Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
File:                     G2uUO5o9_2loAVFr6EcbxFiFZug.mft (raw, json)
Hash identifier:          7/AhQ+D4XbouIxSRKok3pPPcmhwHm1LOYjNbE2rZrB8=
Subject key identifier:   D5:F2:5A:91:8C:99:AC:DF:2F:97:81:96:4C:73:01:0A:92:4C:00:6F
Authority key identifier: 1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8
Certificate issuer:       /CN=1b6b943b9a3dff696801516be8471bc4588566e8
Certificate serial:       01962F3D9B33CF5B6C7B2BE0139010F7F0B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft
Manifest number:          118F
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: 1ISrUMvXtY8idtkbmSmcNCBmXOs.roa (hash: JdzcjRC1qPASLJAyKXCJZ2jvTuTxM21yeidKZ9A5IsQ=)
                          2: G2uUO5o9_2loAVFr6EcbxFiFZug.crl (hash: Dj/21UieWaIiX+dXX/NPzzqXiesU3ZVI6S08BF/FeeI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9b:33:cf:5b:6c:7b:2b:e0:13:90:10:f7:f0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b6b943b9a3dff696801516be8471bc4588566e8
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=d5f25a918c99acdf2f9781964c73010a924c006f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:9a:9d:5c:b2:db:d3:e2:29:99:f4:7d:c1:
                    10:6b:64:ee:9e:d4:8d:12:b3:2d:80:60:98:22:29:
                    73:91:88:c7:64:e8:f5:f0:97:b8:95:96:c4:73:9f:
                    7f:8c:72:f6:fa:05:be:6f:02:9f:ab:5b:e3:15:bc:
                    75:f8:dd:e3:09:75:89:c2:89:4b:e8:be:7f:14:4a:
                    41:e6:a1:84:26:97:e4:77:80:ff:65:95:8b:74:18:
                    39:8d:21:9b:4e:44:4f:ad:cb:5f:7a:3f:c6:7d:5e:
                    c8:18:5f:94:15:82:fd:29:80:c5:a3:bd:90:f1:0c:
                    61:f2:e2:3c:d2:e1:3e:fe:83:d6:f3:84:83:69:c8:
                    b8:85:6c:1e:3b:b0:ff:53:d8:4b:19:41:48:6b:3a:
                    b1:d4:47:f7:05:5d:e5:ba:f9:97:ba:46:9f:ee:44:
                    5d:7c:c1:82:36:3a:86:66:75:85:ca:13:30:16:4e:
                    a7:32:04:86:b9:78:34:fb:d1:de:25:db:91:7b:1b:
                    1f:5b:03:60:4d:dc:9c:d4:1f:98:32:35:86:89:1a:
                    4c:cb:06:cc:5c:d0:1d:d1:24:cb:12:c8:2c:a8:89:
                    99:a0:6b:e2:04:6c:6a:51:cf:6f:7e:b8:2c:fd:7e:
                    e1:aa:84:27:96:ac:4a:d9:e7:79:da:00:7c:ff:dc:
                    06:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F2:5A:91:8C:99:AC:DF:2F:97:81:96:4C:73:01:0A:92:4C:00:6F
            X509v3 Authority Key Identifier:
