Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
File:                     g02WbQCvvDm1lYvBpu1Xk__AxU0.mft (raw, json)
Hash identifier:          8dc8zY2qElDV2L3FnIFZIzows3LCGTzlPz0/CMliwMk=
Subject key identifier:   CD:A2:5B:FF:2C:5F:C7:EF:A8:60:CF:36:F0:73:43:8B:2F:D2:CC:36
Authority key identifier: 83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D
Certificate issuer:       /CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
Certificate serial:       01962DF448126E44366AC9E1F3E9FEBFD463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: IOmKwvAlqovOqDg8R3XEjQKQn3k.roa (hash: /PNQa25f3KzGjHOJXgALCT84CCr36de+6y0mC+W9C/U=)
                          2: g02WbQCvvDm1lYvBpu1Xk__AxU0.crl (hash: zPYveiUx03LgnA7kccz5ogR2GlyRY7FS5E2uHaaXVf0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:48:12:6e:44:36:6a:c9:e1:f3:e9:fe:bf:d4:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834d966d00afbc39b5958bc1a6ed5793ffc0c54d
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=cda25bff2c5fc7efa860cf36f073438b2fd2cc36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:8d:fa:3b:af:2f:44:af:e8:5b:ea:56:e0:
                    64:98:e8:64:9a:31:5f:92:fe:0b:9c:f2:92:18:e7:
                    b7:f5:91:34:7f:f2:a6:9b:14:42:d8:4e:8e:6c:54:
                    d8:a8:f7:17:bb:bd:e2:75:d5:49:76:79:ee:5a:19:
                    80:c3:b8:a2:65:e6:d9:8b:99:df:ff:e5:8d:4f:7b:
                    09:af:a3:6e:0e:ed:5c:db:a5:fa:3c:16:78:bc:7e:
                    b8:00:f3:aa:2e:e2:18:89:3f:28:4a:a7:5a:fb:c6:
                    52:f2:04:d7:44:0d:b4:8b:d7:27:33:f0:78:fa:8b:
                    62:a7:74:70:77:5d:0b:0a:1f:e1:c8:a0:f8:12:76:
                    02:3c:22:83:e2:80:2b:96:f1:1b:65:94:0d:36:a3:
                    e0:8f:40:3a:3f:b4:96:ed:d9:73:a2:67:e8:32:2a:
                    d3:d7:a0:a1:90:30:6b:36:22:dc:bf:b6:99:cc:f2:
                    e3:14:bb:95:29:8d:9f:f3:82:aa:eb:35:16:7b:af:
                    a2:08:e0:35:c8:22:6d:1f:d1:b3:d9:c1:92:5b:9a:
                    d3:9c:c3:a1:e5:f6:dc:54:1b:8c:91:49:af:0e:1a:
                    6d:d6:8b:d6:96:26:12:60:90:60:f6:42:53:ec:b7:
                    d2:54:7b:cf:7c:98:e8:94:71:d5:8e:7f:cf:a3:d6:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A2:5B:FF:2C:5F:C7:EF:A8:60:CF:36:F0:73:43:8B:2F:D2:CC:36
            X509v3 Authority Key Identifier:
