Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File:                     GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier:          AzrZtY5fh6ggivvnVsgLzBf9368AXQ59TRkp9S4GROQ=
Subject key identifier:   62:E3:B1:BB:B6:CB:73:EA:A7:C0:BB:00:E4:1A:7C:E9:55:A3:D8:3D
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer:       /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial:       01962F3D8C3C45CD07ED81D3D5358B33B20F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number:          1256
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: ERpIdRkdqF7oh1K7o6Z/FcUPGVRIBQpqGhlaXJlYV1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8c:3c:45:cd:07:ed:81:d3:d5:35:8b:33:b2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=62e3b1bbb6cb73eaa7c0bb00e41a7ce955a3d83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:69:df:47:a7:ba:a0:a9:15:69:0f:63:7f:
                    95:1c:d9:0f:4e:4f:3b:55:d0:dd:15:f1:c6:38:4c:
                    e8:7b:d1:4d:31:ac:dc:bc:d1:50:4e:c0:ad:14:5f:
                    50:61:f5:bf:78:9f:85:05:39:59:5b:8d:84:77:1a:
                    f0:e5:4c:75:87:16:2b:e0:8c:2e:3f:b1:66:69:d8:
                    ad:80:f8:14:f4:12:6b:b5:10:56:36:52:69:c4:a7:
                    0a:ff:80:df:82:12:a5:69:b2:b7:29:07:40:91:ca:
                    58:be:34:56:a7:10:ff:04:3c:cb:bf:a6:f2:6f:42:
                    52:c2:ef:34:93:bf:54:50:74:56:e1:2f:65:51:54:
                    f2:5b:5b:b0:23:0f:af:b1:6a:06:ba:2a:c2:ad:69:
                    6e:17:81:0b:7b:b9:a6:9c:04:b0:ce:90:14:38:5a:
                    b3:24:08:d8:ae:19:2b:80:c5:7d:4e:80:8f:7f:7d:
                    13:08:54:70:8f:e5:98:da:7f:f6:fa:c6:e0:04:03:
                    33:86:89:ca:a9:0f:9b:1b:df:49:d6:0b:96:a0:3a:
                    6d:af:cd:64:9e:82:95:c8:aa:21:34:a1:f7:ba:90:
                    37:c4:b1:09:57:37:0d:49:be:16:16:05:1c:87:b5:
                    e8:61:84:f4:67:7a:6c:4d:81:87:59:a2:5a:49:2d:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E3:B1:BB:B6:CB:73:EA:A7:C0:BB:00:E4:1A:7C:E9:55:A3:D8:3D
            X509v3 Authority Key Identifier:
                keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8c:96:1b:7e:04:2a:17:2b:9d:be:6f:e6:bc:75:d3:41:87:
         40:17:bb:55:80:cf:9c:df:be:26:67:00:e2:25:c3:21:5c:54:
         4d:07:d1:98:ae:26:1d:31:8d:b3:8a:1c:51:c2:39:32:29:df:
         40:4f:63:72:3e:b3:f2:ca:49:12:7d:58:3f:75:f5:61:ad:29:
         45:89:57:7f:a4:40:f6:a9:e8:4e:68:52:5b:3f:55:a7:6b:47:
         3f:50:71:57:0d:0e:c7:86:bb:85:9c:89:99:aa:a9:45:9b:c9:
         98:68:d1:55:65:f3:de:6e:a8:fd:80:14:ee:bc:b2:5c:16:37:
         15:c9:05:42:1c:54:06:4b:22:86:da:42:32:db:f2:91:e3:75:
         ed:7a:dc:04:3b:ee:82:e6:0b:14:4c:ba:d6:9f:3c:9e:37:ed:
         03:6e:01:50:18:52:eb:c0:c8:3c:f7:c9:bf:68:fe:d1:8a:cf:
         b7:bc:71:2a:61:c7:3d:28:d0:8d:c3:8a:24:c2:fa:58:a8:49:
         51:c3:2e:18:39:04:33:df:76:28:3a:c9:a3:4b:74:6b:a7:9e:
         3a:b6:f3:5b:77:94:69:01:99:52:56:4a:74:2c:c9:96:67:18:
         44:a1:f7:ba:0b:d3:f9:dd:23:bb:de:be:fd:dc:52:b9:7c:02:
         09:78:a4:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPYw8Rc0H7YHT1TWLM7IPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NTA0M2E1NGU2MjMzZDIyZTU2ZGI3NGM5Zjc4ZTJkNmQx
Yzk3OTQwHhcNMjUwNDEzMTMwMTI0WhcNMjUwNDE0MTMwMTI0WjAzMTEwLwYDVQQD
Eyg2MmUzYjFiYmI2Y2I3M2VhYTdjMGJiMDBlNDFhN2NlOTU1YTNkODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IJp30enuqCpFWkPY3+VHNkPTk87
VdDdFfHGOEzoe9FNMazcvNFQTsCtFF9QYfW/eJ+FBTlZW42Edxrw5Ux1hxYr4Iwu
P7FmaditgPgU9BJrtRBWNlJpxKcK/4DfghKlabK3KQdAkcpYvjRWpxD/BDzLv6by
b0JSwu80k79UUHRW4S9lUVTyW1uwIw+vsWoGuirCrWluF4ELe7mmnASwzpAUOFqz
JAjYrhkrgMV9ToCPf30TCFRwj+WY2n/2+sbgBAMzhonKqQ+bG99J1guWoDptr81k
noKVyKohNKH3upA3xLEJVzcNSb4WFgUch7XoYYT0Z3psTYGHWaJaSS3Z8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLjsbu2y3Pqp8C7AOQafOlVo9g9MB8GA1UdIwQY
MBaAFBlQQ6VOYjPSLlbbdMn3ji1tHJeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTkt
M2I1MjdjYjk4Njg1LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hNTJhZDMtOTMxMy00YWQwLTkyNTktM2I1MjdjYjk4Njg1
LzEvR1ZCRHBVNWlNOUl1VnR0MHlmZU9MVzBjbDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIyWG34E
Khcrnb5v5rx100GHQBe7VYDPnN++JmcA4iXDIVxUTQfRmK4mHTGNs4ocUcI5Minf
QE9jcj6z8spJEn1YP3X1Ya0pRYlXf6RA9qnoTmhSWz9Vp2tHP1BxVw0Ox4a7hZyJ
maqpRZvJmGjRVWXz3m6o/YAU7ryyXBY3FckFQhxUBksihtpCMtvykeN17XrcBDvu
guYLFEy61p88njftA24BUBhS68DIPPfJv2j+0YrPt7xxKmHHPSjQjcOKJML6WKhJ
UcMuGDkEM992KDrJo0t0a6eeOrbzW3eUaQGZUlZKdCzJlmcYRKH3ugvT+d0ju96+
/dxSuXwCCXik8A==
-----END CERTIFICATE-----