                keyid:1B:6B:94:3B:9A:3D:FF:69:68:01:51:6B:E8:47:1B:C4:58:85:66:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2uUO5o9_2loAVFr6EcbxFiFZug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3d6107-5bce-4780-ae10-22d371d6cdee/1/G2uUO5o9_2loAVFr6EcbxFiFZug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:a2:0e:79:5f:98:96:31:21:b9:c6:d7:58:24:e9:a9:41:
         44:a2:20:af:24:7c:2e:61:cd:f5:47:8b:2f:88:02:ec:7f:ea:
         a1:79:69:a4:b2:69:c7:30:83:07:6c:91:fd:77:b2:6b:e4:59:
         94:1d:1d:2f:89:06:20:f2:05:f2:7a:45:db:a2:01:1d:84:36:
         e9:07:b3:01:1b:4c:b4:58:e9:32:a9:73:d2:63:17:ed:a2:70:
         89:b3:10:c6:5b:c1:bb:75:a5:73:95:1e:9d:82:00:33:81:c0:
         41:ca:cf:61:bb:f9:9c:b0:a0:8e:1f:71:b7:4c:03:11:52:f2:
         73:21:07:e4:32:61:2a:d5:06:f6:fa:d3:0d:e0:99:63:db:bc:
         5a:83:ea:d7:ff:44:a6:29:ab:27:04:62:5f:0b:38:00:5a:be:
         40:9b:d2:8c:83:e1:85:81:f4:77:df:43:ed:55:2d:0a:46:fd:
         0a:1e:80:ce:a0:14:fb:4d:14:62:c7:14:56:8a:e5:39:d0:41:
         3c:76:c3:c1:2b:2f:b7:86:e6:fa:6a:1a:75:98:42:25:b9:64:
         6d:91:8d:41:cd:70:f6:a0:06:d5:af:b1:c0:23:73:bf:9d:2c:
         7c:50:bc:1f:82:a7:11:37:51:30:40:22:f9:f1:30:8c:0e:d7:
         84:47:82:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZszz1tseyvgE5AQ9/CwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmI5NDNiOWEzZGZmNjk2ODAxNTE2YmU4NDcxYmM0NTg4
NTY2ZTgwHhcNMjUwNDEzMTMwMTI4WhcNMjUwNDE0MTMwMTI4WjAzMTEwLwYDVQQD
EyhkNWYyNWE5MThjOTlhY2RmMmY5NzgxOTY0YzczMDEwYTkyNGMwMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmuanVyy29PiKZn0fcEQa2TuntSN
ErMtgGCYIilzkYjHZOj18Je4lZbEc59/jHL2+gW+bwKfq1vjFbx1+N3jCXWJwolL
6L5/FEpB5qGEJpfkd4D/ZZWLdBg5jSGbTkRPrctfej/GfV7IGF+UFYL9KYDFo72Q
8Qxh8uI80uE+/oPW84SDaci4hWweO7D/U9hLGUFIazqx1Ef3BV3luvmXukaf7kRd
fMGCNjqGZnWFyhMwFk6nMgSGuXg0+9HeJduRexsfWwNgTdyc1B+YMjWGiRpMywbM
XNAd0STLEsgsqImZoGviBGxqUc9vfrgs/X7hqoQnlqxK2ed52gB8/9wGFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXyWpGMmazfL5eBlkxzAQqSTABvMB8GA1UdIwQY
MBaAFBtrlDuaPf9paAFRa+hHG8RYhWboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAt
MjJkMzcxZDZjZGVlLzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zZDYxMDctNWJjZS00NzgwLWFlMTAtMjJkMzcxZDZjZGVl
LzEvRzJ1VU81bzlfMmxvQVZGcjZFY2J4RmlGWnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFWiDnlf
mJYxIbnG11gk6alBRKIgryR8LmHN9UeLL4gC7H/qoXlppLJpxzCDB2yR/Xeya+RZ
lB0dL4kGIPIF8npF26IBHYQ26QezARtMtFjpMqlz0mMX7aJwibMQxlvBu3Wlc5Ue
nYIAM4HAQcrPYbv5nLCgjh9xt0wDEVLycyEH5DJhKtUG9vrTDeCZY9u8WoPq1/9E
pimrJwRiXws4AFq+QJvSjIPhhYH0d99D7VUtCkb9Ch6AzqAU+00UYscUVorlOdBB
PHbDwSsvt4bm+moadZhCJblkbZGNQc1w9qAG1a+xwCNzv50sfFC8H4KnETdRMEAi
+fEwjA7XhEeCnA==
-----END CERTIFICATE-----