Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
File:                     GMpt4aSKToxbivHq6bXoC_z5LEU.mft (raw, json)
Hash identifier:          YHpA3GLaq88tBjA6cRVtRE5Hkx7HSQQnwq3XBnPmFxA=
Subject key identifier:   EA:80:E2:DD:23:54:4B:1A:0F:D9:3D:E0:C2:38:23:18:F6:9B:51:38
Authority key identifier: 18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45
Certificate issuer:       /CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
Certificate serial:       01962E619C930D687668F3AFECA315D068C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft
Manifest number:          03DE
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: Ad6-aAH05MI6kkdiGCD95ctRfFo.roa (hash: fVAs8Cty7zb84H/EMD3Y1sNjkv+r8koDIXGOWy5iQEM=)
                          2: GMpt4aSKToxbivHq6bXoC_z5LEU.crl (hash: bEfR9abe5gtyaaiThIUfnVZzwAaOBbjOvD8qE3SEwIY=)
                          3: MI1jFBgK_l4WcCB5iK5o-v2Otyo.roa (hash: gK5APSFH+TPMOKicKkMlgu3wLez9QxNVfPdLmJNKB6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9c:93:0d:68:76:68:f3:af:ec:a3:15:d0:68:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ca6de1a48a4e8c5b8af1eae9b5e80bfcf92c45
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=ea80e2dd23544b1a0fd93de0c2382318f69b5138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:8d:b8:2e:e4:27:3c:1e:88:b9:37:af:57:
                    75:05:7e:f6:97:65:56:bd:5a:95:99:e0:d2:25:43:
                    7a:c7:72:54:ae:d3:31:57:b5:42:0b:2c:6f:28:fa:
                    95:a1:07:b4:42:28:28:8d:87:17:c4:db:ee:9d:56:
                    27:04:02:d2:c7:c4:43:58:e6:f0:7d:64:15:e9:91:
                    f6:05:7e:63:95:3d:e6:29:65:ee:de:44:43:30:7c:
                    c8:f9:8c:ca:94:5a:99:b0:89:b2:32:9f:20:11:d9:
                    94:51:25:64:f0:b7:d7:c3:b6:a4:93:fe:99:9a:6f:
                    dc:a4:59:86:8b:1e:0d:5b:ca:ab:48:f1:9f:31:e9:
                    3b:40:39:f1:db:63:9e:05:67:ab:cd:05:39:39:f6:
                    66:08:2f:33:0c:ea:85:9d:58:37:a6:7d:9b:96:50:
                    e7:2a:4c:c4:64:37:0f:43:64:93:20:35:de:bc:99:
                    70:bf:da:07:72:25:31:8f:27:c7:71:9a:b4:9e:39:
                    54:29:c9:72:70:5c:8d:e7:8e:a7:f8:06:21:86:9e:
                    c4:ea:fd:76:14:57:a5:37:83:c0:10:47:63:9c:a9:
                    9a:cf:c2:28:2c:13:c6:e1:11:76:79:af:35:a5:55:
                    14:d9:e4:7a:50:9e:8a:71:5a:8a:87:f1:bd:3c:4b:
                    ed:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:E2:DD:23:54:4B:1A:0F:D9:3D:E0:C2:38:23:18:F6:9B:51:38
            X509v3 Authority Key Identifier:
                keyid:18:CA:6D:E1:A4:8A:4E:8C:5B:8A:F1:EA:E9:B5:E8:0B:FC:F9:2C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GMpt4aSKToxbivHq6bXoC_z5LEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dff2c6-d87c-4d65-a256-1c8225d407b5/1/GMpt4aSKToxbivHq6bXoC_z5LEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9d:e7:e7:de:3f:f9:9b:e3:91:43:f4:ff:a9:1e:09:e1:d5:
         32:75:5c:6f:1e:84:74:09:5f:05:cb:cc:a0:3a:2a:e9:07:d5:
         82:92:4e:b5:09:8a:80:97:1c:33:1c:b3:b7:6d:94:df:cb:18:
         f7:1b:e4:94:1c:ec:79:b7:1b:02:fa:cd:e5:90:f4:2d:4e:4a:
         af:f3:97:c6:ab:8a:46:10:97:a5:2b:e2:61:7f:6d:12:0f:94:
         7c:bf:59:e7:bc:c0:34:33:79:36:db:ed:10:8b:8e:5b:53:b9:
         62:21:ac:20:71:d6:b5:06:8d:5c:0f:e6:88:23:fe:40:25:95:
         61:8e:c9:38:d6:c0:9c:37:3c:6b:3d:cf:e0:07:a9:83:37:ea:
         1c:97:1b:42:0b:b8:d4:7c:cd:a3:d6:9c:8c:ca:3e:95:79:7b:
         5f:b9:8e:68:b1:5e:d9:38:ff:53:5c:56:d4:c6:8b:c1:4a:03:
         d2:98:e8:8e:75:93:78:e2:af:6d:d6:8a:74:52:06:23:f1:2a:
         45:4d:3a:f1:65:da:39:7c:6f:a2:89:66:86:fb:dd:01:8e:b2:
         3e:cb:39:d3:bb:fa:be:cc:a3:f8:56:c6:36:92:f5:18:b3:33:
         2c:a0:5a:7b:06:d6:20:7e:0c:e4:5e:91:ab:24:ce:29:c7:d3:
         84:10:5f:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYZyTDWh2aPOv7KMV0GjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Y2E2ZGUxYTQ4YTRlOGM1YjhhZjFlYWU5YjVlODBiZmNm
OTJjNDUwHhcNMjUwNDEzMDkwMTExWhcNMjUwNDE0MDkwMTExWjAzMTEwLwYDVQQD
EyhlYTgwZTJkZDIzNTQ0YjFhMGZkOTNkZTBjMjM4MjMxOGY2OWI1MTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRSNuC7kJzweiLk3r1d1BX72l2VW
vVqVmeDSJUN6x3JUrtMxV7VCCyxvKPqVoQe0QigojYcXxNvunVYnBALSx8RDWObw
fWQV6ZH2BX5jlT3mKWXu3kRDMHzI+YzKlFqZsImyMp8gEdmUUSVk8LfXw7akk/6Z
mm/cpFmGix4NW8qrSPGfMek7QDnx22OeBWerzQU5OfZmCC8zDOqFnVg3pn2bllDn
KkzEZDcPQ2STIDXevJlwv9oHciUxjyfHcZq0njlUKclycFyN546n+AYhhp7E6v12
FFelN4PAEEdjnKmaz8IoLBPG4RF2ea81pVUU2eR6UJ6KcVqKh/G9PEvtcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOqA4t0jVEsaD9k94MI4Ixj2m1E4MB8GA1UdIwQY
MBaAFBjKbeGkik6MW4rx6um16Av8+SxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYt
MWM4MjI1ZDQwN2I1LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmYyYzYtZDg3Yy00ZDY1LWEyNTYtMWM4MjI1ZDQwN2I1
LzEvR01wdDRhU0tUb3hiaXZIcTZiWG9DX3o1TEVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZ3n594/
+ZvjkUP0/6keCeHVMnVcbx6EdAlfBcvMoDoq6QfVgpJOtQmKgJccMxyzt22U38sY
9xvklBzsebcbAvrN5ZD0LU5Kr/OXxquKRhCXpSviYX9tEg+UfL9Z57zANDN5Ntvt
EIuOW1O5YiGsIHHWtQaNXA/miCP+QCWVYY7JONbAnDc8az3P4AepgzfqHJcbQgu4
1HzNo9acjMo+lXl7X7mOaLFe2Tj/U1xW1MaLwUoD0pjojnWTeOKvbdaKdFIGI/Eq
RU068WXaOXxvoolmhvvdAY6yPss507v6vsyj+FbGNpL1GLMzLKBaewbWIH4M5F6R
qyTOKcfThBBfkQ==
-----END CERTIFICATE-----