Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
File:                     G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft (raw, json)
Hash identifier:          kqAOIkNLa/YjhQGwfOLF3IwmpcRvHs80QV1yjT1BOeg=
Subject key identifier:   9E:22:4F:CB:31:4B:25:77:D2:8C:DE:A9:95:36:B3:8C:D3:CC:96:BE
Authority key identifier: 1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38
Certificate issuer:       /CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
Certificate serial:       01962F3DB5B667C824039C00C2D64B428C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft
Manifest number:          05D0
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl (hash: o1H47AqRpM5SQz3CpTPyEDCBK4SONBu0wcrOxDLiMNE=)
                          2: m-RL63I77tnbUHaZReiKcRHtR58.roa (hash: VHqfyzr+g1S2KroF/o4QYcY/QOnFZTun+jLqscdqvBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b5:b6:67:c8:24:03:9c:00:c2:d6:4b:42:8c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b54437c92c1e08b06e0776187c7884dd51c0e38
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=9e224fcb314b2577d28cdea99536b38cd3cc96be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:ef:ea:d2:bc:7a:aa:b4:d1:cf:7f:4b:ca:
                    b0:1f:11:e6:54:59:ed:87:b7:24:7e:14:2e:c7:56:
                    91:3a:18:72:da:9e:85:bb:83:f6:05:62:82:5d:f1:
                    f2:cb:b7:e0:6c:d1:58:9e:66:d3:f5:52:ee:3c:58:
                    b2:14:fc:3b:ca:85:33:b4:02:26:80:34:c6:b9:f3:
                    53:53:6b:5b:d5:7e:1c:11:09:2c:ed:fe:f8:bd:4a:
                    f0:4d:63:e8:1d:db:ce:8d:4f:3b:91:2b:67:d8:b1:
                    2d:1a:7b:1a:99:fe:df:d9:0b:4c:db:fb:2a:de:56:
                    d8:01:15:ed:b7:88:6b:8d:ff:40:2c:ee:bb:20:f4:
                    4e:85:81:df:72:8a:24:92:40:d6:6b:ae:4c:53:8d:
                    99:b0:2f:33:2f:59:91:d6:7d:27:53:e5:c3:33:cc:
                    9f:1d:12:ca:b5:7f:c7:08:04:d9:e0:77:cf:42:3a:
                    9c:94:da:d1:b3:2c:34:8a:ef:93:c5:77:dc:9c:5b:
                    00:74:1b:04:21:19:f6:e3:fd:02:e5:43:46:a2:dd:
                    50:6e:fb:32:64:c6:e5:69:c8:3a:1f:28:ea:04:9c:
                    1d:73:4f:bf:e3:91:2e:a9:19:3f:ea:7e:56:d7:91:
                    5f:de:78:f7:b1:e0:91:fe:c1:f9:da:af:d5:7d:f5:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:22:4F:CB:31:4B:25:77:D2:8C:DE:A9:95:36:B3:8C:D3:CC:96:BE
            X509v3 Authority Key Identifier:
                keyid:1B:54:43:7C:92:C1:E0:8B:06:E0:77:61:87:C7:88:4D:D5:1C:0E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1RDfJLB4IsG4Hdhh8eITdUcDjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/f1db36-665d-4d80-a1b2-515ee1570259/1/G1RDfJLB4IsG4Hdhh8eITdUcDjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:db:25:3c:a5:a5:fb:5c:62:ba:3f:46:fc:7a:df:b3:ee:
         29:a0:45:c4:2f:d9:a0:fd:6f:21:cd:73:71:e3:1a:d5:60:3b:
         02:1a:4b:de:a4:ac:66:26:98:80:50:04:3e:99:34:4c:1b:8a:
         b6:79:4d:60:8c:3b:b2:75:8a:45:c9:ec:6e:8f:d8:f8:f3:4c:
         c6:b4:79:d3:c5:9c:7f:d7:f7:d2:4a:4a:38:28:2d:8c:51:e6:
         81:8e:07:79:28:08:52:99:ab:5c:64:2f:1d:91:3c:cc:b8:b6:
         37:f0:80:58:2f:45:2c:7f:5a:76:18:40:97:a8:24:42:4e:03:
         8b:98:b8:91:7f:14:23:15:b7:c0:da:af:40:27:b2:a5:7a:6a:
         66:96:cc:d6:1f:b9:04:bd:17:6c:7d:f1:9c:ac:36:0b:78:49:
         3b:e8:5b:82:ec:ef:33:5a:44:97:aa:7c:86:41:0e:d7:cb:52:
         18:90:ca:0c:2f:e8:df:e3:83:53:da:75:85:2b:64:2e:e6:e6:
         9a:0d:b7:02:8f:97:6f:66:4d:9d:ca:09:39:f1:67:7d:ff:f6:
         00:8d:44:31:ac:dd:ee:c0:e9:05:83:07:59:8a:c7:df:0f:c3:
         98:b6:c9:9e:d6:d6:51:81:23:ea:c0:da:4e:78:cb:71:6c:67:
         17:e5:d1:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbW2Z8gkA5wAwtZLQoxiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNTQ0MzdjOTJjMWUwOGIwNmUwNzc2MTg3Yzc4ODRkZDUx
YzBlMzgwHhcNMjUwNDEzMTMwMTM1WhcNMjUwNDE0MTMwMTM1WjAzMTEwLwYDVQQD
Eyg5ZTIyNGZjYjMxNGIyNTc3ZDI4Y2RlYTk5NTM2YjM4Y2QzY2M5NmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvTv6tK8eqq00c9/S8qwHxHmVFnt
h7ckfhQux1aROhhy2p6Fu4P2BWKCXfHyy7fgbNFYnmbT9VLuPFiyFPw7yoUztAIm
gDTGufNTU2tb1X4cEQks7f74vUrwTWPoHdvOjU87kStn2LEtGnsamf7f2QtM2/sq
3lbYARXtt4hrjf9ALO67IPROhYHfcookkkDWa65MU42ZsC8zL1mR1n0nU+XDM8yf
HRLKtX/HCATZ4HfPQjqclNrRsyw0iu+TxXfcnFsAdBsEIRn24/0C5UNGot1Qbvsy
ZMblacg6HyjqBJwdc0+/45EuqRk/6n5W15Ff3nj3seCR/sH52q/VffX/sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4iT8sxSyV30ozeqZU2s4zTzJa+MB8GA1UdIwQY
MBaAFBtUQ3ySweCLBuB3YYfHiE3VHA44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjIt
NTE1ZWUxNTcwMjU5LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9mMWRiMzYtNjY1ZC00ZDgwLWExYjItNTE1ZWUxNTcwMjU5
LzEvRzFSRGZKTEI0SXNHNEhkaGg4ZUlUZFVjRGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAig7bJTyl
pftcYro/Rvx637PuKaBFxC/ZoP1vIc1zceMa1WA7AhpL3qSsZiaYgFAEPpk0TBuK
tnlNYIw7snWKRcnsbo/Y+PNMxrR508Wcf9f30kpKOCgtjFHmgY4HeSgIUpmrXGQv
HZE8zLi2N/CAWC9FLH9adhhAl6gkQk4Di5i4kX8UIxW3wNqvQCeypXpqZpbM1h+5
BL0XbH3xnKw2C3hJO+hbguzvM1pEl6p8hkEO18tSGJDKDC/o3+ODU9p1hStkLubm
mg23Ao+Xb2ZNncoJOfFnff/2AI1EMazd7sDpBYMHWYrH3w/DmLbJntbWUYEj6sDa
TnjLcWxnF+XRYA==
-----END CERTIFICATE-----