Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
File:                     GD41veDiUEYFoX1O0FVDfo00ql8.mft (raw, json)
Hash identifier:          ePESiBqTJsLrAMXkkyqXrJyWOypIHbFgd3dLxakcBlE=
Subject key identifier:   DB:D1:62:B9:85:39:52:D2:30:7B:BE:50:F8:1C:FD:11:3E:05:3F:DD
Authority key identifier: 18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F
Certificate issuer:       /CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
Certificate serial:       01962F3D548E3CAD2A72419DEF3E22679508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: GD41veDiUEYFoX1O0FVDfo00ql8.crl (hash: zJt5l8O0Fgqr0rUEauJ9pcwHw/viZ5qo4CqcIUjCwNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:54:8e:3c:ad:2a:72:41:9d:ef:3e:22:67:95:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183e35bde0e2504605a17d4ed055437e8d34aa5f
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=dbd162b9853952d2307bbe50f81cfd113e053fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:6a:92:a2:9c:5b:e9:09:07:73:cf:b0:9c:
                    41:9d:a9:d7:3d:e6:c8:4a:38:52:18:1f:29:b6:1d:
                    63:92:8c:e8:5b:d4:b0:33:8f:d7:53:b7:5c:e7:ee:
                    56:d9:a5:49:e7:cc:84:df:fa:d3:8f:82:97:6a:5d:
                    ba:73:aa:b6:3e:86:50:c5:6b:0b:74:16:bd:81:12:
                    b5:9b:e4:f6:c3:69:64:67:77:ae:b3:52:a1:e0:79:
                    ce:1a:34:85:b7:83:c5:0e:6b:09:4b:53:79:3b:31:
                    81:be:8e:d7:6a:f8:b8:3f:0e:f2:e3:5d:fb:58:d4:
                    c5:52:61:7c:f3:a0:4c:13:2f:3f:50:4c:b5:cb:92:
                    31:41:08:f6:f2:7d:56:11:5e:bf:44:08:e3:07:bc:
                    9d:6a:b1:9f:57:f4:6e:9e:c6:24:3f:e3:70:a0:8e:
                    00:8c:c4:70:13:23:40:e1:18:95:a5:03:4c:2b:c3:
                    6c:e2:e6:e5:31:71:43:c1:6b:2b:1a:20:00:97:cc:
                    c7:40:db:1e:fa:e6:f3:0b:67:dc:74:45:6e:39:b0:
                    ff:b7:3e:d0:e8:1b:03:66:0b:cb:2b:53:76:42:7f:
                    e0:df:c2:83:d0:b9:47:0a:04:53:f8:e7:98:44:cd:
                    0f:a1:40:65:09:0e:e7:51:29:c8:ae:7b:e8:cb:23:
                    97:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D1:62:B9:85:39:52:D2:30:7B:BE:50:F8:1C:FD:11:3E:05:3F:DD
            X509v3 Authority Key Identifier:
                keyid:18:3E:35:BD:E0:E2:50:46:05:A1:7D:4E:D0:55:43:7E:8D:34:AA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GD41veDiUEYFoX1O0FVDfo00ql8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4cb524-baaf-41af-b85f-cc8c2db6cf25/1/GD41veDiUEYFoX1O0FVDfo00ql8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:38:ba:eb:1b:74:cb:9a:64:56:ce:13:99:a1:89:8b:b3:d9:
         28:fe:0b:b8:8f:86:96:3b:3a:66:4e:e3:1a:6a:13:46:ac:68:
         49:b2:d2:5c:5b:86:71:44:7a:7f:95:3a:4f:9f:51:d6:d6:fa:
         72:ca:6d:de:f8:26:f0:e6:be:e4:d3:6d:4d:b2:e5:6d:9f:e1:
         f9:6f:72:64:6f:65:fd:d3:aa:42:19:3d:fe:e3:d0:26:00:c6:
         d8:75:36:ae:f4:bd:81:0d:f9:ae:6e:44:bf:8f:af:5d:b9:9b:
         40:96:28:aa:2a:c0:63:9b:12:5f:b9:82:2b:01:44:1e:0f:88:
         0f:42:f0:1d:e8:a3:a0:37:74:b4:5c:19:0d:04:0c:ff:8d:a8:
         cf:46:c9:61:94:9e:94:b5:4e:bc:58:0b:69:a5:8c:70:29:d7:
         28:23:c1:f3:af:5d:55:bb:c5:c6:b5:cf:45:13:30:b6:11:ca:
         f6:87:16:09:4a:12:3b:3e:ba:2b:2e:28:a8:21:fc:98:06:4a:
         9c:41:6f:9c:a8:c9:10:3e:81:1d:80:a0:69:06:a2:ab:97:44:
         6e:9b:36:e0:1b:53:5b:a5:a4:07:a3:f5:21:a7:92:34:c1:0a:
         a4:4e:bc:67:74:ef:e4:4b:a9:8c:f5:bc:40:23:02:ee:f3:67:
         7e:2e:19:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVSOPK0qckGd7z4iZ5UIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4M2UzNWJkZTBlMjUwNDYwNWExN2Q0ZWQwNTU0MzdlOGQz
NGFhNWYwHhcNMjUwNDEzMTMwMTEwWhcNMjUwNDE0MTMwMTEwWjAzMTEwLwYDVQQD
EyhkYmQxNjJiOTg1Mzk1MmQyMzA3YmJlNTBmODFjZmQxMTNlMDUzZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5X9qkqKcW+kJB3PPsJxBnanXPebI
SjhSGB8pth1jkozoW9SwM4/XU7dc5+5W2aVJ58yE3/rTj4KXal26c6q2PoZQxWsL
dBa9gRK1m+T2w2lkZ3eus1Kh4HnOGjSFt4PFDmsJS1N5OzGBvo7Xavi4Pw7y4137
WNTFUmF886BMEy8/UEy1y5IxQQj28n1WEV6/RAjjB7ydarGfV/RunsYkP+NwoI4A
jMRwEyNA4RiVpQNMK8Ns4ublMXFDwWsrGiAAl8zHQNse+ubzC2fcdEVuObD/tz7Q
6BsDZgvLK1N2Qn/g38KD0LlHCgRT+OeYRM0PoUBlCQ7nUSnIrnvoyyOXtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvRYrmFOVLSMHu+UPgc/RE+BT/dMB8GA1UdIwQY
MBaAFBg+Nb3g4lBGBaF9TtBVQ36NNKpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0Q0MXZlRGlVRVlGb1gxTzBGVkRmbzAwcWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny80Y2I1MjQtYmFhZi00MWFmLWI4NWYt
Y2M4YzJkYjZjZjI1LzEvR0Q0MXZlRGlVRVlGb1gxTzBGVkRmbzAwcWw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny80Y2I1MjQtYmFhZi00MWFmLWI4NWYtY2M4YzJkYjZjZjI1
LzEvR0Q0MXZlRGlVRVlGb1gxTzBGVkRmbzAwcWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATji66xt0
y5pkVs4TmaGJi7PZKP4LuI+Gljs6Zk7jGmoTRqxoSbLSXFuGcUR6f5U6T59R1tb6
cspt3vgm8Oa+5NNtTbLlbZ/h+W9yZG9l/dOqQhk9/uPQJgDG2HU2rvS9gQ35rm5E
v4+vXbmbQJYoqirAY5sSX7mCKwFEHg+ID0LwHeijoDd0tFwZDQQM/42oz0bJYZSe
lLVOvFgLaaWMcCnXKCPB869dVbvFxrXPRRMwthHK9ocWCUoSOz66Ky4oqCH8mAZK
nEFvnKjJED6BHYCgaQaiq5dEbps24BtTW6WkB6P1IaeSNMEKpE68Z3Tv5EupjPW8
QCMC7vNnfi4ZLQ==
-----END CERTIFICATE-----