Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
File:                     GXYcuDMg_8ugH9gHoG6InMMdhec.mft (raw, json)
Hash identifier:          mmyuufJw1F+kPSGUv6RrKBKqP8Gf/LCSUytJSBU2j+s=
Subject key identifier:   5F:25:58:8C:D7:6E:1B:19:21:C0:1A:24:9F:98:4F:AC:3D:C7:78:6A
Authority key identifier: 19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7
Certificate issuer:       /CN=19761cb83320ffcba01fd807a06e889cc31d85e7
Certificate serial:       01962DF3D833F4E4E38BBE8F8629B17593D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft
Manifest number:          013A
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: GXYcuDMg_8ugH9gHoG6InMMdhec.crl (hash: fwY5Q5M4pRxlOi/wau7Tc4CQPuMuMpFiWBQOt7QI0g4=)
                          2: Ty2odF6IC8z1MlXMbYRSCNZm2f8.roa (hash: x0KKkB+0aY8vDOyJs8CL2l2Pu3KalqTjZiy3MLgQKrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d8:33:f4:e4:e3:8b:be:8f:86:29:b1:75:93:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19761cb83320ffcba01fd807a06e889cc31d85e7
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=5f25588cd76e1b1921c01a249f984fac3dc7786a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:0c:00:db:6b:25:c8:7c:f4:7a:77:e3:8e:
                    4d:c5:8d:e1:61:87:f4:c6:a7:57:ba:af:2c:62:c4:
                    8f:9e:06:20:13:ca:b1:5d:5c:42:df:b8:4c:b4:55:
                    02:e2:d3:50:82:e3:de:bf:4f:99:3e:19:b2:a6:b9:
                    22:63:36:f7:e3:6c:6b:ca:6b:07:c6:68:5d:06:5a:
                    98:8e:74:15:d4:a4:71:4c:03:e5:fe:a8:14:1c:53:
                    7e:aa:c5:f6:9f:d8:5a:8a:b4:a6:48:49:17:c8:c3:
                    29:78:74:bd:be:38:b2:cd:b6:2b:0e:ce:ca:88:6b:
                    b2:eb:b1:18:65:95:e7:16:91:51:cc:b0:93:55:79:
                    47:0a:1f:1d:0f:53:85:c5:93:2e:18:7e:8a:88:84:
                    50:ff:5a:bc:b2:85:69:8c:ac:f3:61:d0:21:4a:e5:
                    83:d5:bd:9d:78:f4:11:28:99:25:6e:61:17:94:90:
                    66:5f:c5:8c:34:7d:22:dd:a8:9a:29:e0:0a:47:11:
                    10:42:b4:4b:51:f0:fb:cd:fd:bd:72:d0:bb:9e:db:
                    40:77:01:8c:c2:87:23:98:48:12:c1:06:2e:c0:2e:
                    d5:5f:50:9d:36:c1:e7:7b:f5:df:50:d1:fe:eb:02:
                    fa:90:d8:c9:b9:b0:96:e8:75:99:72:c5:ac:24:51:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:25:58:8C:D7:6E:1B:19:21:C0:1A:24:9F:98:4F:AC:3D:C7:78:6A
            X509v3 Authority Key Identifier:
                keyid:19:76:1C:B8:33:20:FF:CB:A0:1F:D8:07:A0:6E:88:9C:C3:1D:85:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GXYcuDMg_8ugH9gHoG6InMMdhec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/GXYcuDMg_8ugH9gHoG6InMMdhec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:54:ea:c9:1e:0b:73:0f:0b:f1:d9:53:b4:65:05:88:dc:
         18:d1:5f:e4:6f:da:7f:4a:54:13:d3:bf:b5:72:a1:30:d0:7d:
         20:e9:26:f8:c7:63:37:ea:fc:97:ae:be:4a:d4:6f:14:d2:b7:
         f1:20:3e:df:84:d4:ae:9c:b2:a5:93:7c:df:b2:6e:b0:71:fe:
         db:90:3f:77:6d:56:dd:b3:91:c7:4b:6c:a2:7d:3a:fa:36:4e:
         bc:1f:2f:f5:90:40:e3:8d:dc:33:d5:73:21:98:4f:9e:ba:1e:
         bb:1f:5a:64:cb:b1:d4:8d:2b:1c:29:68:60:8a:aa:32:f1:f2:
         eb:32:aa:69:fb:63:24:3c:c8:af:a5:e8:ef:dd:1b:96:ae:df:
         13:52:32:2a:3a:8b:eb:c6:af:f8:10:1c:02:85:97:5b:54:5e:
         e8:9f:24:46:ea:bc:a7:6e:ca:cb:4e:a7:9a:ac:05:30:37:da:
         72:06:84:4f:da:a6:e8:8a:95:9b:50:54:c4:7a:5e:2e:94:83:
         ed:8b:08:ea:94:fb:47:05:c9:0a:59:c3:09:63:a7:50:0c:26:
         21:aa:95:b5:57:b1:65:58:01:45:82:ab:ac:8d:87:ec:20:0f:
         6d:2a:99:f0:61:c6:d2:11:86:59:b3:42:40:e0:a0:db:ae:1e:
         3b:53:cf:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89gz9OTji76PhimxdZPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NzYxY2I4MzMyMGZmY2JhMDFmZDgwN2EwNmU4ODljYzMx
ZDg1ZTcwHhcNMjUwNDEzMDcwMTE3WhcNMjUwNDE0MDcwMTE3WjAzMTEwLwYDVQQD
Eyg1ZjI1NTg4Y2Q3NmUxYjE5MjFjMDFhMjQ5Zjk4NGZhYzNkYzc3ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVQMANtrJch89Hp3445NxY3hYYf0
xqdXuq8sYsSPngYgE8qxXVxC37hMtFUC4tNQguPev0+ZPhmyprkiYzb342xrymsH
xmhdBlqYjnQV1KRxTAPl/qgUHFN+qsX2n9hairSmSEkXyMMpeHS9vjiyzbYrDs7K
iGuy67EYZZXnFpFRzLCTVXlHCh8dD1OFxZMuGH6KiIRQ/1q8soVpjKzzYdAhSuWD
1b2dePQRKJklbmEXlJBmX8WMNH0i3aiaKeAKRxEQQrRLUfD7zf29ctC7nttAdwGM
wocjmEgSwQYuwC7VX1CdNsHne/XfUNH+6wL6kNjJubCW6HWZcsWsJFGAnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8lWIzXbhsZIcAaJJ+YT6w9x3hqMB8GA1UdIwQY
MBaAFBl2HLgzIP/LoB/YB6BuiJzDHYXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgt
Y2Q4YmUxYzU5ZDhkLzEvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgtY2Q4YmUxYzU5ZDhk
LzEvR1hZY3VETWdfOHVnSDlnSG9HNkluTU1kaGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9BU6ske
C3MPC/HZU7RlBYjcGNFf5G/af0pUE9O/tXKhMNB9IOkm+MdjN+r8l66+StRvFNK3
8SA+34TUrpyypZN837JusHH+25A/d21W3bORx0tson06+jZOvB8v9ZBA443cM9Vz
IZhPnroeux9aZMux1I0rHCloYIqqMvHy6zKqaftjJDzIr6Xo790blq7fE1IyKjqL
68av+BAcAoWXW1Re6J8kRuq8p27Ky06nmqwFMDfacgaET9qm6IqVm1BUxHpeLpSD
7YsI6pT7RwXJClnDCWOnUAwmIaqVtVexZVgBRYKrrI2H7CAPbSqZ8GHG0hGGWbNC
QOCg264eO1PP6Q==
-----END CERTIFICATE-----