Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
File:                     gJ7XCYERxniJisDwrsl_3Ts7bQI.mft (raw, json)
Hash identifier:          Hq4yLAB0W/9gPDyduGwTbuWdfcQ8LaCqGp7MchNSqXg=
Subject key identifier:   0C:F9:B2:37:7A:A3:24:DF:74:1C:16:D2:7F:D3:4C:2C:34:A9:E9:87
Authority key identifier: 80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02
Certificate issuer:       /CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
Certificate serial:       01962DF3CD0C5183DD311B2053D546828939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: 2rggwcJ8T590aTL5AQq3jnB50qI.roa (hash: Qg0ek4Wah1pBMdvyjGZuqYduAMoQDr2QwiISx+slnhM=)
                          2: gJ7XCYERxniJisDwrsl_3Ts7bQI.crl (hash: eg2iWzwYTt1BGYxdyHhXvNxXeQtNZrY7gFUTWDEpA5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cd:0c:51:83:dd:31:1b:20:53:d5:46:82:89:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=809ed7098111c678898ac0f0aec97fdd3b3b6d02
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=0cf9b2377aa324df741c16d27fd34c2c34a9e987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:09:e7:22:69:f7:67:48:1d:d5:d2:84:bb:93:
                    b1:1e:c1:45:b6:49:f1:ee:1c:3d:40:0b:08:b2:80:
                    42:af:7b:92:f2:27:7c:d2:bf:5f:72:39:fa:91:c5:
                    bb:fb:5e:ce:25:b0:4f:76:bf:0f:4e:03:ea:bd:31:
                    c3:b1:36:55:69:5a:65:72:bf:4c:94:97:08:73:04:
                    55:1a:fb:ab:d4:2b:4a:d7:dd:8b:82:fa:ef:e9:e7:
                    14:2c:e1:ec:36:05:a9:95:3a:0d:db:f9:90:61:16:
                    25:de:c5:3d:d7:d9:bc:b9:81:da:d1:40:e2:69:55:
                    fd:fc:87:7e:93:25:d5:37:3b:2a:69:91:f5:e3:ec:
                    db:33:6e:a6:c0:72:74:fc:7f:7c:e1:fc:85:80:f0:
                    c9:a9:3e:ca:14:f4:57:d1:a4:62:49:6a:38:6a:0c:
                    ab:1d:93:f3:ea:e3:9a:d2:1b:f7:cb:cd:6d:7b:97:
                    86:cc:e1:0f:78:2a:e5:a1:c1:d7:61:d0:9d:6a:d3:
                    77:a3:c0:ab:e6:f3:ac:12:d4:2b:18:72:b6:a6:c8:
                    79:fc:b3:c6:8c:34:62:5f:94:ba:83:ab:e9:6d:02:
                    d6:f3:ad:18:00:58:94:47:8d:6d:aa:22:01:2c:3c:
                    6b:79:1f:28:9b:17:e5:77:b4:20:23:f5:33:92:02:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:B2:37:7A:A3:24:DF:74:1C:16:D2:7F:D3:4C:2C:34:A9:E9:87
            X509v3 Authority Key Identifier:
                keyid:80:9E:D7:09:81:11:C6:78:89:8A:C0:F0:AE:C9:7F:DD:3B:3B:6D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJ7XCYERxniJisDwrsl_3Ts7bQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b4a477-08a2-4e8c-8c4d-010cd9079abf/1/gJ7XCYERxniJisDwrsl_3Ts7bQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:47:2c:5d:65:e5:03:0f:cf:66:4e:fa:d4:23:d7:11:9b:9b:
         ec:26:59:b2:cd:9b:4f:8d:96:f2:c8:ce:8c:05:e0:d6:67:ec:
         11:15:fc:91:ba:96:3f:7f:48:5e:57:19:99:9d:9a:17:9a:c0:
         df:4e:bf:14:d6:0d:68:59:d0:81:ab:c1:9b:72:c7:f0:71:ce:
         1c:9e:3a:18:be:1f:fb:39:f3:20:f4:ca:ce:e4:3d:39:a6:00:
         c6:07:b7:94:26:e8:fc:78:76:fa:53:ec:7e:e9:75:58:e0:b6:
         20:54:c4:d0:2e:35:b4:00:3d:b8:43:8f:fa:6a:22:ce:2e:80:
         24:54:79:b5:73:0f:45:73:02:d6:2b:21:d7:6a:10:1f:0e:fa:
         8e:b6:85:25:2e:22:ee:fd:59:84:a6:5b:2f:17:fa:90:f0:84:
         7f:d6:5e:68:b0:7c:9a:cb:84:2e:93:2d:63:64:d5:e3:3b:d1:
         c0:d3:14:1c:5c:d2:a5:c0:fb:e7:4c:9e:13:0e:3c:fb:9f:21:
         d6:09:f5:57:a3:72:b4:a1:be:32:1b:c2:f0:ad:21:ba:77:84:
         19:b8:37:db:8a:86:14:d0:a1:1f:a3:0e:55:cd:0b:29:c1:ba:
         c6:b4:68:3d:34:8b:ff:8d:54:c3:58:d7:3b:f5:a9:b7:e8:ec:
         e4:35:91:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt880MUYPdMRsgU9VGgok5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwOWVkNzA5ODExMWM2Nzg4OThhYzBmMGFlYzk3ZmRkM2Iz
YjZkMDIwHhcNMjUwNDEzMDcwMTE0WhcNMjUwNDE0MDcwMTE0WjAzMTEwLwYDVQQD
EygwY2Y5YjIzNzdhYTMyNGRmNzQxYzE2ZDI3ZmQzNGMyYzM0YTllOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQnnImn3Z0gd1dKEu5OxHsFFtknx
7hw9QAsIsoBCr3uS8id80r9fcjn6kcW7+17OJbBPdr8PTgPqvTHDsTZVaVplcr9M
lJcIcwRVGvur1CtK192Lgvrv6ecULOHsNgWplToN2/mQYRYl3sU919m8uYHa0UDi
aVX9/Id+kyXVNzsqaZH14+zbM26mwHJ0/H984fyFgPDJqT7KFPRX0aRiSWo4agyr
HZPz6uOa0hv3y81te5eGzOEPeCrlocHXYdCdatN3o8Cr5vOsEtQrGHK2psh5/LPG
jDRiX5S6g6vpbQLW860YAFiUR41tqiIBLDxreR8omxfld7QgI/UzkgJwvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAz5sjd6oyTfdBwW0n/TTCw0qemHMB8GA1UdIwQY
MBaAFICe1wmBEcZ4iYrA8K7Jf907O20CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQt
MDEwY2Q5MDc5YWJmLzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iNGE0NzctMDhhMi00ZThjLThjNGQtMDEwY2Q5MDc5YWJm
LzEvZ0o3WENZRVJ4bmlKaXNEd3JzbF8zVHM3YlFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUcsXWXl
Aw/PZk761CPXEZub7CZZss2bT42W8sjOjAXg1mfsERX8kbqWP39IXlcZmZ2aF5rA
306/FNYNaFnQgavBm3LH8HHOHJ46GL4f+znzIPTKzuQ9OaYAxge3lCbo/Hh2+lPs
ful1WOC2IFTE0C41tAA9uEOP+moizi6AJFR5tXMPRXMC1ish12oQHw76jraFJS4i
7v1ZhKZbLxf6kPCEf9ZeaLB8msuELpMtY2TV4zvRwNMUHFzSpcD750yeEw48+58h
1gn1V6NytKG+MhvC8K0huneEGbg324qGFNChH6MOVc0LKcG6xrRoPTSL/41Uw1jX
O/Wpt+js5DWRuA==
-----END CERTIFICATE-----