Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
File:                     g2pzvtdapO-ld-2QrTVi4hlR0bI.mft (raw, json)
Hash identifier:          IC7aEl3UAMlS5Aoo6tEfGqPRUBL1ZcVhth18YK8aM8g=
Subject key identifier:   F6:7C:73:5F:3F:7E:FA:C9:CF:A3:11:FD:BD:4E:D2:62:30:B0:F9:9C
Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2
Certificate issuer:       /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
Certificate serial:       01962E2ABDA51F148DC6A8A9A1BF776E27C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft
Manifest number:          12F0
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: g2pzvtdapO-ld-2QrTVi4hlR0bI.crl (hash: vv47kDQWJ/1zAUQmXKBJAH0INWYPlLDfG9e6bS6KZxI=)
                          2: pCExSDuPpylceZEh-3ghVJcWtXU.roa (hash: EmDT0awECjqFFQZyEcdl/Y2PrhZj4pSyXOCLhHqwv2c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bd:a5:1f:14:8d:c6:a8:a9:a1:bf:77:6e:27:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=f67c735f3f7efac9cfa311fdbd4ed26230b0f99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:2c:19:60:55:b8:f9:43:be:84:22:ae:f6:
                    fc:c4:87:2e:3f:a9:05:d7:c5:ef:83:b7:20:55:c2:
                    4c:60:1d:db:cc:32:8c:cf:3d:26:ab:ae:e7:aa:ff:
                    c8:b7:7b:44:a7:ca:b1:b1:fb:7d:03:3b:f3:f2:0f:
                    1c:3c:50:87:ac:7d:2d:23:57:52:e2:eb:88:7b:a2:
                    55:62:e3:39:5b:30:fe:d0:0d:3b:03:48:11:ff:2c:
                    b8:61:e1:2a:2d:6a:8e:ff:9a:ce:75:b5:98:d2:92:
                    70:7f:fe:da:60:1e:d5:38:6f:71:b0:2f:2a:b1:b2:
                    e6:91:8b:63:df:b0:8e:3a:bb:65:d3:7d:16:25:e0:
                    61:ce:f6:48:f2:c7:b5:78:4d:72:58:fe:03:60:d2:
                    b9:52:fc:8e:c8:62:53:4c:db:22:72:c8:8c:2e:2a:
                    7f:71:25:75:39:1a:d8:e0:dd:47:2d:84:9d:26:52:
                    a3:09:bb:46:60:ee:cb:99:32:58:02:29:b6:ee:a5:
                    e0:4c:b3:47:fd:63:c4:c8:c3:d2:7a:4d:d7:10:55:
                    29:af:ee:ea:7a:55:18:4d:b0:13:b9:e1:b7:5e:2d:
                    85:bf:ad:69:f4:e6:35:2c:5d:45:07:7e:b3:58:1a:
                    7e:aa:7a:18:5f:bd:52:14:4d:87:40:c7:f4:fc:c7:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7C:73:5F:3F:7E:FA:C9:CF:A3:11:FD:BD:4E:D2:62:30:B0:F9:9C
            X509v3 Authority Key Identifier:
                keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:14:62:11:c0:8b:9d:d0:c9:6a:b6:b5:f8:ad:44:54:a9:b1:
         88:6a:9b:84:68:6d:07:ac:03:0b:01:c4:06:0a:8d:16:47:13:
         09:50:15:5e:ba:3d:a2:a2:05:24:94:8f:d5:4c:3b:fb:dd:89:
         e0:47:86:b5:d6:ba:06:13:39:28:60:3c:0e:ef:65:07:e2:00:
         b1:d0:8d:fe:2f:ad:74:2f:b3:7a:94:92:fe:e6:ce:02:48:96:
         d4:c1:42:2a:f1:e7:a6:01:fb:9a:ff:d1:78:c5:cc:e8:4f:61:
         06:10:bf:93:4a:9d:0f:c5:1e:bf:0d:ef:6e:d0:79:91:50:8a:
         38:3e:64:e8:3e:8a:00:fb:64:07:62:5f:bc:14:e6:c3:07:21:
         16:8f:8c:13:95:45:58:78:ba:d7:06:47:81:fc:19:7f:c0:fe:
         57:cd:c9:71:27:eb:fc:7f:5e:e1:d5:6a:66:a5:3b:80:c3:32:
         d7:92:d1:d3:31:db:69:76:88:8e:48:5d:db:82:52:8e:33:71:
         fd:b5:28:40:d5:55:e5:db:1d:f0:d6:87:6f:d9:19:c3:3b:f9:
         e0:a1:a3:21:4d:70:3c:b2:e0:b7:c0:0b:71:e1:d0:ee:f0:a0:
         cd:d0:af:ee:36:a0:1a:ee:c2:4a:7d:79:4a:76:66:11:fd:3d:
         29:58:60:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKr2lHxSNxqipob93bifHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNmE3M2JlZDc1YWE0ZWZhNTc3ZWQ5MGFkMzU2MmUyMTk1
MWQxYjIwHhcNMjUwNDEzMDgwMTE0WhcNMjUwNDE0MDgwMTE0WjAzMTEwLwYDVQQD
EyhmNjdjNzM1ZjNmN2VmYWM5Y2ZhMzExZmRiZDRlZDI2MjMwYjBmOTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNQsGWBVuPlDvoQirvb8xIcuP6kF
18Xvg7cgVcJMYB3bzDKMzz0mq67nqv/It3tEp8qxsft9Azvz8g8cPFCHrH0tI1dS
4uuIe6JVYuM5WzD+0A07A0gR/yy4YeEqLWqO/5rOdbWY0pJwf/7aYB7VOG9xsC8q
sbLmkYtj37COOrtl030WJeBhzvZI8se1eE1yWP4DYNK5UvyOyGJTTNsicsiMLip/
cSV1ORrY4N1HLYSdJlKjCbtGYO7LmTJYAim27qXgTLNH/WPEyMPSek3XEFUpr+7q
elUYTbATueG3Xi2Fv61p9OY1LF1FB36zWBp+qnoYX71SFE2HQMf0/Mc0NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ8c18/fvrJz6MR/b1O0mIwsPmcMB8GA1UdIwQY
MBaAFINqc77XWqTvpXftkK01YuIZUdGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hYjM0YWQtOWU5YS00Mjg5LTg3Mjct
YjFhY2Q3NTAxOGMzLzEvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9hYjM0YWQtOWU5YS00Mjg5LTg3MjctYjFhY2Q3NTAxOGMz
LzEvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxRiEcCL
ndDJara1+K1EVKmxiGqbhGhtB6wDCwHEBgqNFkcTCVAVXro9oqIFJJSP1Uw7+92J
4EeGtda6BhM5KGA8Du9lB+IAsdCN/i+tdC+zepSS/ubOAkiW1MFCKvHnpgH7mv/R
eMXM6E9hBhC/k0qdD8Uevw3vbtB5kVCKOD5k6D6KAPtkB2JfvBTmwwchFo+ME5VF
WHi61wZHgfwZf8D+V83JcSfr/H9e4dVqZqU7gMMy15LR0zHbaXaIjkhd24JSjjNx
/bUoQNVV5dsd8NaHb9kZwzv54KGjIU1wPLLgt8ALceHQ7vCgzdCv7jagGu7CSn15
SnZmEf09KVhg6w==
-----END CERTIFICATE-----