Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File:                     GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier:          0vhapdve7dE75zEFzKjeqAmpMfHss5cXduKjUVisOUA=
Subject key identifier:   2D:0D:10:B2:80:DD:D8:CE:80:AD:9E:D9:B7:EB:91:E3:0D:57:0A:E6
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer:       /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial:       01962DF39EFDDE91E8926E6E63C777001649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number:          0DC1
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: GOyl6U-dGvVD0-jKWtZSd5lPcvw.roa (hash: UpOJI3oK6cWcuZSPYztLiL8Ogsz4qyqADulp7DywRZk=)
                          2: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: aATHEC8XF1jKR8KmfLN2lMCi4JZsBpZYnciOcRMUoyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9e:fd:de:91:e8:92:6e:6e:63:c7:77:00:16:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=2d0d10b280ddd8ce80ad9ed9b7eb91e30d570ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:96:24:37:e3:5c:34:2f:3d:06:63:03:19:45:
                    93:24:15:43:6a:05:81:36:42:5d:1a:b3:9d:b6:ed:
                    14:9c:94:cf:dc:ed:43:d8:6f:d8:45:72:39:a9:8d:
                    86:5b:a6:31:d5:29:c0:ea:16:11:11:df:33:0c:b4:
                    58:ec:14:41:16:c3:07:40:9e:36:37:51:ed:65:6a:
                    f7:dc:05:1f:5e:11:8e:74:8c:be:0f:2c:06:ef:66:
                    58:48:eb:30:fc:a8:c0:2f:5d:9f:87:df:76:df:e2:
                    7d:f0:87:1e:32:5c:17:22:54:c5:3c:33:f4:20:0c:
                    4c:21:1e:a8:16:ae:a2:3d:c2:8b:36:ea:69:31:ad:
                    5d:e8:2d:94:6a:c7:d5:c7:f1:12:cf:95:92:39:53:
                    34:d1:c4:09:bf:c6:b8:e6:7e:da:f9:6e:d3:cc:f2:
                    27:22:29:45:61:4e:cc:ca:b7:ea:89:0e:df:f6:61:
                    c9:a6:96:9f:42:1a:73:86:12:0c:c6:e6:c6:6f:eb:
                    cf:85:0d:11:bf:21:0f:14:e1:6d:6e:bc:80:cb:79:
                    ca:56:f8:d2:1a:4c:e3:52:15:b2:47:f4:e9:79:15:
                    b9:b0:28:21:af:59:c2:a5:b9:54:16:05:ea:c4:e2:
                    48:96:c5:d5:ed:8f:7d:4a:86:fb:0e:8d:c6:1a:70:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:10:B2:80:DD:D8:CE:80:AD:9E:D9:B7:EB:91:E3:0D:57:0A:E6
            X509v3 Authority Key Identifier:
                keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:fc:01:f8:d1:8e:03:95:84:99:81:9d:32:ac:67:d6:ab:aa:
         24:84:71:22:05:87:87:56:dd:e3:16:f1:70:05:58:51:f0:3e:
         81:51:9e:a2:fe:c2:5b:84:e9:98:63:b8:9f:88:47:59:96:9f:
         d9:ef:89:39:1e:51:ff:75:df:e1:12:ae:44:f1:cd:4d:71:64:
         ab:ef:bb:1f:7e:93:80:73:05:bf:30:d2:02:b7:1e:f1:a0:75:
         3b:66:db:fa:3f:75:94:11:ac:0e:96:9f:c2:e2:d5:72:4c:1f:
         a3:e1:b9:68:d3:30:74:02:f2:6e:23:db:c6:52:04:4e:76:06:
         0d:fd:bf:37:e0:da:59:79:0b:3e:f8:13:7a:c2:56:db:83:b3:
         9e:8c:b8:cd:0c:f6:8e:00:ee:84:0a:e2:7f:bb:33:70:95:41:
         04:97:0e:bb:d7:f6:39:13:ec:d7:7f:21:db:e7:d6:cc:4a:e0:
         51:08:93:7d:0e:36:22:5c:75:97:c7:45:9f:d4:6f:ac:34:ff:
         06:02:a1:46:aa:f9:6b:6e:d7:a0:60:c6:84:8b:67:7f:14:b8:
         46:38:dc:7f:31:82:23:26:f8:52:f5:e7:95:47:6a:2f:c1:18:
         00:8b:f2:e3:cb:cf:07:3d:d3:5e:21:01:70:02:4d:fd:94:62:
         fe:e9:b6:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt85793pHokm5uY8d3ABZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjJlMWZjNDAwYmJmOWRjYjIwNjZhZGUzZGJmZTVjOWVh
YjJlN2QwHhcNMjUwNDEzMDcwMTAyWhcNMjUwNDE0MDcwMTAyWjAzMTEwLwYDVQQD
EygyZDBkMTBiMjgwZGRkOGNlODBhZDllZDliN2ViOTFlMzBkNTcwYWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pYkN+NcNC89BmMDGUWTJBVDagWB
NkJdGrOdtu0UnJTP3O1D2G/YRXI5qY2GW6Yx1SnA6hYREd8zDLRY7BRBFsMHQJ42
N1HtZWr33AUfXhGOdIy+DywG72ZYSOsw/KjAL12fh9923+J98IceMlwXIlTFPDP0
IAxMIR6oFq6iPcKLNuppMa1d6C2UasfVx/ESz5WSOVM00cQJv8a45n7a+W7TzPIn
IilFYU7MyrfqiQ7f9mHJppafQhpzhhIMxubGb+vPhQ0RvyEPFOFtbryAy3nKVvjS
GkzjUhWyR/TpeRW5sCghr1nCpblUFgXqxOJIlsXV7Y99Sob7Do3GGnALWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0NELKA3djOgK2e2bfrkeMNVwrmMB8GA1UdIwQY
MBaAFBmy4fxAC7+dyyBmrePb/lyeqy59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYt
MGRhOWFlODQ1OGRiLzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYtMGRhOWFlODQ1OGRi
LzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/wB+NGO
A5WEmYGdMqxn1quqJIRxIgWHh1bd4xbxcAVYUfA+gVGeov7CW4TpmGO4n4hHWZaf
2e+JOR5R/3Xf4RKuRPHNTXFkq++7H36TgHMFvzDSArce8aB1O2bb+j91lBGsDpaf
wuLVckwfo+G5aNMwdALybiPbxlIETnYGDf2/N+DaWXkLPvgTesJW24Oznoy4zQz2
jgDuhArif7szcJVBBJcOu9f2ORPs138h2+fWzErgUQiTfQ42Ilx1l8dFn9RvrDT/
BgKhRqr5a27XoGDGhItnfxS4RjjcfzGCIyb4UvXnlUdqL8EYAIvy48vPBz3TXiEB
cAJN/ZRi/um2mg==
-----END CERTIFICATE-----