05:2b:3a:
                    f8:6a:d7:e9:d4:02:c0:3d:83:bf:8f:0f:73:fa:a4:
                    ab:bb:0b:e8:25:e1:ca:82:8f:64:00:be:8b:fe:12:
                    39:61:0a:b5:b8:4f:cf:fb:39:eb:15:aa:55:41:ee:
                    1a:70:34:b3:bb:81:9b:04:8e:c0:73:e0:e6:89:3e:
                    4e:ea:5b:87:c4:5d:8a:eb:c8:c5:56:96:de:ff:ff:
                    8d:6a:84:8e:90:2c:f2:6e:45:02:24:0e:a0:4a:d7:
                    1c:fe:a8:71:49:48:75:5c:c9:a8:97:30:06:ba:d7:
                    33:eb:cf:8d:0f:03:f3:ee:92:3b:97:7d:53:1f:62:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:87:88:84:1E:01:CC:48:86:E8:BA:52:2C:6C:8C:D7:7E:4F:F1:15
            X509v3 Authority Key Identifier:
                keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7c:97:31:97:dc:d3:30:fa:d8:60:4b:89:2e:d3:ad:ce:d0:
         2a:0a:b1:94:61:f4:f8:d0:28:9d:e9:d4:bb:f0:f6:c9:c8:a1:
         11:d6:2c:82:41:af:93:23:94:f3:8a:c8:3b:ab:2d:32:e6:31:
         b8:83:97:ed:7e:53:e6:91:ad:5b:5c:64:57:3d:8e:ce:bb:83:
         ee:e2:48:05:9a:a7:ce:6a:67:98:5a:73:e0:33:7c:5e:03:a0:
         2c:6d:28:3e:1e:d4:85:f2:b0:38:0b:c5:b5:15:31:cb:a6:4a:
         4d:4d:6d:5e:d2:65:30:21:f9:0b:e4:29:80:85:f9:e2:2e:a5:
         08:ff:78:f0:75:1f:e1:4a:b5:bf:9d:d4:16:aa:b8:42:0a:dc:
         1b:f3:ca:a3:4b:37:20:db:e7:bc:e1:01:0d:58:a7:b6:57:08:
         3b:63:44:9a:b3:a0:8b:fd:e3:ee:e3:f6:2e:cb:2c:12:b4:bd:
         86:94:ee:c5:4f:55:f2:99:89:04:89:78:76:e9:fa:0c:f0:80:
         2c:95:17:17:63:c6:a9:65:03:da:66:99:8e:a2:61:75:ed:55:
         c0:08:9e:16:ff:fc:e1:07:54:07:e7:c4:b7:4b:5a:09:e4:9d:
         8c:68:5b:41:8a:aa:34:e6:b5:01:16:ca:cb:57:f7:66:98:ed:
         22:75:2d:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqy+3g3f8CtQQxsUqd0vGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODg1YzM3ZTc0N2JjZTIzZWU5MDk3ZTVmZjdlOTgzYmNi
YTBkYjQwHhcNMjUwNDEzMTUwMTA5WhcNMjUwNDE0MTUwMTA5WjAzMTEwLwYDVQQD
Eyg4Mzg3ODg4NDFlMDFjYzQ4ODZlOGJhNTIyYzZjOGNkNzdlNGZmMTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fH2MBcyWJBf//YeYTJQpdUbIM4g
kCAFdQmYggZuALSfea+Bvoal2O7be2aY9Hx/auN2XNq4AnLVYAnFnMD3b6fbsFXJ
5usyvnWhvjp2KQ4f11o9xitoUxDWNVXHEz63nxrBur8yJ4B2f2E96PkfHQVTPAe+
+MUHmajwe3AHXZfFExsFKzr4atfp1ALAPYO/jw9z+qSruwvoJeHKgo9kAL6L/hI5
YQq1uE/P+znrFapVQe4acDSzu4GbBI7Ac+DmiT5O6luHxF2K68jFVpbe//+NaoSO
kCzybkUCJA6gStcc/qhxSUh1XMmolzAGutcz68+NDwPz7pI7l31TH2L2gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOHiIQeAcxIhui6UixsjNd+T/EVMB8GA1UdIwQY
MBaAFBqIXDfnR7ziPukJfl/36YO8ug20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5Mzkt
YzE0MDJkMjYxNDMyLzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5MzktYzE0MDJkMjYxNDMy
LzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXyXMZfc
0zD62GBLiS7Trc7QKgqxlGH0+NAonenUu/D2ycihEdYsgkGvkyOU84rIO6stMuYx
uIOX7X5T5pGtW1xkVz2OzruD7uJIBZqnzmpnmFpz4DN8XgOgLG0oPh7UhfKwOAvF
tRUxy6ZKTU1tXtJlMCH5C+QpgIX54i6lCP948HUf4Uq1v53UFqq4QgrcG/PKo0s3
INvnvOEBDVintlcIO2NEmrOgi/3j7uP2LsssErS9hpTuxU9V8pmJBIl4dun6DPCA
LJUXF2PGqWUD2maZjqJhde1VwAieFv/84QdUB+fEt0taCeSdjGhbQYqqNOa1ARbK
y1f3ZpjtInUt8A==
-----END CERTIFICATE-----