Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
File:                     gvolsvyxRoEUtziSirINh2G_iDE.mft (raw, json)
Hash identifier:          DWoJdJzZajlOaQ/cQ1g2/0nUKGd1ntNOak7JeernMl0=
Subject key identifier:   A2:5D:88:D7:20:FA:32:1F:FE:E1:B5:67:48:3C:E5:59:0C:A5:47:C1
Authority key identifier: 82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31
Certificate issuer:       /CN=82fa25b2fcb1468114b738928ab20d8761bf8831
Certificate serial:       01962DF4114A26AAC2F33E22CAA288961BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft
Manifest number:          113C
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: gvolsvyxRoEUtziSirINh2G_iDE.crl (hash: 0ZUEIZP6bR10MxrPtxxeXdJkXjSyaczQEB6AFAIw3zQ=)
                          2: vYeUQvTtmRwFxe2HjEVg0-w3YtY.roa (hash: 5J5aN+7Pc9ymOEzVJcf+044A0ctdwVC0r43YEoVys+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:11:4a:26:aa:c2:f3:3e:22:ca:a2:88:96:1b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fa25b2fcb1468114b738928ab20d8761bf8831
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=a25d88d720fa321ffee1b567483ce5590ca547c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:c1:aa:4f:34:52:5f:5e:f1:3f:1e:aa:7d:
                    83:54:ae:52:ec:b2:aa:8b:4c:a2:7f:ca:e5:ae:3c:
                    59:30:f1:8f:61:0d:b3:39:ee:62:14:2a:7e:52:ca:
                    eb:e4:38:42:82:c3:3d:21:77:a6:75:3f:2c:8b:a2:
                    46:57:fd:12:89:23:6a:49:c7:ba:64:01:b5:32:8f:
                    73:f1:62:86:33:e0:48:c0:05:e5:a3:c9:e2:aa:2d:
                    47:a4:55:7f:f2:bf:ac:66:69:dd:3f:74:97:73:ef:
                    3b:d7:37:7d:21:e1:18:41:dc:89:49:53:73:26:3d:
                    17:59:0b:ff:30:33:46:21:59:31:c9:ba:45:92:48:
                    8a:24:d5:75:bd:65:91:43:71:d7:3c:aa:a3:df:50:
                    8f:9c:4f:71:90:02:75:da:41:a5:ef:2e:28:3c:d5:
                    f2:c8:33:25:0a:a6:08:6f:5c:42:bf:9c:d5:55:2f:
                    95:4e:e4:cf:92:92:ae:25:9b:86:3e:df:68:db:0e:
                    fa:83:81:4e:0c:2d:7f:b4:65:b2:92:67:79:9e:40:
                    68:9d:50:5e:43:ab:73:18:aa:57:07:5c:bd:c9:cc:
                    6d:eb:f2:ac:81:e4:95:43:97:55:08:7b:59:f0:a4:
                    09:01:6b:ef:10:91:f2:4e:e1:d1:4a:30:84:7d:f3:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5D:88:D7:20:FA:32:1F:FE:E1:B5:67:48:3C:E5:59:0C:A5:47:C1
            X509v3 Authority Key Identifier:
