Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File:                     GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier:          JenBLvIHm+vzKcudBtwsLKSRnYNYYQMcb/u3ARHw4nI=
Subject key identifier:   29:3E:6D:9B:4C:52:D0:4D:87:7B:FA:0A:3B:BD:E7:E2:82:39:4E:1B
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer:       /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial:       01962DF457BB347C808C0293F229DBF352B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number:          1219
Signing time:             Sun 13 Apr 2025 07:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:49 +0000
Files and hashes:         1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: frFTYxaWhWFPCIQrf45L/3me2DVZ0amfp6jd7FUlMds=)
                          2: bC6pTGDsZ4iOHNe53IXcZCBmlIw.roa (hash: Nu4vCdQXopNGTYxKSdmiEuUUjtIYYlh9hvqm6GEgfmc=)
                          3: gTevhc6qc4MGdWT2sBbSMEC4YgM.roa (hash: 4M8K26KcOSHJ0nGX0i/rIrbgJM9kUehQ4d7VbJr5lpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:57:bb:34:7c:80:8c:02:93:f2:29:db:f3:52:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
        Validity
            Not Before: Apr 13 07:01:49 2025 GMT
            Not After : Apr 14 07:01:49 2025 GMT
        Subject: CN=293e6d9b4c52d04d877bfa0a3bbde7e282394e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:4a:31:11:5e:32:c7:40:78:e5:5d:57:13:
                    6a:c8:be:5b:da:03:33:0a:e0:7f:07:ca:fa:6a:d3:
                    f2:47:a0:39:cf:bf:63:16:7e:3d:30:c5:d5:bd:cf:
                    8e:64:6f:1b:cc:2c:a1:63:ae:87:e5:5f:89:33:36:
                    0e:af:6e:bf:1d:aa:f1:7a:2c:cb:45:ed:ac:6f:a5:
                    e0:26:49:15:a7:ef:84:db:10:8d:48:e7:65:7b:6b:
                    ff:a0:08:f2:6f:73:73:74:87:53:4e:be:56:a2:ef:
                    66:c4:7d:5b:c0:24:02:cc:c4:4b:1a:9c:df:7f:19:
                    88:1f:f2:cf:35:00:0a:fc:42:24:e7:f2:42:a9:fe:
                    31:53:7a:91:a6:16:80:95:b4:6e:81:64:7b:07:7a:
                    7f:1b:24:b4:8d:b1:f4:82:1b:92:09:25:49:cc:28:
                    ee:b0:00:50:a8:35:51:72:1e:e4:70:f6:09:0a:71:
                    e4:8a:2a:b6:a2:da:2e:6f:c0:4a:39:85:c1:2c:51:
                    0c:6c:6d:b6:b9:8e:e6:e7:42:84:1f:41:7b:c8:fc:
                    71:11:c1:7d:7c:01:fe:77:82:87:3f:0e:ce:9e:fd:
                    fc:fe:e6:e1:59:65:61:d8:5e:13:92:f7:89:55:c2:
                    53:b4:fe:f4:a8:67:22:d6:8d:70:a4:b9:86:cf:71:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3E:6D:9B:4C:52:D0:4D:87:7B:FA:0A:3B:BD:E7:E2:82:39:4E:1B
            X509v3 Authority Key Identifier:
                keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:66:bc:bb:ad:bb:1f:ac:56:b0:3d:48:91:37:5e:bc:47:7d:
         e3:be:dc:30:06:db:11:7a:50:06:e4:c6:be:49:f5:6e:32:2b:
         8f:ec:47:62:79:8e:30:f0:82:79:d1:31:45:f1:5a:5d:47:e2:
         61:7d:b0:cb:e8:4e:7e:b1:de:75:e5:86:56:72:d9:3b:e9:ed:
         52:11:f4:be:f4:9c:8d:75:d9:ce:78:fa:19:ef:e7:46:0e:74:
         83:d7:d8:36:e0:c6:c4:97:9d:f4:10:f9:f6:37:05:69:06:67:
         dd:af:87:4a:7f:a8:36:ca:61:87:d1:0e:77:43:dc:eb:75:ee:
         b6:73:f8:12:70:f7:20:f3:84:f2:cc:4b:88:88:fc:bf:dc:36:
         35:8f:c6:1b:ad:4d:8d:5e:82:fe:6e:5b:8d:6f:9f:1f:cd:c7:
         6f:4b:56:92:4c:be:61:78:e7:31:13:ad:c1:0e:09:42:b1:a2:
         b7:bc:b5:9f:41:a5:be:0f:01:2e:28:65:64:d0:9a:4f:43:a5:
         79:2d:9c:07:70:3a:12:1a:6b:47:51:f4:6f:3a:84:3b:82:f5:
         25:f7:8d:49:f9:9d:6f:9d:58:21:41:c0:f1:8b:8c:ed:9e:04:
         8a:49:61:01:b5:75:d8:b4:9a:f9:db:49:c0:1d:00:ec:b5:84:
         40:75:da:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Fe7NHyAjAKT8inb81KzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWE5NmEyOGM2NWQ1ODRjOGRkMjM0ZDNkYjQ0NGNmNGIz
MzdiYTIwHhcNMjUwNDEzMDcwMTQ5WhcNMjUwNDE0MDcwMTQ5WjAzMTEwLwYDVQQD
EygyOTNlNmQ5YjRjNTJkMDRkODc3YmZhMGEzYmJkZTdlMjgyMzk0ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHNKMRFeMsdAeOVdVxNqyL5b2gMz
CuB/B8r6atPyR6A5z79jFn49MMXVvc+OZG8bzCyhY66H5V+JMzYOr26/HarxeizL
Re2sb6XgJkkVp++E2xCNSOdle2v/oAjyb3NzdIdTTr5Wou9mxH1bwCQCzMRLGpzf
fxmIH/LPNQAK/EIk5/JCqf4xU3qRphaAlbRugWR7B3p/GyS0jbH0ghuSCSVJzCju
sABQqDVRch7kcPYJCnHkiiq2otoub8BKOYXBLFEMbG22uY7m50KEH0F7yPxxEcF9
fAH+d4KHPw7Onv38/ubhWWVh2F4TkveJVcJTtP70qGci1o1wpLmGz3HZQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk+bZtMUtBNh3v6Cju95+KCOU4bMB8GA1UdIwQY
MBaAFBkalqKMZdWEyN0jTT20RM9LM3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYt
OTE4NTE5OWExOGMwLzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYtOTE4NTE5OWExOGMw
LzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2a8u627
H6xWsD1IkTdevEd9477cMAbbEXpQBuTGvkn1bjIrj+xHYnmOMPCCedExRfFaXUfi
YX2wy+hOfrHedeWGVnLZO+ntUhH0vvScjXXZznj6Ge/nRg50g9fYNuDGxJed9BD5
9jcFaQZn3a+HSn+oNsphh9EOd0Pc63XutnP4EnD3IPOE8sxLiIj8v9w2NY/GG61N
jV6C/m5bjW+fH83Hb0tWkky+YXjnMROtwQ4JQrGit7y1n0Glvg8BLihlZNCaT0Ol
eS2cB3A6EhprR1H0bzqEO4L1JfeNSfmdb51YIUHA8YuM7Z4EiklhAbV12LSa+dtJ
wB0A7LWEQHXapg==
-----END CERTIFICATE-----