Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
File:                     GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft (raw, json)
Hash identifier:          ylP13s8C1dP9k+QiW9yb8/BEpiQ36iV/iwzJz35j7Ro=
Subject key identifier:   12:0E:94:05:25:E4:FE:6A:DD:0C:E5:55:98:B3:E1:DB:D2:F5:72:42
Authority key identifier: 19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C
Certificate issuer:       /CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
Certificate serial:       01962E99A6C5F12BD300A8B622DBFBE900E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
Manifest number:          0979
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl (hash: AErRCW1QZjOwlMkPPm9Oeew3QA+2gKI+xczd1GVMpZ0=)
                          2: zvde-1FktXCEIRB3FHyBiaah4JI.roa (hash: 6R+oudRdqFBVe7OQ/+aXtal9Y8TCWwoFCMfYuyQJNpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a6:c5:f1:2b:d3:00:a8:b6:22:db:fb:e9:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=120e940525e4fe6add0ce55598b3e1dbd2f57242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:9d:cc:88:47:70:56:3f:a8:41:ae:67:1e:
                    a3:39:93:4b:9b:48:41:a4:56:81:81:90:84:c5:70:
                    f2:6f:ef:98:39:36:f1:7e:f5:44:08:9a:bc:78:33:
                    2a:ca:db:7b:a4:92:d4:7c:d7:85:dd:72:1f:98:d6:
                    26:88:1e:c7:64:6d:09:00:7d:3d:da:18:5e:58:ff:
                    3f:73:ad:d4:60:86:b4:09:a8:19:ea:10:c2:f1:fe:
                    01:f5:31:dd:7c:78:3b:39:1c:4d:bc:00:3a:f9:b5:
                    3d:c0:2f:4b:fd:f5:07:a4:4a:d2:f4:ed:94:b2:17:
                    19:cd:e9:eb:9e:77:5e:73:e7:d8:ef:c9:67:62:2d:
                    f1:98:5d:7d:bd:30:18:94:ac:3c:24:d6:a4:14:7f:
                    57:3c:24:67:51:9c:7d:71:6a:a9:16:30:cb:4d:c2:
                    f8:da:53:ca:a8:0f:de:f1:31:7e:fb:78:62:24:b6:
                    b3:28:55:75:13:50:7e:14:ae:13:46:83:ac:81:0a:
                    83:2f:dd:45:d6:d4:5b:80:c7:aa:5b:5a:49:a0:e9:
                    67:70:74:94:ba:68:9c:9c:90:40:e4:5a:e0:5e:33:
                    b0:05:7b:d3:7b:42:77:0e:38:df:e7:29:b8:a6:a7:
                    0a:1e:05:73:4c:e9:62:ab:d3:bf:2d:06:9d:d4:8a:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0E:94:05:25:E4:FE:6A:DD:0C:E5:55:98:B3:E1:DB:D2:F5:72:42
            X509v3 Authority Key Identifier:
                keyid:19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:3c:12:c8:59:e8:81:82:ab:2e:cc:b4:ac:ea:c1:ff:ae:57:
         67:f5:8d:48:e9:15:be:fe:8a:7c:3a:07:ba:43:b8:2f:a9:42:
         11:bd:3d:be:52:30:31:27:44:5b:f6:d1:63:47:8c:a1:d6:d5:
         c3:f0:30:b8:ef:2d:46:09:15:d8:8f:3f:69:fb:ec:ae:2c:16:
         93:7c:10:5e:b2:90:b1:99:f0:45:fc:02:c1:48:c7:66:ee:ca:
         e1:4c:c2:64:ee:6e:12:3a:8b:fc:3c:fb:76:60:e3:00:7b:5a:
         2b:a9:cc:a2:b9:9c:22:93:42:4f:86:c5:a8:ab:ad:3a:9a:8a:
         61:70:60:11:2b:be:52:64:34:05:e6:cb:26:3c:91:22:74:de:
         a9:3b:7b:1d:9b:c3:fc:76:1c:09:51:00:a8:18:e6:3c:b0:0b:
         8c:28:46:ed:c5:73:bc:61:fe:68:9b:60:49:3c:2a:df:a7:db:
         39:ac:7a:99:f0:34:75:02:fc:d0:1e:a6:02:52:74:f2:eb:61:
         d4:34:42:32:24:37:92:ea:13:ce:50:20:56:e6:b0:77:82:53:
         d5:b1:61:c1:d8:d9:a5:cf:08:25:49:b1:62:01:5a:a1:46:94:
         7e:e1:c5:28:fb:cf:51:01:9d:f4:a9:f4:90:a7:ae:45:1a:92:
         d1:09:46:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumabF8SvTAKi2Itv76QDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTNjYjQ4NTY4MjFkMTRjZDJlMGI3NjdjMjkzMWEyMmMx
NTRlN2MwHhcNMjUwNDEzMTAwMjIzWhcNMjUwNDE0MTAwMjIzWjAzMTEwLwYDVQQD
EygxMjBlOTQwNTI1ZTRmZTZhZGQwY2U1NTU5OGIzZTFkYmQyZjU3MjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscOdzIhHcFY/qEGuZx6jOZNLm0hB
pFaBgZCExXDyb++YOTbxfvVECJq8eDMqytt7pJLUfNeF3XIfmNYmiB7HZG0JAH09
2hheWP8/c63UYIa0CagZ6hDC8f4B9THdfHg7ORxNvAA6+bU9wC9L/fUHpErS9O2U
shcZzenrnndec+fY78lnYi3xmF19vTAYlKw8JNakFH9XPCRnUZx9cWqpFjDLTcL4
2lPKqA/e8TF++3hiJLazKFV1E1B+FK4TRoOsgQqDL91F1tRbgMeqW1pJoOlncHSU
umicnJBA5FrgXjOwBXvTe0J3Djjf5ym4pqcKHgVzTOliq9O/LQad1IpQsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIOlAUl5P5q3QzlVZiz4dvS9XJCMB8GA1UdIwQY
MBaAFBkTy0hWgh0UzS4LdnwpMaIsFU58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JQTFNGYUNIUlROTGd0MmZDa3hvaXdWVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xOTc3ZGUtMWRmNC00MDRjLTlkYTkt
MDc3OWRmMWRkNjRkLzEvR1JQTFNGYUNIUlROTGd0MmZDa3hvaXdWVG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xOTc3ZGUtMWRmNC00MDRjLTlkYTktMDc3OWRmMWRkNjRk
LzEvR1JQTFNGYUNIUlROTGd0MmZDa3hvaXdWVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzwSyFno
gYKrLsy0rOrB/65XZ/WNSOkVvv6KfDoHukO4L6lCEb09vlIwMSdEW/bRY0eModbV
w/AwuO8tRgkV2I8/afvsriwWk3wQXrKQsZnwRfwCwUjHZu7K4UzCZO5uEjqL/Dz7
dmDjAHtaK6nMormcIpNCT4bFqKutOpqKYXBgESu+UmQ0BebLJjyRInTeqTt7HZvD
/HYcCVEAqBjmPLALjChG7cVzvGH+aJtgSTwq36fbOax6mfA0dQL80B6mAlJ08uth
1DRCMiQ3kuoTzlAgVuawd4JT1bFhwdjZpc8IJUmxYgFaoUaUfuHFKPvPUQGd9Kn0
kKeuRRqS0QlGYQ==
-----END CERTIFICATE-----