Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File:                     g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier:          ij6XUSPLUFL0wK8Cq0B7NCkHp7z/BDwYd6O9ftqPAzs=
Subject key identifier:   2B:39:CC:73:2A:9C:BE:5B:52:66:63:3A:80:80:C8:AD:F1:4C:FB:F9
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer:       /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial:       01962FAB2E267FB307C42F20DB9683CEF70D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa (hash: atB7rNB4GngxSgp2zRWRq0GhS+DcIAMSX9Cb0N8BlB8=)
                          2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: ALYlv1k8yjSC0nQnQVV4SaLw6C1Ysnp5Buy+q8o6AAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2e:26:7f:b3:07:c4:2f:20:db:96:83:ce:f7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=2b39cc732a9cbe5b5266633a8080c8adf14cfbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dd:f0:5c:ec:c1:62:86:33:ee:63:38:a8:31:
                    a5:ba:a0:35:02:2e:da:43:26:d7:bb:ca:b6:3b:d4:
                    71:53:e9:bd:f4:a6:85:77:af:c4:db:21:15:f2:dd:
                    87:7b:6c:19:00:14:85:a8:85:9f:18:ab:8f:79:51:
                    59:7a:47:cc:29:ce:59:00:fc:ec:ca:0b:c2:6b:4e:
                    78:ab:17:1d:a4:c4:9f:9b:ec:8c:1f:f7:7e:be:04:
                    2b:fb:ae:5f:3f:1c:92:7b:12:35:2c:5d:0a:76:5e:
                    d5:01:9f:65:47:28:5f:b5:0c:94:2d:dd:a8:a6:ce:
                    e6:f6:51:3c:ac:2e:69:cd:23:77:3c:8f:a5:ac:6f:
                    4c:7d:ee:94:d3:2e:e9:4d:40:05:46:53:d0:db:3e:
                    26:16:05:34:0f:e8:17:c4:02:2d:8f:c9:6d:a9:2a:
                    6b:b3:9a:a9:8c:a2:bf:79:72:37:18:a2:f9:31:de:
                    2b:83:16:d1:01:36:a9:a6:18:7d:5a:0e:c9:f6:b6:
                    df:f2:6b:56:3e:93:bf:40:5e:35:fa:1c:60:e0:d6:
                    10:93:e6:ec:8c:3c:ce:97:6a:d3:38:c5:f6:e3:22:
                    07:08:83:56:ea:eb:df:da:ef:91:bb:cf:ae:be:30:
                    e0:cd:8d:3c:20:a3:a8:44:1e:ed:01:df:b0:6e:4c:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:39:CC:73:2A:9C:BE:5B:52:66:63:3A:80:80:C8:AD:F1:4C:FB:F9
            X509v3 Authority Key Identifier:
                keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:e5:a7:e2:8d:08:ba:a3:66:fd:ee:9b:cc:ba:a4:70:04:
         b6:4b:b0:39:8f:d5:86:4d:51:aa:af:72:ff:13:90:f9:5f:7b:
         7b:b8:44:99:33:e5:0c:60:24:3d:44:9a:a0:a1:dd:41:ad:5c:
         6f:6c:f9:68:6d:35:eb:ee:c3:b6:a0:15:84:07:ef:a6:c4:32:
         0c:87:db:f6:b7:03:10:65:05:3a:fb:26:3b:6e:66:60:02:39:
         c1:d6:91:db:78:2d:d9:04:bb:df:2f:c8:47:1a:72:f6:47:0b:
         b3:ed:cc:7d:eb:c9:8e:ef:5e:d8:a6:ee:56:d3:42:02:e2:da:
         f0:b2:17:89:03:a1:04:d6:61:ff:12:63:73:22:f6:62:ff:ad:
         7e:55:d4:60:60:f9:8d:a8:a3:d5:dc:68:1f:e4:69:e4:9c:93:
         69:cb:8a:b0:a2:89:29:27:a2:70:91:4a:16:19:d3:cf:f6:64:
         ab:bb:08:d3:69:a2:b7:09:3b:81:4d:5c:df:19:d2:68:82:85:
         44:a3:59:ac:1b:a1:84:f8:3e:67:f4:be:0d:e6:41:b9:ca:d3:
         1b:b3:b5:6c:a5:69:98:8e:89:d3:78:70:d0:33:a3:c0:5f:f3:
         d6:b8:39:dc:1a:17:d7:01:af:a8:35:cd:df:b0:8c:0f:01:1e:
         77:be:73:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqy4mf7MHxC8g25aDzvcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZGNlMzczYzE4Yjk0MGE5NzgzOTBiMjcyNzAwMjc5YjMy
ZmVlM2EwHhcNMjUwNDEzMTUwMTA5WhcNMjUwNDE0MTUwMTA5WjAzMTEwLwYDVQQD
EygyYjM5Y2M3MzJhOWNiZTViNTI2NjYzM2E4MDgwYzhhZGYxNGNmYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA493wXOzBYoYz7mM4qDGluqA1Ai7a
QybXu8q2O9RxU+m99KaFd6/E2yEV8t2He2wZABSFqIWfGKuPeVFZekfMKc5ZAPzs
ygvCa054qxcdpMSfm+yMH/d+vgQr+65fPxySexI1LF0Kdl7VAZ9lRyhftQyULd2o
ps7m9lE8rC5pzSN3PI+lrG9Mfe6U0y7pTUAFRlPQ2z4mFgU0D+gXxAItj8ltqSpr
s5qpjKK/eXI3GKL5Md4rgxbRATapphh9Wg7J9rbf8mtWPpO/QF41+hxg4NYQk+bs
jDzOl2rTOMX24yIHCINW6uvf2u+Ru8+uvjDgzY08IKOoRB7tAd+wbkw3+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCs5zHMqnL5bUmZjOoCAyK3xTPv5MB8GA1UdIwQY
MBaAFIPc43PBi5QKl4OQsnJwAnmzL+46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzl6amM4R0xsQXFYZzVDeWNuQUNlYk12N2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80ODE1N2UtZDRmOC00ZjJkLWI5NmQt
MmQ2ZDU2ZDlmZjRlLzEvZzl6amM4R0xsQXFYZzVDeWNuQUNlYk12N2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC80ODE1N2UtZDRmOC00ZjJkLWI5NmQtMmQ2ZDU2ZDlmZjRl
LzEvZzl6amM4R0xsQXFYZzVDeWNuQUNlYk12N2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauPlp+KN
CLqjZv3um8y6pHAEtkuwOY/Vhk1Rqq9y/xOQ+V97e7hEmTPlDGAkPUSaoKHdQa1c
b2z5aG016+7DtqAVhAfvpsQyDIfb9rcDEGUFOvsmO25mYAI5wdaR23gt2QS73y/I
Rxpy9kcLs+3MfevJju9e2KbuVtNCAuLa8LIXiQOhBNZh/xJjcyL2Yv+tflXUYGD5
jaij1dxoH+Rp5JyTacuKsKKJKSeicJFKFhnTz/Zkq7sI02mitwk7gU1c3xnSaIKF
RKNZrBuhhPg+Z/S+DeZBucrTG7O1bKVpmI6J03hw0DOjwF/z1rg53BoX1wGvqDXN
37CMDwEed75zXQ==
-----END CERTIFICATE-----