Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
File:                     G9JpBH0C_otaKsnrjV_sB7GH7aE.mft (raw, json)
Hash identifier:          Bg6ykLm1ADG1gNn4GW5y785fMI1hB4xZ/9jBswiQDrs=
Subject key identifier:   95:5F:22:3B:2E:9E:8F:38:84:D0:7A:B1:B3:04:9C:2D:D5:16:02:32
Authority key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Certificate issuer:       /CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Certificate serial:       01962F743D49B9890AADD5BEBEEB7BE48D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
Manifest number:          021A
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: G9JpBH0C_otaKsnrjV_sB7GH7aE.crl (hash: Z5ATvExsSSYC7xVSsu7lgxBBQQ0r3dtlbq9piAydYok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3d:49:b9:89:0a:ad:d5:be:be:eb:7b:e4:8d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=955f223b2e9e8f3884d07ab1b3049c2dd5160232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:48:fd:d0:71:53:4e:83:8a:38:f9:f5:83:f9:
                    91:95:35:e9:d4:7b:53:01:d4:a8:c3:5e:57:01:7f:
                    1c:5e:7d:67:6b:e4:80:1f:ea:59:a6:d7:2a:a1:29:
                    ba:6b:f6:c7:a1:f4:32:20:3a:a7:c4:e8:08:3a:d0:
                    dc:9a:f4:1f:9c:f6:a9:0d:9f:4c:00:28:59:26:46:
                    f0:46:55:65:57:7d:db:73:29:af:f9:e5:e1:62:94:
                    10:d9:cd:2b:03:c4:02:9c:21:56:75:d9:60:65:00:
                    c1:37:60:e4:3f:a8:22:66:b8:8b:d0:a6:6e:0a:2e:
                    8c:68:5d:a6:02:a3:5b:82:c2:73:e0:96:58:ec:1f:
                    78:04:f6:96:33:5d:77:21:75:26:66:93:b8:69:de:
                    31:27:3f:79:ab:77:e8:e7:88:51:c3:80:77:95:2f:
                    bf:65:19:ec:5d:ef:f0:9d:86:32:cc:b4:5e:2d:4b:
                    c8:3c:f8:ab:ae:56:8e:52:1e:82:b3:6b:a7:2b:fe:
                    a8:14:f2:36:db:60:9b:11:08:8d:f0:3c:89:8d:b0:
                    27:cb:fd:f9:b6:bc:7f:0c:b4:1d:b4:d8:0d:2d:df:
                    18:fa:ff:b9:14:81:5d:12:0d:e9:bc:0c:c9:26:1e:
                    b6:11:e7:fa:39:8f:a8:e8:87:ce:39:2b:63:72:c5:
                    c2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5F:22:3B:2E:9E:8F:38:84:D0:7A:B1:B3:04:9C:2D:D5:16:02:32
            X509v3 Authority Key Identifier:
                keyid:1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ae:3b:65:3c:ce:fd:32:f9:78:67:58:77:72:da:a0:3f:30:
         d9:69:22:55:79:23:83:15:ed:30:b9:20:27:ab:00:8f:ff:ee:
         46:b2:7a:f3:9b:8f:a3:57:5c:af:27:10:22:7a:0b:3f:0a:d6:
         cb:26:76:c9:18:88:e8:2b:e6:d2:c3:a3:cd:8c:8c:22:04:00:
         77:af:56:08:31:e3:e9:98:e8:8a:ee:7f:f1:5f:2a:e6:cb:73:
         1c:0a:71:4b:c9:dd:7e:87:b7:e2:e3:7c:cd:c5:cd:4d:e1:44:
         db:c8:dd:ce:38:7c:a1:73:fa:15:26:66:b6:16:82:6d:72:9d:
         da:76:16:83:5b:5a:a2:79:83:e1:80:66:52:ff:44:e3:5b:61:
         c0:22:4c:b6:50:81:5e:3d:0a:53:16:2e:84:3f:8d:78:0c:96:
         3e:f9:92:4d:af:77:7a:6a:c1:c0:32:86:52:38:c3:39:dc:28:
         75:0c:62:f7:50:6e:8a:af:66:11:f5:9a:37:b4:a7:6c:5a:cf:
         8b:e0:fd:dd:5a:c3:2a:20:d5:85:31:74:c4:bf:dd:d8:be:16:
         4c:0a:d2:52:6f:34:e6:6a:06:2a:74:b8:13:fd:ef:66:f0:dc:
         07:40:63:ec:0c:d8:dc:e0:81:1d:73:1c:58:83:c9:f0:61:47:
         58:e9:38:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdD1JuYkKrdW+vut75I0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZDI2OTA0N2QwMmZlOGI1YTJhYzllYjhkNWZlYzA3YjE4
N2VkYTEwHhcNMjUwNDEzMTQwMTA5WhcNMjUwNDE0MTQwMTA5WjAzMTEwLwYDVQQD
Eyg5NTVmMjIzYjJlOWU4ZjM4ODRkMDdhYjFiMzA0OWMyZGQ1MTYwMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkj90HFTToOKOPn1g/mRlTXp1HtT
AdSow15XAX8cXn1na+SAH+pZptcqoSm6a/bHofQyIDqnxOgIOtDcmvQfnPapDZ9M
AChZJkbwRlVlV33bcymv+eXhYpQQ2c0rA8QCnCFWddlgZQDBN2DkP6giZriL0KZu
Ci6MaF2mAqNbgsJz4JZY7B94BPaWM113IXUmZpO4ad4xJz95q3fo54hRw4B3lS+/
ZRnsXe/wnYYyzLReLUvIPPirrlaOUh6Cs2unK/6oFPI222CbEQiN8DyJjbAny/35
trx/DLQdtNgNLd8Y+v+5FIFdEg3pvAzJJh62Eef6OY+o6IfOOStjcsXCTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVfIjsuno84hNB6sbMEnC3VFgIyMB8GA1UdIwQY
MBaAFBvSaQR9Av6LWirJ641f7Aexh+2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84YzZlOTYtZDc3OC00OWRkLTllNWUt
M2NmMmI4MDAyMDMxLzEvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84YzZlOTYtZDc3OC00OWRkLTllNWUtM2NmMmI4MDAyMDMx
LzEvRzlKcEJIMENfb3RhS3NucmpWX3NCN0dIN2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGq47ZTzO
/TL5eGdYd3LaoD8w2WkiVXkjgxXtMLkgJ6sAj//uRrJ685uPo1dcrycQInoLPwrW
yyZ2yRiI6Cvm0sOjzYyMIgQAd69WCDHj6Zjoiu5/8V8q5stzHApxS8ndfoe34uN8
zcXNTeFE28jdzjh8oXP6FSZmthaCbXKd2nYWg1taonmD4YBmUv9E41thwCJMtlCB
Xj0KUxYuhD+NeAyWPvmSTa93emrBwDKGUjjDOdwodQxi91Buiq9mEfWaN7SnbFrP
i+D93VrDKiDVhTF0xL/d2L4WTArSUm805moGKnS4E/3vZvDcB0Bj7AzY3OCBHXMc
WIPJ8GFHWOk4+g==
-----END CERTIFICATE-----