Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
File:                     Fr_GV2_0KHqI6d4-IQuewOERta0.mft (raw, json)
Hash identifier:          1BTPFv5NFcLymoAxqEuhH90vGsehp6CZxESE0hi2arY=
Subject key identifier:   10:D7:0A:01:A1:B3:BE:9F:7A:44:B5:02:33:98:D5:B6:BE:25:04:1B
Authority key identifier: 16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD
Certificate issuer:       /CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
Certificate serial:       01962F06E0A8E4BCE9DF3712E90B84F6E800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft
Manifest number:          14C9
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: Fr_GV2_0KHqI6d4-IQuewOERta0.crl (hash: +udinqiJRhnPJriEkFxGIhOsfzDaCnI6+aFra6s+zAg=)
                          2: SlmPgpqrNOLjZO9BtDMqWpVMWrs.roa (hash: 0MJ7luF7f9Ym0N4wsCYetV/WSW9M7iM6g72fAyA37+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e0:a8:e4:bc:e9:df:37:12:e9:0b:84:f6:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bfc6576ff4287a88e9de3e210b9ec0e111b5ad
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=10d70a01a1b3be9f7a44b5023398d5b6be25041b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ae:0f:cc:64:b1:de:c6:c0:e9:74:96:6f:ad:
                    04:ca:11:8a:91:fd:ba:1c:9c:bf:d9:8b:21:6b:be:
                    6b:88:b1:85:5f:84:dd:91:76:ca:0c:f2:77:cf:6f:
                    d7:b3:ce:f8:52:57:a3:b2:12:f6:24:1f:1e:ac:af:
                    ea:4c:e6:a8:7a:b9:fd:0f:31:b9:cf:8d:5c:37:99:
                    d5:c1:d9:9c:88:70:93:f1:16:e2:68:38:82:99:46:
                    7a:29:3e:80:07:73:4e:0d:cb:09:0e:b3:8a:b5:40:
                    69:5d:e3:02:15:ef:a9:9f:0d:db:d0:65:85:23:c2:
                    6d:d9:b6:5e:09:96:85:d8:90:df:e5:ec:76:2a:47:
                    39:43:08:b5:67:34:85:99:28:0b:05:52:52:82:80:
                    f0:92:ed:cf:5c:97:76:e8:00:57:34:95:f2:4d:98:
                    c3:93:be:c6:21:cf:bb:b8:23:78:62:34:e9:8a:eb:
                    c5:c6:67:18:62:a2:70:83:76:c7:3f:87:07:7d:8d:
                    98:a0:c7:97:9d:16:1d:a3:e4:25:cd:7f:fc:93:e8:
                    7a:29:a6:2a:cf:35:7a:1e:2e:8f:66:f4:5d:60:3b:
                    ac:6a:38:33:f9:bf:78:18:0c:cb:1e:a3:68:7f:c0:
                    61:20:ea:a6:dc:ad:4e:9a:ed:3e:5a:6e:01:e4:23:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D7:0A:01:A1:B3:BE:9F:7A:44:B5:02:33:98:D5:B6:BE:25:04:1B
            X509v3 Authority Key Identifier:
                keyid:16:BF:C6:57:6F:F4:28:7A:88:E9:DE:3E:21:0B:9E:C0:E1:11:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fr_GV2_0KHqI6d4-IQuewOERta0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9293cf-2939-486e-b8f8-c58a9d5c7534/1/Fr_GV2_0KHqI6d4-IQuewOERta0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b5:8e:02:e5:31:43:f3:24:21:56:a9:0f:2d:27:30:fd:f1:
         15:23:e8:51:a4:be:1f:22:42:89:39:60:b9:5a:00:30:24:8b:
         92:49:2f:83:f0:c8:75:c9:58:f5:61:57:a0:29:34:12:c1:3e:
         9c:55:7a:52:93:42:fc:bd:96:bb:bd:4c:bc:b9:18:a7:13:b8:
         47:7f:11:b4:57:50:57:6b:5d:1d:eb:2d:a7:e5:2d:fe:8c:fe:
         2a:f3:ba:ee:b8:7e:13:88:39:89:ef:21:ed:9b:cd:b8:c5:24:
         f0:23:39:c8:02:64:c5:90:94:e1:26:bb:3f:fc:26:0c:f1:9e:
         7c:ab:42:b5:a1:49:51:2d:52:9d:be:52:ae:95:3a:e3:05:48:
         56:7e:a3:02:13:a3:a1:e1:e9:96:ac:12:d3:3a:65:40:e2:c4:
         38:ae:c2:64:4c:d3:f4:ee:61:cd:6a:b5:df:14:36:f9:62:a9:
         72:31:ae:2b:40:c5:fb:f8:29:f7:db:cc:7e:1d:5f:56:7a:1c:
         27:51:b3:03:2f:d4:b5:6a:a0:8f:d1:13:37:4f:9d:dd:07:8d:
         e8:2c:8e:34:55:ff:c0:bc:55:e3:86:02:6b:0e:63:41:29:a2:
         aa:38:11:1d:d8:77:2f:9c:74:01:2a:99:b3:27:b6:86:48:c3:
         6d:08:09:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuCo5Lzp3zcS6QuE9ugAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YmZjNjU3NmZmNDI4N2E4OGU5ZGUzZTIxMGI5ZWMwZTEx
MWI1YWQwHhcNMjUwNDEzMTIwMTQxWhcNMjUwNDE0MTIwMTQxWjAzMTEwLwYDVQQD
EygxMGQ3MGEwMWExYjNiZTlmN2E0NGI1MDIzMzk4ZDViNmJlMjUwNDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq4PzGSx3sbA6XSWb60EyhGKkf26
HJy/2Ysha75riLGFX4TdkXbKDPJ3z2/Xs874UlejshL2JB8erK/qTOaoern9DzG5
z41cN5nVwdmciHCT8RbiaDiCmUZ6KT6AB3NODcsJDrOKtUBpXeMCFe+pnw3b0GWF
I8Jt2bZeCZaF2JDf5ex2Kkc5Qwi1ZzSFmSgLBVJSgoDwku3PXJd26ABXNJXyTZjD
k77GIc+7uCN4YjTpiuvFxmcYYqJwg3bHP4cHfY2YoMeXnRYdo+QlzX/8k+h6KaYq
zzV6Hi6PZvRdYDusajgz+b94GAzLHqNof8BhIOqm3K1Omu0+Wm4B5CPi3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDXCgGhs76fekS1AjOY1ba+JQQbMB8GA1UdIwQY
MBaAFBa/xldv9Ch6iOnePiELnsDhEbWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnJfR1YyXzBLSHFJNmQ0LUlRdWV3T0VSdGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MjkzY2YtMjkzOS00ODZlLWI4Zjgt
YzU4YTlkNWM3NTM0LzEvRnJfR1YyXzBLSHFJNmQ0LUlRdWV3T0VSdGEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MjkzY2YtMjkzOS00ODZlLWI4ZjgtYzU4YTlkNWM3NTM0
LzEvRnJfR1YyXzBLSHFJNmQ0LUlRdWV3T0VSdGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrWOAuUx
Q/MkIVapDy0nMP3xFSPoUaS+HyJCiTlguVoAMCSLkkkvg/DIdclY9WFXoCk0EsE+
nFV6UpNC/L2Wu71MvLkYpxO4R38RtFdQV2tdHestp+Ut/oz+KvO67rh+E4g5ie8h
7ZvNuMUk8CM5yAJkxZCU4Sa7P/wmDPGefKtCtaFJUS1Snb5SrpU64wVIVn6jAhOj
oeHplqwS0zplQOLEOK7CZEzT9O5hzWq13xQ2+WKpcjGuK0DF+/gp99vMfh1fVnoc
J1GzAy/UtWqgj9ETN0+d3QeN6CyONFX/wLxV44YCaw5jQSmiqjgRHdh3L5x0ASqZ
sye2hkjDbQgJ9Q==
-----END CERTIFICATE-----