                keyid:82:FA:25:B2:FC:B1:46:81:14:B7:38:92:8A:B2:0D:87:61:BF:88:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gvolsvyxRoEUtziSirINh2G_iDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1371a6-f5f3-43bf-aff4-7685c9670017/1/gvolsvyxRoEUtziSirINh2G_iDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a9:5c:bd:1d:99:43:07:02:9d:89:1f:4a:b7:28:5a:dd:e2:
         3f:93:3c:90:fc:91:ee:51:36:9a:7e:c4:46:a8:de:d6:df:77:
         d7:e0:ae:c9:18:c0:c4:e3:84:af:88:76:9d:fa:cc:22:63:a9:
         d3:32:bd:35:01:60:86:8c:99:be:f3:e9:fe:1b:b8:dc:e7:4a:
         7c:31:f4:ed:8b:97:40:e1:72:63:3f:a5:c8:1d:0a:af:54:7a:
         2a:c0:6d:4b:e6:1e:5b:47:c6:02:31:a6:da:f1:b5:60:25:86:
         81:c3:c1:79:09:72:41:4e:7d:4f:26:cf:29:0e:5d:cd:d5:6f:
         6a:e3:e8:63:02:49:ca:e9:3f:85:9a:99:ec:2e:b2:f0:c8:26:
         ce:b2:52:4a:e1:30:ee:e5:9e:4b:10:a4:5c:7a:25:ef:a7:d9:
         0f:5d:d0:85:3c:68:c3:11:33:cc:d7:5c:91:d8:66:a5:f5:ae:
         fd:ba:f0:4d:24:4a:50:34:04:9f:05:b9:b4:77:b0:f8:0c:e8:
         9e:7c:72:d4:c4:b4:9a:7c:62:81:7b:17:f0:d3:ae:5b:61:95:
         cf:fe:c2:c8:c8:17:ec:5c:73:fd:94:be:d6:58:ff:61:0f:53:
         6b:8e:f8:3e:01:2e:f8:f1:db:51:0b:23:c4:b0:a2:15:eb:6e:
         da:da:08:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9BFKJqrC8z4iyqKIlhvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmEyNWIyZmNiMTQ2ODExNGI3Mzg5MjhhYjIwZDg3NjFi
Zjg4MzEwHhcNMjUwNDEzMDcwMTMxWhcNMjUwNDE0MDcwMTMxWjAzMTEwLwYDVQQD
EyhhMjVkODhkNzIwZmEzMjFmZmVlMWI1Njc0ODNjZTU1OTBjYTU0N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPBqk80Ul9e8T8eqn2DVK5S7LKq
i0yif8rlrjxZMPGPYQ2zOe5iFCp+Usrr5DhCgsM9IXemdT8si6JGV/0SiSNqSce6
ZAG1Mo9z8WKGM+BIwAXlo8niqi1HpFV/8r+sZmndP3SXc+871zd9IeEYQdyJSVNz
Jj0XWQv/MDNGIVkxybpFkkiKJNV1vWWRQ3HXPKqj31CPnE9xkAJ12kGl7y4oPNXy
yDMlCqYIb1xCv5zVVS+VTuTPkpKuJZuGPt9o2w76g4FODC1/tGWykmd5nkBonVBe
Q6tzGKpXB1y9ycxt6/KsgeSVQ5dVCHtZ8KQJAWvvEJHyTuHRSjCEffOFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJdiNcg+jIf/uG1Z0g85VkMpUfBMB8GA1UdIwQY
MBaAFIL6JbL8sUaBFLc4koqyDYdhv4gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xMzcxYTYtZjVmMy00M2JmLWFmZjQt
NzY4NWM5NjcwMDE3LzEvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xMzcxYTYtZjVmMy00M2JmLWFmZjQtNzY4NWM5NjcwMDE3
LzEvZ3ZvbHN2eXhSb0VVdHppU2lySU5oMkdfaURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKalcvR2Z
QwcCnYkfSrcoWt3iP5M8kPyR7lE2mn7ERqje1t931+CuyRjAxOOEr4h2nfrMImOp
0zK9NQFghoyZvvPp/hu43OdKfDH07YuXQOFyYz+lyB0Kr1R6KsBtS+YeW0fGAjGm
2vG1YCWGgcPBeQlyQU59TybPKQ5dzdVvauPoYwJJyuk/hZqZ7C6y8MgmzrJSSuEw
7uWeSxCkXHol76fZD13QhTxowxEzzNdckdhmpfWu/brwTSRKUDQEnwW5tHew+Azo
nnxy1MS0mnxigXsX8NOuW2GVz/7CyMgX7Fxz/ZS+1lj/YQ9Ta474PgEu+PHbUQsj
xLCiFetu2toIeg==
-----END CERTIFICATE-----