Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
File:                     gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft (raw, json)
Hash identifier:          9aeqiddqMmVixu6TbPQ1fvzus8WD6mhdrgNrqi7it8M=
Subject key identifier:   1E:C3:4A:15:10:92:C9:78:D9:FF:8B:9E:F9:31:38:22:91:FF:05:8A
Authority key identifier: 81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68
Certificate issuer:       /CN=8166038385b343d55e76b728efe23c0731787668
Certificate serial:       01962F74D0701BF9AD182A82F2D63F077364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft
Manifest number:          0DEB
Signing time:             Sun 13 Apr 2025 14:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:46 +0000
Files and hashes:         1: 2iJw4EQoXKQlcgvYyAFZ8L2PyY4.roa (hash: iiK5pamhZGxd1XFCTcN85Gnci+JOI25h5MBN1jWndgw=)
                          2: gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl (hash: Vdyasdj6nxe8NF+307gWoB8jxgCzx3kObSf85FwC0sU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d0:70:1b:f9:ad:18:2a:82:f2:d6:3f:07:73:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8166038385b343d55e76b728efe23c0731787668
        Validity
            Not Before: Apr 13 14:01:46 2025 GMT
            Not After : Apr 14 14:01:46 2025 GMT
        Subject: CN=1ec34a151092c978d9ff8b9ef931382291ff058a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:72:46:bf:b8:18:bb:af:6b:7c:b1:61:83:
                    07:e0:af:2e:d7:cf:23:cb:3c:3f:a6:1e:99:cb:5b:
                    bc:79:a1:2e:58:48:6f:33:49:35:9e:d9:8e:ae:64:
                    40:83:c7:36:80:69:f8:49:4d:39:ed:00:e2:44:c6:
                    d7:f4:b9:57:b5:2d:e6:3d:1f:b0:fe:aa:de:aa:02:
                    92:a2:a9:30:1f:4a:f0:29:58:06:f8:7a:6e:bd:e4:
                    54:0e:ab:a3:cb:1d:b1:7e:30:0d:0a:09:50:49:42:
                    e0:73:e0:d4:bf:c9:eb:72:20:c9:f5:5d:45:79:05:
                    55:55:3d:55:85:b4:f2:b7:a2:c7:0d:55:72:df:fd:
                    8e:e9:52:6d:e8:fc:ad:80:40:79:59:53:cb:20:70:
                    c5:2a:aa:01:2c:c4:46:a4:00:20:08:88:21:82:e8:
                    16:78:ae:2c:64:a4:e6:9e:f5:cf:a2:d2:ea:d5:0b:
                    76:d6:08:55:a0:42:da:80:a2:cd:5e:12:a5:0a:ee:
                    b6:69:b6:66:21:23:55:7e:33:0e:7d:63:7d:b0:b8:
                    ef:f1:55:06:d9:2e:e2:94:73:fd:97:a8:38:d6:ee:
                    48:01:65:a1:ce:b5:30:ce:aa:5d:00:10:9a:b6:a5:
                    84:81:a0:e9:ac:cc:b3:f9:4a:fb:89:9e:55:1f:2b:
                    18:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C3:4A:15:10:92:C9:78:D9:FF:8B:9E:F9:31:38:22:91:FF:05:8A
            X509v3 Authority Key Identifier:
