Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
File:                     G2njMjeIqhYaYpcgauPnsZqf_GE.mft (raw, json)
Hash identifier:          c1nfp+eEkCn3rXqtwSbboVaCIHzfKkdHHQ55/nu8/k4=
Subject key identifier:   5B:00:DB:04:67:BB:6A:BE:D0:B8:1B:CE:34:55:28:B8:23:82:FD:AD
Authority key identifier: 1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61
Certificate issuer:       /CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
Certificate serial:       01962DF404518EAE8FB027792AE1AE1FA5C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: G2njMjeIqhYaYpcgauPnsZqf_GE.crl (hash: mx6Lep5T+7tl1yaOZQBq80OTS7PaHKu77suG1VSJTgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:04:51:8e:ae:8f:b0:27:79:2a:e1:ae:1f:a5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b69e3323788aa161a6297206ae3e7b19a9ffc61
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=5b00db0467bb6abed0b81bce345528b82382fdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:a5:94:b2:1e:63:ad:67:86:ad:6b:e1:3b:
                    61:8c:ae:84:5e:bc:20:9a:b4:2f:6d:bf:e2:20:29:
                    53:17:46:55:23:43:48:58:3e:06:2d:14:98:67:ba:
                    84:48:1b:55:cd:fc:30:de:a6:04:a9:6e:75:73:72:
                    46:02:4f:55:75:80:f2:b9:06:1d:8b:bd:73:b4:52:
                    ad:d6:2e:87:18:bd:26:8f:1b:74:05:09:81:36:45:
                    0c:b4:24:40:11:e2:d7:ad:38:cc:96:3d:a5:70:32:
                    bd:4a:69:7b:2a:35:45:ba:bb:82:9e:9d:1a:4a:5f:
                    51:c6:df:42:26:e2:5b:5d:19:76:70:c3:9c:a8:ed:
                    b1:c2:db:55:de:44:c6:84:7c:12:be:f6:40:bf:ef:
                    b1:88:04:44:a4:b7:ed:74:a6:dc:8b:2c:38:00:ae:
                    ad:59:a3:a3:c5:c6:cd:69:ef:7f:3f:75:36:ff:a9:
                    51:42:6c:42:53:e9:f8:e6:88:3c:31:39:e2:15:ed:
                    35:98:56:c8:91:15:a2:29:8c:e4:07:fb:6d:d6:3d:
                    bc:b8:f7:5f:e4:9a:5c:b7:1f:49:df:3b:54:49:74:
                    bd:48:78:ab:50:eb:67:28:c9:8f:3e:36:26:d0:ee:
                    31:36:cb:61:f7:e5:96:76:a9:7d:c9:19:da:95:54:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:00:DB:04:67:BB:6A:BE:D0:B8:1B:CE:34:55:28:B8:23:82:FD:AD
            X509v3 Authority Key Identifier:
                keyid:1B:69:E3:32:37:88:AA:16:1A:62:97:20:6A:E3:E7:B1:9A:9F:FC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2njMjeIqhYaYpcgauPnsZqf_GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a88a77-1e2c-4f04-8b8f-b0d296520d32/1/G2njMjeIqhYaYpcgauPnsZqf_GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:11:48:64:c7:0e:21:6b:cc:20:52:e5:e8:07:8d:22:c2:21:
         e5:f8:56:ef:d9:cc:59:8d:7b:bf:05:15:fb:e7:11:3d:67:79:
         5c:d6:54:fe:66:f2:54:3c:e2:51:bc:fd:6e:d6:92:cf:f5:84:
         f7:54:00:3a:ca:fd:c5:9d:08:df:79:72:65:b7:90:ba:0b:6d:
         a0:93:9a:34:f9:81:73:7d:2d:40:a5:31:35:d6:ba:92:0e:b3:
         64:4d:b6:bd:cf:4c:ff:ec:93:a3:dd:44:6d:b2:77:3a:0a:b5:
         58:01:fc:4f:31:d8:23:64:8a:04:a5:14:f4:92:c5:9c:f1:ae:
         b3:c6:84:0c:60:03:b0:ad:e8:bc:c3:86:23:c9:bd:e1:6a:d0:
         1c:a2:30:03:45:68:c3:15:7d:47:ee:8a:b3:7c:12:fd:af:2d:
         b9:09:7b:fe:a0:ca:ab:36:05:bf:c9:88:bf:05:35:41:ec:bb:
         6b:ff:7e:bc:1a:e8:03:3d:69:4c:6a:6e:68:fd:e8:5d:41:d7:
         e4:8d:1c:ce:42:53:a7:c2:29:35:c7:78:b5:52:ee:93:ae:78:
         01:3e:fc:8c:56:98:80:29:7b:f4:01:54:d7:93:45:5c:fb:82:
         b4:74:22:31:a9:96:1a:50:3c:79:f6:63:e6:d3:65:1f:1f:96:
         b2:c8:89:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9ARRjq6PsCd5KuGuH6XCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNjllMzMyMzc4OGFhMTYxYTYyOTcyMDZhZTNlN2IxOWE5
ZmZjNjEwHhcNMjUwNDEzMDcwMTI4WhcNMjUwNDE0MDcwMTI4WjAzMTEwLwYDVQQD
Eyg1YjAwZGIwNDY3YmI2YWJlZDBiODFiY2UzNDU1MjhiODIzODJmZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEellLIeY61nhq1r4TthjK6EXrwg
mrQvbb/iIClTF0ZVI0NIWD4GLRSYZ7qESBtVzfww3qYEqW51c3JGAk9VdYDyuQYd
i71ztFKt1i6HGL0mjxt0BQmBNkUMtCRAEeLXrTjMlj2lcDK9Sml7KjVFuruCnp0a
Sl9Rxt9CJuJbXRl2cMOcqO2xwttV3kTGhHwSvvZAv++xiAREpLftdKbciyw4AK6t
WaOjxcbNae9/P3U2/6lRQmxCU+n45og8MTniFe01mFbIkRWiKYzkB/tt1j28uPdf
5Jpctx9J3ztUSXS9SHirUOtnKMmPPjYm0O4xNsth9+WWdql9yRnalVT+JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsA2wRnu2q+0LgbzjRVKLgjgv2tMB8GA1UdIwQY
MBaAFBtp4zI3iKoWGmKXIGrj57Gan/xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hODhhNzctMWUyYy00ZjA0LThiOGYt
YjBkMjk2NTIwZDMyLzEvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hODhhNzctMWUyYy00ZjA0LThiOGYtYjBkMjk2NTIwZDMy
LzEvRzJuak1qZUlxaFlhWXBjZ2F1UG5zWnFmX0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRFIZMcO
IWvMIFLl6AeNIsIh5fhW79nMWY17vwUV++cRPWd5XNZU/mbyVDziUbz9btaSz/WE
91QAOsr9xZ0I33lyZbeQugttoJOaNPmBc30tQKUxNda6kg6zZE22vc9M/+yTo91E
bbJ3Ogq1WAH8TzHYI2SKBKUU9JLFnPGus8aEDGADsK3ovMOGI8m94WrQHKIwA0Vo
wxV9R+6Ks3wS/a8tuQl7/qDKqzYFv8mIvwU1Qey7a/9+vBroAz1pTGpuaP3oXUHX
5I0czkJTp8IpNcd4tVLuk654AT78jFaYgCl79AFU15NFXPuCtHQiMamWGlA8efZj
5tNlHx+WssiJRA==
-----END CERTIFICATE-----