Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File:                     G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier:          wtKeLy5elvpIFh9ZADyfPZfMApJjoyNvehi5BIHQMfQ=
Subject key identifier:   DC:8A:26:C0:78:8F:8F:BE:0A:BA:85:57:27:FA:4D:95:DB:7A:CF:97
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer:       /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial:       01962ECFC5B191C512259840B1EB91FE580F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number:          06EC
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: WJPLQQROv0ayXXt2zj6r1TC3NzT/DAxXTBOXII/YZMs=)
                          2: j-WhBxG3kTQ9qzGT3Um24_lMcSk.roa (hash: qcMICYRSrbrQRjk9ZR+9VL6T/3wI6mHE1uL2fvOP8p0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c5:b1:91:c5:12:25:98:40:b1:eb:91:fe:58:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=dc8a26c0788f8fbe0aba855727fa4d95db7acf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:75:ca:2a:bc:c1:b3:d3:35:fa:4d:08:82:
                    c5:c1:18:3e:e1:99:ee:c3:07:da:62:cf:66:87:cf:
                    b9:96:a6:e9:64:dd:0d:1e:5b:11:cd:71:b2:a1:c2:
                    de:7d:bc:41:c2:b6:26:5b:42:6e:59:12:f0:19:f2:
                    5d:b3:9f:40:82:cd:42:6c:10:85:10:97:98:ac:28:
                    d1:8d:79:35:49:7a:ef:2d:f5:93:f7:e8:62:d4:27:
                    0d:3a:73:8b:aa:64:28:cd:6b:e3:cb:27:95:54:83:
                    b1:7c:c0:10:a1:2c:75:c1:8b:1c:c6:ae:52:02:b0:
                    7f:12:1d:ab:1e:c4:85:6c:c6:bd:7d:7c:e8:bd:90:
                    a2:30:42:2d:07:cf:d3:37:14:ce:4e:78:18:1b:64:
                    28:3f:ea:11:32:ec:7f:99:97:f3:ce:13:2e:33:01:
                    70:1c:36:88:fb:21:40:4d:9b:38:cd:cb:1b:61:23:
                    bf:05:9a:07:b8:96:a0:62:3d:88:e2:e3:c0:1d:77:
                    ca:9c:17:bc:76:1e:a2:a8:7f:98:8a:35:ae:67:5c:
                    c1:70:2e:9d:93:43:b6:cc:d9:11:4a:7a:96:46:ed:
                    2c:de:cd:07:a6:ec:ae:46:8c:a5:09:24:e7:08:00:
                    db:e4:fd:32:8b:31:05:c0:73:9b:54:3d:10:99:46:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8A:26:C0:78:8F:8F:BE:0A:BA:85:57:27:FA:4D:95:DB:7A:CF:97
            X509v3 Authority Key Identifier:
                keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:be:3f:a1:cb:51:c1:9b:f4:d0:10:df:89:e4:0c:9e:66:79:
         ef:92:00:20:25:25:a1:b6:fa:85:68:5a:db:3b:59:85:cb:00:
         f0:3d:72:95:f2:16:7c:6e:3c:5c:97:68:e7:7e:ee:24:50:3d:
         a3:44:62:ef:62:ee:21:73:7f:b0:20:01:26:33:88:35:43:ee:
         55:44:55:60:f3:dc:93:45:a0:1f:86:2c:e6:45:ab:86:8b:9f:
         aa:42:24:d2:b3:19:6d:b9:05:93:00:48:37:82:e8:59:bc:85:
         06:0d:be:63:56:90:33:73:6b:12:f6:98:37:b1:13:cb:f9:0b:
         b5:89:81:e1:c7:16:e2:9a:a1:ad:ab:cd:ae:1e:e2:3e:c9:04:
         a5:4c:e6:4a:85:dd:88:64:33:6d:60:ab:8e:00:4e:d2:53:ab:
         50:34:ef:90:83:da:75:92:e5:23:d0:d7:bf:00:df:6d:66:4b:
         1e:34:35:18:a0:3c:8e:6f:59:bf:11:f5:6c:b3:a0:79:09:32:
         02:21:8f:11:22:63:3c:f9:28:75:59:1b:15:67:e2:ac:e1:06:
         b6:63:7b:72:04:64:67:6f:0b:33:77:5b:13:28:42:b2:37:10:
         b0:ef:54:d7:88:6a:0f:90:dc:b7:79:9a:a3:9a:0b:25:cf:f4:
         83:f7:8a:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8WxkcUSJZhAseuR/lgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNDIwYjc5OWM1MjA2YTE5ZWY3NzE3ZWUzYzczMTJmZDg4
MzMwYWUwHhcNMjUwNDEzMTEwMTMwWhcNMjUwNDE0MTEwMTMwWjAzMTEwLwYDVQQD
EyhkYzhhMjZjMDc4OGY4ZmJlMGFiYTg1NTcyN2ZhNGQ5NWRiN2FjZjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt91yiq8wbPTNfpNCILFwRg+4Znu
wwfaYs9mh8+5lqbpZN0NHlsRzXGyocLefbxBwrYmW0JuWRLwGfJds59Ags1CbBCF
EJeYrCjRjXk1SXrvLfWT9+hi1CcNOnOLqmQozWvjyyeVVIOxfMAQoSx1wYscxq5S
ArB/Eh2rHsSFbMa9fXzovZCiMEItB8/TNxTOTngYG2QoP+oRMux/mZfzzhMuMwFw
HDaI+yFATZs4zcsbYSO/BZoHuJagYj2I4uPAHXfKnBe8dh6iqH+YijWuZ1zBcC6d
k0O2zNkRSnqWRu0s3s0HpuyuRoylCSTnCADb5P0yizEFwHObVD0QmUa3GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyKJsB4j4++CrqFVyf6TZXbes+XMB8GA1UdIwQY
MBaAFBtCC3mcUgahnvdxfuPHMS/YgzCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAt
OTQ2MDE4MjQxYzUxLzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAtOTQ2MDE4MjQxYzUx
LzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsL4/octR
wZv00BDfieQMnmZ575IAICUlobb6hWha2ztZhcsA8D1ylfIWfG48XJdo537uJFA9
o0Ri72LuIXN/sCABJjOINUPuVURVYPPck0WgH4Ys5kWrhoufqkIk0rMZbbkFkwBI
N4LoWbyFBg2+Y1aQM3NrEvaYN7ETy/kLtYmB4ccW4pqhravNrh7iPskEpUzmSoXd
iGQzbWCrjgBO0lOrUDTvkIPadZLlI9DXvwDfbWZLHjQ1GKA8jm9ZvxH1bLOgeQky
AiGPESJjPPkodVkbFWfirOEGtmN7cgRkZ28LM3dbEyhCsjcQsO9U14hqD5Dct3ma
o5oLJc/0g/eKgg==
-----END CERTIFICATE-----