Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File:                     GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier:          8kswbQ4h3wId9YFOLBfau8qgoGCN5NlMXZFKsTCr17E=
Subject key identifier:   8E:5A:E4:52:A8:9E:DD:3A:3D:3F:DD:BF:31:8E:15:6B:13:BB:5D:51
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer:       /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial:       01962E98F884E38C5357C895699972F483F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number:          12A8
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: 9PY0CzQO7rCs7a7ACWMmh-gYUMI.roa (hash: MRgHCGLmmsjnvw7chUeEEH655TL4/pWfw0Bh/13k3RE=)
                          2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: t5f3Zx43wnyChXMxYQkbo2klYjZblEHPXRIIm9Iqn0o=)
                          3: LUxnI4gkqH7yAwk0S-IwEaOnth8.roa (hash: N89HNSm0vKdgJlvHR+QOPBS6nqPeyhUDVxUtqyfT4hM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f8:84:e3:8c:53:57:c8:95:69:99:72:f4:83:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=8e5ae452a89edd3a3d3fddbf318e156b13bb5d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:c9:dd:fe:f8:d8:00:09:b5:48:99:92:10:
                    08:26:ef:79:3d:19:d8:ea:ec:3b:0f:8a:ea:9c:a6:
                    a2:7a:44:31:ee:26:cb:3b:70:36:9e:48:22:da:bb:
                    97:d8:64:62:23:b7:4f:16:7c:f5:b0:c4:a4:fa:e9:
                    55:1d:65:a2:07:ca:57:fa:83:b1:ab:ce:58:e6:ef:
                    a6:44:fc:2c:13:7f:d4:db:76:0a:2c:bd:32:4d:0c:
                    6f:09:6b:fa:ad:09:0c:63:b8:39:73:69:33:52:79:
                    02:4a:7a:c0:ff:c8:7d:cd:b9:a5:50:0a:7a:a2:30:
                    91:06:8f:10:ea:3a:ae:f2:01:8a:a9:c1:2d:a0:53:
                    09:1c:b8:02:8b:fd:3c:5b:d1:56:64:69:1f:94:ab:
                    66:2e:c1:18:a0:d4:ea:9a:e9:bf:19:43:12:42:4f:
                    be:82:4e:5a:60:5b:86:9e:e2:6d:10:19:95:da:c2:
                    87:33:c0:57:be:14:24:da:bf:54:09:35:40:45:82:
                    73:7d:5f:1e:89:2e:c1:7d:61:6c:14:c3:f3:d2:d7:
                    34:9b:21:6d:51:d7:f1:f4:56:0c:71:43:94:19:48:
                    78:2a:0e:cc:95:3a:b1:8f:55:9a:d9:1d:32:e7:02:
                    93:47:3c:a1:89:00:67:c6:45:e0:a8:26:20:c7:d3:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5A:E4:52:A8:9E:DD:3A:3D:3F:DD:BF:31:8E:15:6B:13:BB:5D:51
            X509v3 Authority Key Identifier:
                keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:df:ed:01:81:17:ec:63:01:7b:dd:9d:70:87:fe:75:a7:
         91:86:0b:da:6b:3c:86:b1:b0:bf:11:55:65:f4:5e:bd:bd:66:
         d4:77:e0:70:88:67:a3:ed:d3:27:a4:99:9e:8a:06:3c:f2:42:
         19:b9:2a:36:dd:1a:f4:a4:2b:bc:b1:e3:52:20:b3:f2:32:ae:
         f2:35:ee:6a:a0:3b:81:74:33:4a:51:1e:82:60:79:1c:0b:b4:
         93:21:14:4d:e4:e3:ea:bd:27:99:14:f1:26:4a:13:a6:d8:10:
         14:40:8c:58:b2:cc:81:11:ab:ee:d3:fd:87:cf:c5:b6:8c:60:
         2c:d1:c3:64:27:9c:02:51:f3:11:f3:97:16:27:3d:10:ff:9e:
         9c:ae:c5:59:18:3f:ba:68:9b:cb:0a:2f:a0:fd:fc:d6:c7:b9:
         e4:85:c3:3f:c8:33:ab:d3:28:08:a3:da:a6:db:6b:c8:fb:5a:
         c7:93:3e:6a:df:fa:7c:f4:6f:f2:f9:77:a7:22:39:f5:c7:57:
         d4:d8:26:2a:7f:27:b5:57:ba:e3:f5:28:83:ef:53:f2:a9:ff:
         ef:75:af:b7:78:72:f8:aa:19:2e:51:0e:a2:90:9a:a8:65:56:
         fa:00:c8:56:92:20:01:5c:b0:32:28:d1:52:f3:64:11:fd:16:
         e3:34:22:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumPiE44xTV8iVaZly9IPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYTE5YzkyZTk2Njc3ZjVmOTZmNjhmMWNhMGFhZDlmYTMx
MWViNDUwHhcNMjUwNDEzMTAwMTM5WhcNMjUwNDE0MTAwMTM5WjAzMTEwLwYDVQQD
Eyg4ZTVhZTQ1MmE4OWVkZDNhM2QzZmRkYmYzMThlMTU2YjEzYmI1ZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueXJ3f742AAJtUiZkhAIJu95PRnY
6uw7D4rqnKaiekQx7ibLO3A2nkgi2ruX2GRiI7dPFnz1sMSk+ulVHWWiB8pX+oOx
q85Y5u+mRPwsE3/U23YKLL0yTQxvCWv6rQkMY7g5c2kzUnkCSnrA/8h9zbmlUAp6
ojCRBo8Q6jqu8gGKqcEtoFMJHLgCi/08W9FWZGkflKtmLsEYoNTqmum/GUMSQk++
gk5aYFuGnuJtEBmV2sKHM8BXvhQk2r9UCTVARYJzfV8eiS7BfWFsFMPz0tc0myFt
Udfx9FYMcUOUGUh4Kg7MlTqxj1Wa2R0y5wKTRzyhiQBnxkXgqCYgx9M5kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5a5FKont06PT/dvzGOFWsTu11RMB8GA1UdIwQY
MBaAFBqhnJLpZnf1+W9o8coKrZ+jEetFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMt
NGFkMGFiZWMyNzVlLzEvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMtNGFkMGFiZWMyNzVl
LzEvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyHf7QGB
F+xjAXvdnXCH/nWnkYYL2ms8hrGwvxFVZfRevb1m1HfgcIhno+3TJ6SZnooGPPJC
GbkqNt0a9KQrvLHjUiCz8jKu8jXuaqA7gXQzSlEegmB5HAu0kyEUTeTj6r0nmRTx
JkoTptgQFECMWLLMgRGr7tP9h8/FtoxgLNHDZCecAlHzEfOXFic9EP+enK7FWRg/
umibywovoP381se55IXDP8gzq9MoCKPapttryPtax5M+at/6fPRv8vl3pyI59cdX
1NgmKn8ntVe64/Uog+9T8qn/73Wvt3hy+KoZLlEOopCaqGVW+gDIVpIgAVywMijR
UvNkEf0W4zQiDg==
-----END CERTIFICATE-----