Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
File:                     gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft (raw, json)
Hash identifier:          v83pSozgQmwcnWdtd6+ujpVw+5NKPo7UbgIqzA4M73M=
Subject key identifier:   91:95:A5:A1:30:1E:22:87:CE:FF:B2:E2:B8:74:D7:0E:54:0C:A3:BB
Authority key identifier: 81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7
Certificate issuer:       /CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
Certificate serial:       01962E9915726101DED8621F1A5E940FE840
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: boA84qDGPvl_6lnRHS_XzFFeG1U.roa (hash: mKsVzVhgFbQeWFBOvfQBj+TUfoFvXQ5IHepTPgh5BKs=)
                          2: gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl (hash: 9TOcO3PrJE1Aj7wYjZa2OhoaGSD1wFsiAGRSibqZ/jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:15:72:61:01:de:d8:62:1f:1a:5e:94:0f:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81696a81372357b5f1ed7c82ccaa993a980d54e7
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=9195a5a1301e2287ceffb2e2b874d70e540ca3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:e9:b5:92:a6:e9:d6:5a:b0:1d:97:70:30:
                    ba:2b:81:c6:a1:82:16:6e:2f:36:2a:c6:a0:c9:dd:
                    ad:63:73:86:73:52:3e:36:17:c2:9b:a9:5e:54:0e:
                    bf:f3:e4:38:85:3d:43:02:5f:66:83:91:c0:56:00:
                    da:d8:aa:5e:d6:3d:aa:de:0a:60:3c:44:f2:96:ce:
                    24:50:40:80:91:ba:bf:f1:16:32:53:5b:20:dc:4b:
                    d0:3b:a4:7c:8d:d9:ed:27:4b:dd:97:53:91:7e:fa:
                    83:f3:fd:77:ad:14:f3:07:7c:2a:a3:e6:42:68:c5:
                    86:e9:36:3e:5e:d0:17:69:35:2c:fe:06:58:f7:c2:
                    76:bd:fd:cc:b8:72:84:b8:b6:b1:4a:3c:7b:17:dc:
                    b1:50:08:e6:0d:d2:dd:c6:9a:51:3e:91:8f:c7:e4:
                    79:c9:31:f4:1a:ca:2a:f0:54:ac:ab:77:f5:88:2a:
                    13:f1:06:8b:0f:48:a1:1f:43:fe:e0:5d:d7:a7:5c:
                    94:a5:1f:b1:0c:0e:e2:b4:7d:19:c6:fd:4f:55:40:
                    da:e4:ef:c5:69:bb:bc:41:e9:68:d7:60:95:87:3a:
                    ae:5e:e8:8a:5f:a2:fb:13:40:9e:91:2f:85:bf:d5:
                    6f:12:c4:ea:f7:54:5b:c8:56:66:7c:3d:fa:0f:72:
                    85:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:95:A5:A1:30:1E:22:87:CE:FF:B2:E2:B8:74:D7:0E:54:0C:A3:BB
            X509v3 Authority Key Identifier:
                keyid:81:69:6A:81:37:23:57:B5:F1:ED:7C:82:CC:AA:99:3A:98:0D:54:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce24e2-68be-47d7-950b-c6b8800aa858/1/gWlqgTcjV7Xx7XyCzKqZOpgNVOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:44:9c:be:db:3d:3e:30:37:26:92:42:f8:96:0a:b0:f0:74:
         80:9f:0b:d8:ee:65:07:da:95:ba:fc:5b:8c:1b:ec:cc:5d:9f:
         95:48:bc:68:ed:79:0e:99:9e:36:4d:a8:d9:c6:9a:d2:2c:ca:
         50:b4:c8:af:e6:5a:4a:00:5b:1f:10:61:df:e9:5d:cd:e2:3f:
         e0:7c:9e:e8:5c:21:9e:ba:e9:2b:7c:0f:d3:63:90:49:48:3f:
         a7:ee:6c:31:6f:0a:65:2b:dd:ae:38:d5:1c:92:03:08:2f:9e:
         a5:9f:84:7e:91:2f:98:7a:75:9a:a3:b4:87:43:28:ca:c7:ca:
         8a:59:b3:42:a8:30:0f:07:f8:39:50:98:60:6c:b5:de:73:30:
         40:a2:c0:67:96:9d:fc:f6:cd:ce:da:a3:26:28:e0:a6:fe:f7:
         f1:a1:8c:73:f5:f8:88:51:4f:a4:4a:d8:5f:6f:98:d7:4a:8e:
         d1:51:c4:36:90:da:6d:6c:d6:98:0f:76:bb:ce:7f:f8:bd:9e:
         92:39:96:a8:a3:11:84:9d:76:24:84:11:f9:c3:1c:25:8a:c8:
         df:79:76:24:78:12:58:9b:33:9d:da:2e:c7:ca:97:38:0d:34:
         a8:c1:63:4f:1f:3e:96:0c:38:13:2d:72:23:2e:42:89:df:58:
         1a:8d:86:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRVyYQHe2GIfGl6UD+hAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjk2YTgxMzcyMzU3YjVmMWVkN2M4MmNjYWE5OTNhOTgw
ZDU0ZTcwHhcNMjUwNDEzMTAwMTQ2WhcNMjUwNDE0MTAwMTQ2WjAzMTEwLwYDVQQD
Eyg5MTk1YTVhMTMwMWUyMjg3Y2VmZmIyZTJiODc0ZDcwZTU0MGNhM2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8vptZKm6dZasB2XcDC6K4HGoYIW
bi82Ksagyd2tY3OGc1I+NhfCm6leVA6/8+Q4hT1DAl9mg5HAVgDa2Kpe1j2q3gpg
PETyls4kUECAkbq/8RYyU1sg3EvQO6R8jdntJ0vdl1ORfvqD8/13rRTzB3wqo+ZC
aMWG6TY+XtAXaTUs/gZY98J2vf3MuHKEuLaxSjx7F9yxUAjmDdLdxppRPpGPx+R5
yTH0Gsoq8FSsq3f1iCoT8QaLD0ihH0P+4F3Xp1yUpR+xDA7itH0Zxv1PVUDa5O/F
abu8Qelo12CVhzquXuiKX6L7E0CekS+Fv9VvEsTq91RbyFZmfD36D3KFUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGVpaEwHiKHzv+y4rh01w5UDKO7MB8GA1UdIwQY
MBaAFIFpaoE3I1e18e18gsyqmTqYDVTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dscWdUY2pWN1h4N1h5Q3pLcVpPcGdOVk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jZTI0ZTItNjhiZS00N2Q3LTk1MGIt
YzZiODgwMGFhODU4LzEvZ1dscWdUY2pWN1h4N1h5Q3pLcVpPcGdOVk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jZTI0ZTItNjhiZS00N2Q3LTk1MGItYzZiODgwMGFhODU4
LzEvZ1dscWdUY2pWN1h4N1h5Q3pLcVpPcGdOVk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0Scvts9
PjA3JpJC+JYKsPB0gJ8L2O5lB9qVuvxbjBvszF2flUi8aO15DpmeNk2o2caa0izK
ULTIr+ZaSgBbHxBh3+ldzeI/4Hye6FwhnrrpK3wP02OQSUg/p+5sMW8KZSvdrjjV
HJIDCC+epZ+EfpEvmHp1mqO0h0MoysfKilmzQqgwDwf4OVCYYGy13nMwQKLAZ5ad
/PbNztqjJijgpv738aGMc/X4iFFPpErYX2+Y10qO0VHENpDabWzWmA92u85/+L2e
kjmWqKMRhJ12JIQR+cMcJYrI33l2JHgSWJszndoux8qXOA00qMFjTx8+lgw4Ey1y
Iy5Cid9YGo2GKw==
-----END CERTIFICATE-----