                keyid:83:4D:96:6D:00:AF:BC:39:B5:95:8B:C1:A6:ED:57:93:FF:C0:C5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g02WbQCvvDm1lYvBpu1Xk__AxU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8830a4-6c83-4338-bafd-b5d1e902310a/1/g02WbQCvvDm1lYvBpu1Xk__AxU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:21:e8:97:50:32:15:82:8b:eb:56:f9:8c:af:f3:66:8a:06:
         bd:d9:94:0b:b7:14:7d:20:f1:f0:61:6e:92:9c:2b:20:ac:67:
         50:df:4c:f8:10:a6:26:95:d6:4e:b6:2b:72:d6:a8:fe:c7:81:
         30:4c:11:14:fe:13:14:69:54:89:4a:02:69:26:a5:9f:4d:9c:
         5b:7e:d4:bf:ee:40:fe:70:7f:96:0f:3d:d6:cf:8c:1c:4d:bb:
         19:96:25:06:6b:7e:e7:fe:dc:92:5e:34:42:d0:0b:03:c5:dd:
         21:fd:41:ba:f0:6e:67:9d:9f:28:64:2b:58:a9:fe:cf:e3:5e:
         cc:d5:e5:e3:be:ab:0e:b4:7f:92:c5:ad:7a:ef:e2:3c:f7:73:
         d1:6d:65:c6:ed:2e:6b:9f:7c:02:d5:ce:d9:40:2b:b2:3a:4d:
         32:b3:41:aa:a1:5a:64:a3:ce:4a:22:0c:f6:b5:a2:2b:2e:3a:
         9b:27:27:e5:30:fd:14:e7:d6:e4:44:fc:2c:59:3f:a8:96:54:
         ee:47:f5:2a:b0:a1:8b:24:02:c0:10:70:e3:4d:92:f3:28:b9:
         6b:1e:6a:9e:4f:84:3b:ee:ca:93:61:44:79:9d:dd:fc:7e:c2:
         31:b2:3a:93:5e:db:59:be:5b:bd:a0:1f:d6:5b:7a:75:63:20:
         3e:eb:4a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9EgSbkQ2asnh8+n+v9RjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNGQ5NjZkMDBhZmJjMzliNTk1OGJjMWE2ZWQ1NzkzZmZj
MGM1NGQwHhcNMjUwNDEzMDcwMTQ2WhcNMjUwNDE0MDcwMTQ2WjAzMTEwLwYDVQQD
EyhjZGEyNWJmZjJjNWZjN2VmYTg2MGNmMzZmMDczNDM4YjJmZDJjYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/eN+juvL0Sv6FvqVuBkmOhkmjFf
kv4LnPKSGOe39ZE0f/KmmxRC2E6ObFTYqPcXu73iddVJdnnuWhmAw7iiZebZi5nf
/+WNT3sJr6NuDu1c26X6PBZ4vH64APOqLuIYiT8oSqda+8ZS8gTXRA20i9cnM/B4
+otip3Rwd10LCh/hyKD4EnYCPCKD4oArlvEbZZQNNqPgj0A6P7SW7dlzomfoMirT
16ChkDBrNiLcv7aZzPLjFLuVKY2f84Kq6zUWe6+iCOA1yCJtH9Gz2cGSW5rTnMOh
5fbcVBuMkUmvDhpt1ovWliYSYJBg9kJT7LfSVHvPfJjolHHVjn/Po9bJmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2iW/8sX8fvqGDPNvBzQ4sv0sw2MB8GA1UdIwQY
MBaAFINNlm0Ar7w5tZWLwabtV5P/wMVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQt
YjVkMWU5MDIzMTBhLzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84ODMwYTQtNmM4My00MzM4LWJhZmQtYjVkMWU5MDIzMTBh
LzEvZzAyV2JRQ3Z2RG0xbFl2QnB1MVhrX19BeFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyHol1Ay
FYKL61b5jK/zZooGvdmUC7cUfSDx8GFukpwrIKxnUN9M+BCmJpXWTrYrctao/seB
MEwRFP4TFGlUiUoCaSaln02cW37Uv+5A/nB/lg891s+MHE27GZYlBmt+5/7ckl40
QtALA8XdIf1BuvBuZ52fKGQrWKn+z+NezNXl476rDrR/ksWteu/iPPdz0W1lxu0u
a598AtXO2UArsjpNMrNBqqFaZKPOSiIM9rWiKy46mycn5TD9FOfW5ET8LFk/qJZU
7kf1KrChiyQCwBBw402S8yi5ax5qnk+EO+7Kk2FEeZ3d/H7CMbI6k17bWb5bvaAf
1lt6dWMgPutKQQ==
-----END CERTIFICATE-----