Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
File:                     G_GA7KTkQF6Heotjkjp1iNd-OdI.mft (raw, json)
Hash identifier:          mZimniv+omfJxT49hEsJosX0uk2UKjMfRIZldpgrq1Y=
Subject key identifier:   57:8E:33:07:AD:A5:AE:74:68:E0:10:A2:44:51:EB:BC:A3:8A:F0:9F
Authority key identifier: 1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2
Certificate issuer:       /CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
Certificate serial:       01962F3D9208F1EAB541C7C0C34F63291E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft
Manifest number:          0441
Signing time:             Sun 13 Apr 2025 13:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:26 +0000
Files and hashes:         1: G_GA7KTkQF6Heotjkjp1iNd-OdI.crl (hash: Qiji1BeVM3B1INOAEb/1MvTD7tCDnJFxQjazewADBuk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:92:08:f1:ea:b5:41:c7:c0:c3:4f:63:29:1e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf180eca4e4405e877a8b63923a7588d77e39d2
        Validity
            Not Before: Apr 13 13:01:26 2025 GMT
            Not After : Apr 14 13:01:26 2025 GMT
        Subject: CN=578e3307ada5ae7468e010a24451ebbca38af09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:eb:09:c9:95:0b:9a:98:8b:d5:1d:87:12:
                    12:28:19:b5:5b:a8:01:e0:f7:cf:09:f5:d2:ca:72:
                    9e:19:33:9d:94:cd:e2:7c:0d:8b:06:22:09:05:c0:
                    d6:8e:0e:f9:b1:5e:09:f9:00:9b:e5:d1:c1:14:0c:
                    5d:75:e3:c0:a0:81:05:8d:37:ac:f1:bc:94:1e:80:
                    66:30:ec:8d:24:7f:fa:ed:e2:c8:f5:7e:9d:51:4a:
                    80:52:e0:47:10:93:93:a3:49:3a:97:1d:ad:19:0c:
                    a0:cb:53:d7:ec:50:f8:d1:11:20:33:1f:4b:1b:77:
                    f9:52:39:5c:21:fb:0e:b8:f3:a2:4a:2c:f5:ba:73:
                    2e:54:ff:67:ea:ce:80:e6:81:b5:b2:61:1e:c5:04:
                    2e:29:b5:ce:dd:f1:ad:53:b2:df:ba:45:cb:41:26:
                    f1:58:3a:48:4e:03:e4:e8:86:62:1c:a3:e6:75:42:
                    98:f7:22:be:a4:a5:e5:d1:07:49:7b:c0:43:9a:4d:
                    b6:e7:d1:04:5a:ee:10:af:fc:59:c8:ea:30:ce:c3:
                    cf:48:44:2e:7b:e8:9f:e8:92:74:44:17:c9:ce:ab:
                    dc:ef:e8:3f:7d:1f:2d:99:8f:29:bd:54:4c:05:2d:
                    74:f3:2c:fb:d9:25:ff:23:7e:db:6f:81:9a:44:18:
                    67:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8E:33:07:AD:A5:AE:74:68:E0:10:A2:44:51:EB:BC:A3:8A:F0:9F
            X509v3 Authority Key Identifier:
                keyid:1B:F1:80:EC:A4:E4:40:5E:87:7A:8B:63:92:3A:75:88:D7:7E:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_GA7KTkQF6Heotjkjp1iNd-OdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8922d-b304-4188-bda6-dc6b1ff72c18/1/G_GA7KTkQF6Heotjkjp1iNd-OdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:20:64:87:af:fc:f9:3d:38:e8:7a:14:e4:c0:13:12:7d:b6:
         35:55:00:c1:6d:29:12:de:5b:f2:11:4d:a9:15:da:4c:cd:b0:
         a9:9d:dc:30:03:15:77:34:0b:8e:be:fc:1f:94:72:d9:92:17:
         70:66:f9:a1:b6:47:f5:08:ee:89:cb:d2:32:d9:98:21:2f:07:
         b8:48:9d:44:05:ef:cd:0c:0f:e5:e9:d6:9d:99:ee:5b:7d:a8:
         ac:c9:44:a3:9e:31:05:7e:a1:aa:a2:62:47:a6:a0:6e:50:a0:
         03:06:de:83:f9:97:0f:b9:48:77:65:f9:b7:7d:90:97:37:74:
         a1:af:9f:16:73:ab:8a:81:7c:b4:b0:8f:b1:51:7a:fb:57:56:
         c0:a1:88:3c:c7:87:f3:ad:b3:27:78:f6:72:ea:f5:9c:7f:7e:
         3b:19:3e:92:fd:6c:3b:1b:82:4e:45:a6:06:39:c7:f0:6d:e4:
         d9:af:b7:25:bf:b9:7f:f2:e6:df:d0:3c:66:83:31:2a:21:37:
         c9:a9:56:41:8c:15:b8:ce:fd:a5:1c:d3:25:5a:9f:9f:f2:32:
         29:a1:6f:62:5f:dc:fd:41:35:80:6f:df:34:a6:07:19:a0:b5:
         95:5f:9f:94:be:46:a3:86:2a:1b:3d:c9:9b:bf:98:6f:6a:d0:
         37:25:7c:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZII8eq1QcfAw09jKR5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjE4MGVjYTRlNDQwNWU4NzdhOGI2MzkyM2E3NTg4ZDc3
ZTM5ZDIwHhcNMjUwNDEzMTMwMTI2WhcNMjUwNDE0MTMwMTI2WjAzMTEwLwYDVQQD
Eyg1NzhlMzMwN2FkYTVhZTc0NjhlMDEwYTI0NDUxZWJiY2EzOGFmMDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvErrCcmVC5qYi9UdhxISKBm1W6gB
4PfPCfXSynKeGTOdlM3ifA2LBiIJBcDWjg75sV4J+QCb5dHBFAxddePAoIEFjTes
8byUHoBmMOyNJH/67eLI9X6dUUqAUuBHEJOTo0k6lx2tGQygy1PX7FD40REgMx9L
G3f5UjlcIfsOuPOiSiz1unMuVP9n6s6A5oG1smEexQQuKbXO3fGtU7LfukXLQSbx
WDpITgPk6IZiHKPmdUKY9yK+pKXl0QdJe8BDmk2259EEWu4Qr/xZyOowzsPPSEQu
e+if6JJ0RBfJzqvc7+g/fR8tmY8pvVRMBS108yz72SX/I37bb4GaRBhnIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeOMwetpa50aOAQokRR67yjivCfMB8GA1UdIwQY
MBaAFBvxgOyk5EBeh3qLY5I6dYjXfjnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19HQTdLVGtRRjZIZW90amtqcDFpTmQtT2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lODkyMmQtYjMwNC00MTg4LWJkYTYt
ZGM2YjFmZjcyYzE4LzEvR19HQTdLVGtRRjZIZW90amtqcDFpTmQtT2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lODkyMmQtYjMwNC00MTg4LWJkYTYtZGM2YjFmZjcyYzE4
LzEvR19HQTdLVGtRRjZIZW90amtqcDFpTmQtT2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyBkh6/8
+T046HoU5MATEn22NVUAwW0pEt5b8hFNqRXaTM2wqZ3cMAMVdzQLjr78H5Ry2ZIX
cGb5obZH9QjuicvSMtmYIS8HuEidRAXvzQwP5enWnZnuW32orMlEo54xBX6hqqJi
R6agblCgAwbeg/mXD7lId2X5t32Qlzd0oa+fFnOrioF8tLCPsVF6+1dWwKGIPMeH
862zJ3j2cur1nH9+Oxk+kv1sOxuCTkWmBjnH8G3k2a+3Jb+5f/Lm39A8ZoMxKiE3
yalWQYwVuM79pRzTJVqfn/IyKaFvYl/c/UE1gG/fNKYHGaC1lV+flL5Go4YqGz3J
m7+Yb2rQNyV8PQ==
-----END CERTIFICATE-----