Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
File:                     g_65rfwvZVEiBb1IETJMnX9qAiI.mft (raw, json)
Hash identifier:          1Z3Snh5FigGIPbkJgkGVELkCQ12baZu2gNkEhjBPnO4=
Subject key identifier:   DC:2A:DB:1D:DC:98:33:E5:1F:4C:ED:E3:1E:5D:FB:35:CB:57:A8:A2
Authority key identifier: 83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22
Certificate issuer:       /CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
Certificate serial:       01962E618B102CA8728D231640F445A2940A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft
Manifest number:          02E3
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: g_65rfwvZVEiBb1IETJMnX9qAiI.crl (hash: jEbOfks76DDvf1LOyxI7WDhgXlDBi6F9oHDe66axKu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8b:10:2c:a8:72:8d:23:16:40:f4:45:a2:94:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83feb9adfc2f65512205bd4811324c9d7f6a0222
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=dc2adb1ddc9833e51f4cede31e5dfb35cb57a8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:20:65:b7:5f:6b:84:ce:90:ca:fa:2e:47:89:
                    5f:56:b7:f0:52:6f:68:47:3a:52:d5:b9:d1:66:67:
                    ca:a7:3e:b3:dc:48:e5:8d:c3:36:a3:6c:6f:4a:10:
                    32:eb:6d:24:73:04:2c:ff:d2:f2:1b:91:6d:aa:14:
                    74:26:49:ab:e6:a1:52:f5:99:68:51:53:12:af:c8:
                    4d:db:16:54:ae:b6:f0:14:68:20:23:67:c2:38:46:
                    0c:24:4f:62:80:aa:b5:bd:49:79:74:2c:00:3f:d5:
                    9b:0a:ae:c4:a4:aa:d6:6c:22:ab:6a:52:0d:8c:8d:
                    00:86:78:f7:ea:c4:26:89:d3:fd:00:dc:48:d2:df:
                    09:ff:22:11:ee:0c:19:61:28:b1:1c:9d:88:91:2b:
                    cc:f2:b9:4b:ec:0c:cc:59:ca:f4:6d:a9:d6:d7:d4:
                    5b:74:03:22:86:1b:13:b4:d8:21:58:61:33:6c:a9:
                    e3:e5:0f:57:16:4b:27:d2:75:d8:99:bb:95:56:75:
                    2e:1f:13:a7:db:4c:1b:6c:61:89:95:7e:30:c8:70:
                    82:9b:b8:0f:62:aa:fc:78:20:2d:80:49:6b:b9:ed:
                    a6:c0:b1:68:ae:32:31:52:f2:81:a3:ed:4f:9c:b0:
                    b8:12:58:77:d8:a5:7a:3c:b3:7a:a5:4e:13:2f:ff:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2A:DB:1D:DC:98:33:E5:1F:4C:ED:E3:1E:5D:FB:35:CB:57:A8:A2
            X509v3 Authority Key Identifier:
                keyid:83:FE:B9:AD:FC:2F:65:51:22:05:BD:48:11:32:4C:9D:7F:6A:02:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_65rfwvZVEiBb1IETJMnX9qAiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/dc5159-45f0-426f-9ef1-96e0c1c44483/1/g_65rfwvZVEiBb1IETJMnX9qAiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:30:57:3f:5a:de:1c:47:d1:02:b7:85:9e:f1:5d:f1:f1:5f:
         21:81:51:96:6c:79:ea:5f:1f:87:e3:5e:16:72:80:83:8e:04:
         0b:f9:eb:28:c2:24:a9:b8:e1:1c:a8:58:0d:df:46:9f:7f:e1:
         bb:3e:a6:0e:b8:49:9d:8a:66:aa:4b:0b:ab:39:06:64:61:c4:
         ec:e7:2d:21:64:92:b1:a8:0c:a2:78:67:d2:39:c3:6a:ae:cb:
         19:72:c3:79:96:e9:5f:99:f1:9f:1f:07:d5:e7:b5:a9:02:7d:
         b6:d0:90:cf:c3:22:1d:05:5c:76:a1:af:3b:b3:c2:c0:e1:85:
         2e:a9:30:f4:38:0a:a7:6a:45:63:94:30:40:45:b3:ad:6a:00:
         d0:6d:a2:e1:d1:68:34:c3:d6:3e:3e:68:b0:23:ba:4f:00:9f:
         58:9d:18:a2:49:6c:a6:c7:17:3c:9e:cc:2c:08:a9:73:bc:a0:
         ae:86:8c:ee:2b:84:02:7e:86:6f:f5:72:29:69:ef:7d:9f:cf:
         39:f0:2e:b2:60:7e:ac:67:65:fb:72:70:14:9c:f8:d5:90:e2:
         6d:01:25:3f:1f:7a:a6:bd:31:9c:e7:f6:fa:33:2e:01:97:a1:
         c2:59:b5:9a:13:db:d6:fd:9d:24:19:61:1c:df:61:6d:10:38:
         64:bb:b5:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYsQLKhyjSMWQPRFopQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZmViOWFkZmMyZjY1NTEyMjA1YmQ0ODExMzI0YzlkN2Y2
YTAyMjIwHhcNMjUwNDEzMDkwMTA2WhcNMjUwNDE0MDkwMTA2WjAzMTEwLwYDVQQD
EyhkYzJhZGIxZGRjOTgzM2U1MWY0Y2VkZTMxZTVkZmIzNWNiNTdhOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCBlt19rhM6QyvouR4lfVrfwUm9o
RzpS1bnRZmfKpz6z3EjljcM2o2xvShAy620kcwQs/9LyG5FtqhR0Jkmr5qFS9Zlo
UVMSr8hN2xZUrrbwFGggI2fCOEYMJE9igKq1vUl5dCwAP9WbCq7EpKrWbCKralIN
jI0Ahnj36sQmidP9ANxI0t8J/yIR7gwZYSixHJ2IkSvM8rlL7AzMWcr0banW19Rb
dAMihhsTtNghWGEzbKnj5Q9XFksn0nXYmbuVVnUuHxOn20wbbGGJlX4wyHCCm7gP
Yqr8eCAtgElrue2mwLForjIxUvKBo+1PnLC4Elh32KV6PLN6pU4TL/9QPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwq2x3cmDPlH0zt4x5d+zXLV6iiMB8GA1UdIwQY
MBaAFIP+ua38L2VRIgW9SBEyTJ1/agIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9kYzUxNTktNDVmMC00MjZmLTllZjEt
OTZlMGMxYzQ0NDgzLzEvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9kYzUxNTktNDVmMC00MjZmLTllZjEtOTZlMGMxYzQ0NDgz
LzEvZ182NXJmd3ZaVkVpQmIxSUVUSk1uWDlxQWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTBXP1re
HEfRAreFnvFd8fFfIYFRlmx56l8fh+NeFnKAg44EC/nrKMIkqbjhHKhYDd9Gn3/h
uz6mDrhJnYpmqksLqzkGZGHE7OctIWSSsagMonhn0jnDaq7LGXLDeZbpX5nxnx8H
1ee1qQJ9ttCQz8MiHQVcdqGvO7PCwOGFLqkw9DgKp2pFY5QwQEWzrWoA0G2i4dFo
NMPWPj5osCO6TwCfWJ0YoklspscXPJ7MLAipc7ygroaM7iuEAn6Gb/VyKWnvfZ/P
OfAusmB+rGdl+3JwFJz41ZDibQElPx96pr0xnOf2+jMuAZehwlm1mhPb1v2dJBlh
HN9hbRA4ZLu12Q==
-----END CERTIFICATE-----