Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
File:                     GGr6K4fO01gj1aLMCghE56FRa_M.mft (raw, json)
Hash identifier:          pBvQVc6Y2eYLj8fVzcAKOKcFVzEyg50PDWLabxOX3qY=
Subject key identifier:   C0:9E:DA:80:A3:81:1E:AA:31:B1:F2:5E:04:94:77:51:19:C4:82:89
Authority key identifier: 18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3
Certificate issuer:       /CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3
Certificate serial:       01962E99AB96C3F1B19A783499A646ADBD70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: GGr6K4fO01gj1aLMCghE56FRa_M.crl (hash: A40eLM4ghtuJ57UIiu3Iv7djAFlqZyXN2nisU8Ks9dk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ab:96:c3:f1:b1:9a:78:34:99:a6:46:ad:bd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186afa2b87ced35823d5a2cc0a0844e7a1516bf3
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=c09eda80a3811eaa31b1f25e0494775119c48289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:37:65:bc:80:b7:d8:61:1f:97:20:0b:2c:2a:
                    83:fc:34:6a:1e:36:d6:10:c7:e3:3b:75:31:af:0f:
                    5f:47:12:18:27:a2:0d:30:83:2d:c2:1e:64:10:ae:
                    ac:ee:90:47:75:6a:87:be:17:f2:53:ff:89:69:3b:
                    e8:0f:45:64:be:65:7a:11:47:de:47:7f:cf:c9:f2:
                    90:30:cb:97:2b:71:6d:5e:c7:54:94:23:6d:3a:a5:
                    9d:05:81:b7:2f:f4:47:f1:55:0d:47:a0:a2:34:9c:
                    ad:19:cd:fa:af:fe:d7:c3:fa:33:16:b1:b7:b2:97:
                    f2:3b:9d:76:fa:26:b7:51:0a:10:df:4b:02:86:85:
                    e0:c6:87:1f:b9:89:08:0f:2e:1b:00:53:94:b8:7e:
                    11:bd:0d:af:11:f5:0a:97:ab:80:c4:ba:c3:b5:fe:
                    01:28:1c:68:e0:8d:b0:97:cf:e3:3e:1e:65:d8:16:
                    0b:77:f2:82:9b:b0:97:ef:65:72:d5:d4:7f:8c:09:
                    a9:18:36:31:d4:c9:a9:ce:14:d3:04:d7:72:a1:e5:
                    dc:0a:ee:6e:5f:3f:c4:06:07:0c:87:82:76:1e:64:
                    df:2d:25:37:64:3d:6c:42:64:c7:46:3c:be:28:be:
                    fb:c4:3d:17:09:04:f8:36:73:29:ec:a2:f3:ee:cd:
                    91:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9E:DA:80:A3:81:1E:AA:31:B1:F2:5E:04:94:77:51:19:C4:82:89
            X509v3 Authority Key Identifier:
                keyid:18:6A:FA:2B:87:CE:D3:58:23:D5:A2:CC:0A:08:44:E7:A1:51:6B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGr6K4fO01gj1aLMCghE56FRa_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/efb13b-5dbc-411b-b238-655d53698fda/1/GGr6K4fO01gj1aLMCghE56FRa_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d7:c7:a4:1a:7a:11:6b:e2:87:41:b4:9f:b3:d2:ad:6f:0a:
         99:57:6e:7c:72:c9:0e:b6:6a:5d:ed:18:83:6a:1a:14:7e:ed:
         ea:36:a0:32:f7:e5:05:ae:68:cb:a8:b1:20:06:69:65:22:d1:
         f7:64:71:87:96:c1:4f:ae:4d:2f:93:18:73:33:7d:96:ef:89:
         86:e0:b8:b9:85:e4:86:e4:e4:2c:28:8e:ad:86:67:48:41:03:
         75:1d:84:f6:50:32:28:8f:77:b1:f1:7d:3a:42:7d:b9:e2:6b:
         71:2a:5d:28:d4:46:18:98:0e:3a:46:34:76:b3:d6:63:46:a1:
         34:52:74:7e:81:d0:dd:93:45:29:92:9f:9a:e8:98:62:67:a5:
         10:05:31:20:2d:bf:63:80:fc:dc:a4:e4:a3:33:5b:eb:b1:5a:
         60:98:ac:2f:ec:cd:f1:9d:11:d8:2f:03:ea:16:fb:ac:9d:cb:
         5a:bc:d8:4b:35:94:55:42:16:4a:75:b2:58:34:a0:ab:48:c7:
         a4:ad:43:58:6c:bc:6a:6f:1f:c1:6f:67:5d:78:4d:95:7b:f4:
         a5:ad:bd:82:3b:d7:78:54:f6:69:fa:85:43:dd:f9:c0:f0:1f:
         c0:3d:94:9b:b2:95:fa:f5:ea:5b:b9:4a:e1:c6:8a:6b:de:f1:
         4f:70:6f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumauWw/Gxmng0maZGrb1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NmFmYTJiODdjZWQzNTgyM2Q1YTJjYzBhMDg0NGU3YTE1
MTZiZjMwHhcNMjUwNDEzMTAwMjI0WhcNMjUwNDE0MTAwMjI0WjAzMTEwLwYDVQQD
EyhjMDllZGE4MGEzODExZWFhMzFiMWYyNWUwNDk0Nzc1MTE5YzQ4Mjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TdlvIC32GEflyALLCqD/DRqHjbW
EMfjO3Uxrw9fRxIYJ6INMIMtwh5kEK6s7pBHdWqHvhfyU/+JaTvoD0VkvmV6EUfe
R3/PyfKQMMuXK3FtXsdUlCNtOqWdBYG3L/RH8VUNR6CiNJytGc36r/7Xw/ozFrG3
spfyO512+ia3UQoQ30sChoXgxocfuYkIDy4bAFOUuH4RvQ2vEfUKl6uAxLrDtf4B
KBxo4I2wl8/jPh5l2BYLd/KCm7CX72Vy1dR/jAmpGDYx1MmpzhTTBNdyoeXcCu5u
Xz/EBgcMh4J2HmTfLSU3ZD1sQmTHRjy+KL77xD0XCQT4NnMp7KLz7s2R/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCe2oCjgR6qMbHyXgSUd1EZxIKJMB8GA1UdIwQY
MBaAFBhq+iuHztNYI9WizAoIROehUWvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0dyNks0Zk8wMWdqMWFMTUNnaEU1NkZSYV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lZmIxM2ItNWRiYy00MTFiLWIyMzgt
NjU1ZDUzNjk4ZmRhLzEvR0dyNks0Zk8wMWdqMWFMTUNnaEU1NkZSYV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9lZmIxM2ItNWRiYy00MTFiLWIyMzgtNjU1ZDUzNjk4ZmRh
LzEvR0dyNks0Zk8wMWdqMWFMTUNnaEU1NkZSYV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9fHpBp6
EWvih0G0n7PSrW8KmVdufHLJDrZqXe0Yg2oaFH7t6jagMvflBa5oy6ixIAZpZSLR
92Rxh5bBT65NL5MYczN9lu+JhuC4uYXkhuTkLCiOrYZnSEEDdR2E9lAyKI93sfF9
OkJ9ueJrcSpdKNRGGJgOOkY0drPWY0ahNFJ0foHQ3ZNFKZKfmuiYYmelEAUxIC2/
Y4D83KTkozNb67FaYJisL+zN8Z0R2C8D6hb7rJ3LWrzYSzWUVUIWSnWyWDSgq0jH
pK1DWGy8am8fwW9nXXhNlXv0pa29gjvXeFT2afqFQ935wPAfwD2Um7KV+vXqW7lK
4caKa97xT3Bv8w==
-----END CERTIFICATE-----