                keyid:81:66:03:83:85:B3:43:D5:5E:76:B7:28:EF:E2:3C:07:31:78:76:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWYDg4WzQ9Vedrco7-I8BzF4dmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/48cfd0-3238-4aaf-b663-4373b65790b8/1/gWYDg4WzQ9Vedrco7-I8BzF4dmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2b:0b:5f:0c:ea:9a:32:36:ce:7f:dd:b4:d5:09:6e:4f:7c:
         16:44:43:21:3e:39:65:7b:54:cb:40:ae:9c:52:24:92:6e:d0:
         65:f0:f0:4a:b7:6b:0c:0b:19:82:6f:4e:c9:31:97:a6:75:e4:
         26:fc:3f:8e:52:15:70:31:b6:a3:f3:4d:8a:dd:54:7f:7c:81:
         95:19:84:c1:b7:6f:1d:fd:ae:7c:66:4e:e2:3f:d5:30:ad:88:
         ed:07:09:01:2b:8c:e5:de:42:b4:8c:70:ba:2b:92:c8:77:6d:
         ca:f0:da:76:ad:5a:5d:df:80:20:b4:91:26:08:3e:07:1d:e9:
         82:15:91:2a:60:bb:b4:34:81:30:19:6e:7e:61:c5:70:6e:d7:
         1a:e3:32:45:8a:49:8f:47:75:a7:40:09:0b:80:6f:23:a3:01:
         91:2a:bb:27:95:5f:c9:37:cc:d0:7d:01:74:b7:a0:74:a9:89:
         f1:09:e4:eb:97:d6:63:e4:cd:aa:ed:b8:7e:ff:5f:8b:07:b5:
         c6:bc:42:2b:ab:61:52:79:2f:f5:10:5d:8b:a3:89:a2:c9:95:
         9c:6b:de:03:ca:25:9d:c6:80:e6:14:3f:43:30:a3:a0:c8:a8:
         18:15:e9:17:b2:de:cb:f4:b3:e7:67:2b:1f:b2:22:2f:07:54:
         92:07:cc:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNBwG/mtGCqC8tY/B3NkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjYwMzgzODViMzQzZDU1ZTc2YjcyOGVmZTIzYzA3MzE3
ODc2NjgwHhcNMjUwNDEzMTQwMTQ2WhcNMjUwNDE0MTQwMTQ2WjAzMTEwLwYDVQQD
EygxZWMzNGExNTEwOTJjOTc4ZDlmZjhiOWVmOTMxMzgyMjkxZmYwNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowNyRr+4GLuva3yxYYMH4K8u188j
yzw/ph6Zy1u8eaEuWEhvM0k1ntmOrmRAg8c2gGn4SU057QDiRMbX9LlXtS3mPR+w
/qreqgKSoqkwH0rwKVgG+HpuveRUDqujyx2xfjANCglQSULgc+DUv8nrciDJ9V1F
eQVVVT1VhbTyt6LHDVVy3/2O6VJt6PytgEB5WVPLIHDFKqoBLMRGpAAgCIghgugW
eK4sZKTmnvXPotLq1Qt21ghVoELagKLNXhKlCu62abZmISNVfjMOfWN9sLjv8VUG
2S7ilHP9l6g41u5IAWWhzrUwzqpdABCatqWEgaDprMyz+Ur7iZ5VHysY6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7DShUQksl42f+LnvkxOCKR/wWKMB8GA1UdIwQY
MBaAFIFmA4OFs0PVXna3KO/iPAcxeHZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMt
NDM3M2I2NTc5MGI4LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy80OGNmZDAtMzIzOC00YWFmLWI2NjMtNDM3M2I2NTc5MGI4
LzEvZ1dZRGc0V3pROVZlZHJjbzctSThCekY0ZG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWysLXwzq
mjI2zn/dtNUJbk98FkRDIT45ZXtUy0CunFIkkm7QZfDwSrdrDAsZgm9OyTGXpnXk
Jvw/jlIVcDG2o/NNit1Uf3yBlRmEwbdvHf2ufGZO4j/VMK2I7QcJASuM5d5CtIxw
uiuSyHdtyvDadq1aXd+AILSRJgg+Bx3pghWRKmC7tDSBMBlufmHFcG7XGuMyRYpJ
j0d1p0AJC4BvI6MBkSq7J5VfyTfM0H0BdLegdKmJ8Qnk65fWY+TNqu24fv9fiwe1
xrxCK6thUnkv9RBdi6OJosmVnGveA8olncaA5hQ/QzCjoMioGBXpF7Ley/Sz52cr
H7IiLwdUkgfM4A==
-----END CERTIFICATE-----