Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
File:                     g2gKwOhPwS_HIje4rtjl7YX43r0.mft (raw, json)
Hash identifier:          K6ZjyJMrGToef7f/Ut68M4fn+NOgvIvRA8bMsj0Y1jU=
Subject key identifier:   6A:C0:3C:DF:E7:9F:78:E1:94:06:B9:B6:1C:12:1E:88:8C:48:D0:D0
Authority key identifier: 83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD
Certificate issuer:       /CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
Certificate serial:       01962E61A938431DED3FD3CB0CC14ECA8AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 8FMLT1AmbwVl9zcvS32Q9od9DEQ.roa (hash: yisuPZkgdD2MViPM9oU55ZAf5YPozXvdCbB7qiW4Gcw=)
                          2: g2gKwOhPwS_HIje4rtjl7YX43r0.crl (hash: ZPjna/k/FvyTOd+NVnTzzxzkMyKKzPciuFscT8zfqvE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a9:38:43:1d:ed:3f:d3:cb:0c:c1:4e:ca:8a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83680ac0e84fc12fc72237b8aed8e5ed85f8debd
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=6ac03cdfe79f78e19406b9b61c121e888c48d0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:a9:54:90:a9:6c:a9:7f:c5:17:55:cc:b5:
                    23:e1:38:52:3e:ef:ce:94:23:99:e4:2c:92:08:c2:
                    a0:31:e6:c7:72:35:ad:a7:c8:86:00:87:87:79:6f:
                    bf:c4:b9:99:40:4a:57:f1:5d:58:80:97:8e:ac:82:
                    35:15:d0:0c:0e:52:b6:0a:06:35:1d:23:dd:ec:c0:
                    bb:7a:88:90:37:50:a8:08:7d:63:97:a6:a3:c2:78:
                    b5:8b:5e:01:bd:f0:5b:65:f1:df:e1:29:47:09:9a:
                    b2:a8:d9:0d:99:59:de:aa:16:54:dd:48:62:85:a8:
                    d9:79:fb:2a:48:b3:89:8e:8c:d7:d1:a4:ef:b3:de:
                    80:45:6f:b7:b5:ff:6f:6d:b7:20:0d:1a:fa:26:57:
                    a0:b2:0a:63:07:85:3f:9a:54:5c:92:6f:a4:ab:29:
                    8f:62:ff:b9:34:0f:68:82:64:23:48:b4:94:fb:0c:
                    69:74:30:83:57:50:e9:1a:7d:70:eb:28:b2:8c:09:
                    82:6c:db:cc:77:b6:13:25:08:b0:32:a6:30:fc:91:
                    4b:1c:cc:b2:30:6c:12:6a:5d:94:99:39:eb:99:11:
                    d5:c3:17:12:eb:6e:6e:95:48:ce:4e:36:ce:e5:8c:
                    c0:50:43:b1:1c:eb:e4:8b:1c:3e:f0:13:92:ad:05:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C0:3C:DF:E7:9F:78:E1:94:06:B9:B6:1C:12:1E:88:8C:48:D0:D0
            X509v3 Authority Key Identifier:
                keyid:83:68:0A:C0:E8:4F:C1:2F:C7:22:37:B8:AE:D8:E5:ED:85:F8:DE:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2gKwOhPwS_HIje4rtjl7YX43r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/782fb2-48f5-4e7c-a068-ffacd29fda3a/1/g2gKwOhPwS_HIje4rtjl7YX43r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:cb:05:da:e7:93:63:99:75:5b:d2:1d:5e:7d:26:9f:18:e4:
         14:6c:a9:9a:29:a0:37:03:c3:75:fd:7d:67:c4:17:c9:82:25:
         2e:17:eb:98:dc:42:ed:9b:87:6e:a2:6c:d3:c8:2c:1e:c0:72:
         7c:eb:dc:9e:d4:e4:d9:9d:c1:ea:e4:eb:e7:15:fc:1c:b6:5c:
         cf:58:40:5e:0c:e3:af:94:ca:d8:1a:27:1d:bb:fb:e4:2c:5a:
         31:69:4b:00:00:67:bc:3a:22:da:0e:3a:f8:f2:a4:4a:e3:c5:
         04:3b:52:25:38:04:87:fd:33:2f:da:a3:c3:f8:06:e6:72:01:
         df:ab:a8:2c:1d:06:fc:35:6d:18:ab:1a:5a:8f:34:59:11:0a:
         7f:bc:13:b7:37:05:7c:4a:c9:01:07:a6:e5:a6:06:d0:d4:5d:
         c0:af:37:ba:da:fd:69:44:94:f0:62:09:e4:32:45:3f:c4:3b:
         57:a6:f6:58:dc:ca:8b:cb:fa:3c:22:ba:f4:dd:01:fb:73:8d:
         f5:ec:27:d9:c0:9b:46:74:9c:6e:30:84:04:20:bf:7d:0f:c4:
         38:fa:53:36:dc:72:51:8b:fc:f6:c5:e7:ea:a9:5c:43:43:06:
         9c:db:5e:d9:1d:6a:5a:92:bf:90:5b:e1:20:df:ad:c6:6b:51:
         50:36:ba:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYak4Qx3tP9PLDMFOyorjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjgwYWMwZTg0ZmMxMmZjNzIyMzdiOGFlZDhlNWVkODVm
OGRlYmQwHhcNMjUwNDEzMDkwMTE0WhcNMjUwNDE0MDkwMTE0WjAzMTEwLwYDVQQD
Eyg2YWMwM2NkZmU3OWY3OGUxOTQwNmI5YjYxYzEyMWU4ODhjNDhkMGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUKpVJCpbKl/xRdVzLUj4ThSPu/O
lCOZ5CySCMKgMebHcjWtp8iGAIeHeW+/xLmZQEpX8V1YgJeOrII1FdAMDlK2CgY1
HSPd7MC7eoiQN1CoCH1jl6ajwni1i14BvfBbZfHf4SlHCZqyqNkNmVneqhZU3Uhi
hajZefsqSLOJjozX0aTvs96ARW+3tf9vbbcgDRr6JlegsgpjB4U/mlRckm+kqymP
Yv+5NA9ogmQjSLSU+wxpdDCDV1DpGn1w6yiyjAmCbNvMd7YTJQiwMqYw/JFLHMyy
MGwSal2UmTnrmRHVwxcS625ulUjOTjbO5YzAUEOxHOvkixw+8BOSrQXK+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrAPN/nn3jhlAa5thwSHoiMSNDQMB8GA1UdIwQY
MBaAFINoCsDoT8EvxyI3uK7Y5e2F+N69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgt
ZmZhY2QyOWZkYTNhLzEvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83ODJmYjItNDhmNS00ZTdjLWEwNjgtZmZhY2QyOWZkYTNh
LzEvZzJnS3dPaFB3U19ISWplNHJ0amw3WVg0M3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPssF2ueT
Y5l1W9IdXn0mnxjkFGypmimgNwPDdf19Z8QXyYIlLhfrmNxC7ZuHbqJs08gsHsBy
fOvcntTk2Z3B6uTr5xX8HLZcz1hAXgzjr5TK2BonHbv75CxaMWlLAABnvDoi2g46
+PKkSuPFBDtSJTgEh/0zL9qjw/gG5nIB36uoLB0G/DVtGKsaWo80WREKf7wTtzcF
fErJAQem5aYG0NRdwK83utr9aUSU8GIJ5DJFP8Q7V6b2WNzKi8v6PCK69N0B+3ON
9ewn2cCbRnScbjCEBCC/fQ/EOPpTNtxyUYv89sXn6qlcQ0MGnNte2R1qWpK/kFvh
IN+txmtRUDa6nA==
-----END CERTIFICATE-----