Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
File:                     gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft (raw, json)
Hash identifier:          j2pS84WqWi5/BLYcQ/jyJ2BBaZtwrskmuQuAuO00Etw=
Subject key identifier:   25:AA:66:70:15:AD:81:C0:82:40:8E:CA:F7:39:CB:CC:02:C1:4D:EA
Authority key identifier: 80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F
Certificate issuer:       /CN=803f6e8176c911daa2c343053311fe3f03d7d67f
Certificate serial:       01962E9987F441B668AF085612944B4DCAFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft
Manifest number:          1222
Signing time:             Sun 13 Apr 2025 10:02:15 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:15 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:15 +0000
Files and hashes:         1: gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl (hash: ZSkIHtH6u1jV2awTko3kCdioOZRrLB8zUiDJoIOJxJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:87:f4:41:b6:68:af:08:56:12:94:4b:4d:ca:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803f6e8176c911daa2c343053311fe3f03d7d67f
        Validity
            Not Before: Apr 13 10:02:15 2025 GMT
            Not After : Apr 14 10:02:15 2025 GMT
        Subject: CN=25aa667015ad81c082408ecaf739cbcc02c14dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:e2:a1:bc:e7:f2:25:8c:1d:02:21:4d:4d:
                    af:75:50:8a:0e:58:83:a1:ea:d7:d1:69:68:42:7a:
                    46:5d:de:9d:9f:ca:0d:e4:d0:38:88:ab:35:fc:18:
                    ea:88:da:3b:cc:b6:10:cd:8d:dc:aa:ff:16:fe:63:
                    0c:a4:56:d1:b3:ce:e8:1c:82:d9:ae:54:e3:e0:32:
                    d9:93:58:0e:1f:d1:2f:16:e2:f0:07:a5:db:68:57:
                    11:59:4d:9d:25:80:64:d1:3d:7b:02:0b:7e:13:b5:
                    6b:10:68:8d:a8:c1:e2:41:69:17:45:9f:08:76:a9:
                    83:92:29:87:f7:26:97:59:8c:ba:ff:34:39:12:49:
                    0a:96:94:7a:2b:08:8e:a8:22:f2:f7:27:75:f5:d3:
                    cb:47:a6:67:9a:4b:70:a0:a6:65:73:ed:6e:ce:48:
                    29:91:8c:66:69:22:8c:ba:48:2e:03:07:b3:c9:a9:
                    de:8a:15:35:f5:4c:87:c4:17:ff:b1:89:43:8e:8c:
                    79:a9:bf:e2:16:d2:e1:42:0b:b1:cf:43:db:d3:19:
                    b0:8d:15:4b:94:e3:d2:c2:b2:36:3e:19:80:53:34:
                    c8:e5:c6:95:44:07:ec:ad:0c:05:32:8a:ed:d5:f8:
                    b6:2f:3c:5f:97:ba:e5:3f:2a:91:a8:67:4d:15:3d:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AA:66:70:15:AD:81:C0:82:40:8E:CA:F7:39:CB:CC:02:C1:4D:EA
            X509v3 Authority Key Identifier:
