Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File:                     gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier:          bSi02u2Qfbqqq+Ew+hDHVg+dfUwkziz3+uDdtplf0Ng=
Subject key identifier:   F6:19:FD:15:7F:B5:61:1B:A3:01:40:A2:12:20:E5:45:99:6E:8F:E2
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer:       /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial:       01962F072B92C55E6AB3CF4E0ABA99E27A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number:          0610
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: HYKWqu7dV9T03Pg2YEzmV2pzeLI.roa (hash: 0f4EPwDYkAduai0mg4vA1zfxCrdTubntPDPu+t4qPOY=)
                          2: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: Rb8P2GWrGDklBSoV3HmMQJObkVUsenw9S8rq9S0ac3w=)
                          3: sKvQstCz9PeJtgIU34nzs9eqEeU.roa (hash: H2Pm4bBxQ3BJkt3Kybv6k8Fd+61WPgE9z93gpg0GcNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2b:92:c5:5e:6a:b3:cf:4e:0a:ba:99:e2:7a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=f619fd157fb5611ba30140a21220e545996e8fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:e5:e0:ce:54:14:1b:6d:ce:25:61:23:f7:
                    df:60:28:e0:fe:bd:b1:e5:9a:af:74:f8:b4:cf:cc:
                    70:36:86:a5:67:4f:32:94:79:05:a9:f6:15:5c:ac:
                    59:92:f1:8f:74:10:6e:1a:b2:f5:d2:8d:8b:ab:a4:
                    43:8f:6f:16:79:72:cf:d0:0e:d5:dd:73:33:44:80:
                    67:78:fc:0f:03:ad:32:a1:1e:49:c4:30:b4:c9:f4:
                    ad:20:5f:95:06:3d:69:63:31:f6:fe:8a:f6:91:74:
                    72:33:c9:e8:49:4d:b6:ed:06:b4:2b:f2:6f:4e:2e:
                    cc:f9:42:f6:f9:a2:dd:3a:16:f0:c2:05:9d:c4:4f:
                    eb:ed:fb:ff:c3:ab:bf:90:65:81:e7:4d:36:e9:c9:
                    db:fc:a3:13:24:6e:3e:46:79:ef:d7:da:54:5b:3a:
                    50:98:65:d9:bc:8f:6b:83:99:00:73:93:f7:36:fe:
                    17:2a:c4:b3:15:c1:06:bd:0e:4a:48:38:9e:90:8f:
                    28:bd:5e:c0:91:c1:09:a0:88:88:54:bc:81:20:6a:
                    45:ff:72:e8:0b:0c:2c:9b:56:35:22:4c:82:6a:39:
                    72:5e:3f:be:44:48:27:02:2e:dd:60:a0:7c:6c:21:
                    4a:73:44:64:39:2d:30:69:94:45:74:f2:eb:f0:0f:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:19:FD:15:7F:B5:61:1B:A3:01:40:A2:12:20:E5:45:99:6E:8F:E2
            X509v3 Authority Key Identifier:
                keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:9b:c0:e7:e9:76:35:59:68:68:2f:10:ce:13:2c:f0:c4:61:
         9d:b7:8a:53:ec:cb:e4:82:ab:b1:d6:99:88:fb:b0:b2:d1:58:
         62:a6:90:f1:a7:96:a9:7a:03:ea:98:49:2f:15:c8:c6:bf:40:
         e8:a3:32:5e:7d:35:3a:65:3d:3c:23:b7:24:c8:64:97:d8:28:
         76:40:fe:15:89:91:63:a0:2c:c5:d8:df:07:22:51:d9:ea:42:
         8a:1a:a1:4d:21:39:83:e5:c9:b1:03:3e:ed:76:4b:97:58:18:
         f8:a6:8a:d2:a8:85:52:75:bd:51:e4:1f:bd:71:86:90:17:b8:
         8e:3a:19:ff:ff:6e:78:ea:be:62:70:06:97:1f:cc:fc:7f:fe:
         a3:eb:05:01:e6:55:bc:cc:6f:1d:bb:36:a9:46:0c:e0:79:77:
         8e:cc:20:03:d8:b0:08:45:97:83:39:07:ed:58:18:05:87:82:
         4c:e0:40:d5:91:64:86:21:6f:de:9a:56:3d:46:36:d6:57:f8:
         2f:51:c6:48:51:f7:ba:5e:de:37:c9:26:14:3e:df:34:9a:aa:
         ff:7f:31:34:4c:3e:2f:20:60:97:8a:8b:96:0f:e8:36:ee:b0:
         fb:30:0e:d5:01:22:0b:87:be:37:1e:01:50:78:d7:9e:5d:60:
         09:22:d8:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvByuSxV5qs89OCrqZ4no5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYjA2MzhiODc2ZjM5NzhjYTdiZDI4ZDdkZTM3MDk5NmIz
OTZhM2YwHhcNMjUwNDEzMTIwMjAxWhcNMjUwNDE0MTIwMjAxWjAzMTEwLwYDVQQD
EyhmNjE5ZmQxNTdmYjU2MTFiYTMwMTQwYTIxMjIwZTU0NTk5NmU4ZmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjbl4M5UFBttziVhI/ffYCjg/r2x
5ZqvdPi0z8xwNoalZ08ylHkFqfYVXKxZkvGPdBBuGrL10o2Lq6RDj28WeXLP0A7V
3XMzRIBnePwPA60yoR5JxDC0yfStIF+VBj1pYzH2/or2kXRyM8noSU227Qa0K/Jv
Ti7M+UL2+aLdOhbwwgWdxE/r7fv/w6u/kGWB50026cnb/KMTJG4+Rnnv19pUWzpQ
mGXZvI9rg5kAc5P3Nv4XKsSzFcEGvQ5KSDiekI8ovV7AkcEJoIiIVLyBIGpF/3Lo
Cwwsm1Y1IkyCajlyXj++REgnAi7dYKB8bCFKc0RkOS0waZRFdPLr8A9dxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYZ/RV/tWEbowFAohIg5UWZbo/iMB8GA1UdIwQY
MBaAFICwY4uHbzl4ynvSjX3jcJlrOWo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAt
MTViMDlmNWY2ZWQ3LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAtMTViMDlmNWY2ZWQ3
LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzJvA5+l2
NVloaC8QzhMs8MRhnbeKU+zL5IKrsdaZiPuwstFYYqaQ8aeWqXoD6phJLxXIxr9A
6KMyXn01OmU9PCO3JMhkl9godkD+FYmRY6AsxdjfByJR2epCihqhTSE5g+XJsQM+
7XZLl1gY+KaK0qiFUnW9UeQfvXGGkBe4jjoZ//9ueOq+YnAGlx/M/H/+o+sFAeZV
vMxvHbs2qUYM4Hl3jswgA9iwCEWXgzkH7VgYBYeCTOBA1ZFkhiFv3ppWPUY21lf4
L1HGSFH3ul7eN8kmFD7fNJqq/38xNEw+LyBgl4qLlg/oNu6w+zAO1QEiC4e+Nx4B
UHjXnl1gCSLYGg==
-----END CERTIFICATE-----