                keyid:80:3F:6E:81:76:C9:11:DA:A2:C3:43:05:33:11:FE:3F:03:D7:D6:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gD9ugXbJEdqiw0MFMxH-PwPX1n8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cca5e7-aa2a-415c-a003-0e3447f71b5f/1/gD9ugXbJEdqiw0MFMxH-PwPX1n8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:57:4e:a5:e3:1d:c5:24:df:1e:64:00:65:79:bb:77:d1:71:
         37:28:53:a7:e8:0e:ed:c0:80:4a:18:20:77:7b:c3:90:c4:a5:
         21:38:e5:a1:de:05:48:1e:fa:f6:81:17:fb:2d:ad:25:49:25:
         b6:dd:de:8a:27:8d:50:ea:7d:3c:86:c2:96:38:7b:d8:79:8d:
         ba:09:45:bb:ce:91:9b:24:c3:54:d3:10:5c:ce:5c:65:ad:22:
         08:c6:de:c6:be:3d:fa:10:e7:3f:f5:d2:21:2a:17:53:90:a1:
         e6:4d:11:86:b0:3a:d7:5b:a1:64:1d:0c:d3:ef:6b:ea:cc:99:
         27:c4:ec:79:19:0a:c8:fc:f6:ee:ce:db:32:c2:c5:74:7c:7f:
         22:1a:d5:e4:19:65:08:ee:e4:a6:31:51:82:a7:b8:ef:5d:88:
         ca:98:70:76:76:52:2d:84:32:eb:9e:0d:ed:80:53:5c:dd:30:
         44:4e:40:6c:8c:e4:82:bc:30:f0:03:f0:cf:5f:91:93:db:6c:
         a2:c1:6b:da:ca:74:9f:75:fc:35:07:fd:2e:1d:ba:14:bc:b7:
         53:7b:35:8c:0b:cd:ef:61:30:1e:36:cd:d5:89:25:7a:68:24:
         a2:94:2a:da:3f:b4:fe:2d:e4:a0:09:09:93:e5:a0:16:16:16:
         04:5c:fe:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumYf0QbZorwhWEpRLTcr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwM2Y2ZTgxNzZjOTExZGFhMmMzNDMwNTMzMTFmZTNmMDNk
N2Q2N2YwHhcNMjUwNDEzMTAwMjE1WhcNMjUwNDE0MTAwMjE1WjAzMTEwLwYDVQQD
EygyNWFhNjY3MDE1YWQ4MWMwODI0MDhlY2FmNzM5Y2JjYzAyYzE0ZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSDiobzn8iWMHQIhTU2vdVCKDliD
oerX0WloQnpGXd6dn8oN5NA4iKs1/BjqiNo7zLYQzY3cqv8W/mMMpFbRs87oHILZ
rlTj4DLZk1gOH9EvFuLwB6XbaFcRWU2dJYBk0T17Agt+E7VrEGiNqMHiQWkXRZ8I
dqmDkimH9yaXWYy6/zQ5EkkKlpR6KwiOqCLy9yd19dPLR6ZnmktwoKZlc+1uzkgp
kYxmaSKMukguAwezyaneihU19UyHxBf/sYlDjox5qb/iFtLhQguxz0Pb0xmwjRVL
lOPSwrI2PhmAUzTI5caVRAfsrQwFMort1fi2Lzxfl7rlPyqRqGdNFT0uvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWqZnAVrYHAgkCOyvc5y8wCwU3qMB8GA1UdIwQY
MBaAFIA/boF2yRHaosNDBTMR/j8D19Z/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jY2E1ZTctYWEyYS00MTVjLWEwMDMt
MGUzNDQ3ZjcxYjVmLzEvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jY2E1ZTctYWEyYS00MTVjLWEwMDMtMGUzNDQ3ZjcxYjVm
LzEvZ0Q5dWdYYkpFZHFpdzBNRk14SC1Qd1BYMW44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFdOpeMd
xSTfHmQAZXm7d9FxNyhTp+gO7cCAShggd3vDkMSlITjlod4FSB769oEX+y2tJUkl
tt3eiieNUOp9PIbCljh72HmNuglFu86RmyTDVNMQXM5cZa0iCMbexr49+hDnP/XS
ISoXU5Ch5k0RhrA611uhZB0M0+9r6syZJ8TseRkKyPz27s7bMsLFdHx/IhrV5Bll
CO7kpjFRgqe4712IyphwdnZSLYQy654N7YBTXN0wRE5AbIzkgrww8APwz1+Rk9ts
osFr2sp0n3X8NQf9Lh26FLy3U3s1jAvN72EwHjbN1YklemgkopQq2j+0/i3koAkJ
k+WgFhYWBFz+xQ==
-----END CERTIFICATE-----