Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
File:                     gSBe85sNP11y-h2XHUGR4Lomhr8.mft (raw, json)
Hash identifier:          kXgam40EhFeAVgrf7xyckMOCXDnQLiBOgisklU+6bLU=
Subject key identifier:   46:44:54:A7:65:AF:52:A0:5B:29:DC:61:7F:A4:75:99:D6:63:C1:78
Authority key identifier: 81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF
Certificate issuer:       /CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
Certificate serial:       01962ECF7D0C5DE827FE01A104E5A94DC6D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: gSBe85sNP11y-h2XHUGR4Lomhr8.crl (hash: NXGJYTti4ELIHYIzHE69gRmJV2gg2gS+s3829SFyoC4=)
                          2: tejhqyIYcfJnZD52AowM2BpZATQ.roa (hash: oI2/9MVukstCSiurn/ztv7Ci6tJsVocDaOvri7bb8FY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7d:0c:5d:e8:27:fe:01:a1:04:e5:a9:4d:c6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81205ef39b0d3f5d72fa1d971d4191e0ba2686bf
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=464454a765af52a05b29dc617fa47599d663c178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:32:aa:c9:bd:ec:b4:03:6f:64:c0:7a:dc:
                    c5:e5:d2:75:78:93:d8:e8:7b:ff:b3:10:0b:54:33:
                    64:20:60:2f:ba:fa:7e:9a:a1:b9:a1:da:ac:3f:6b:
                    ef:f1:fe:97:f0:f4:9c:77:16:21:80:e1:02:9d:70:
                    19:52:c3:5d:01:e1:aa:81:51:c1:89:6e:94:71:1e:
                    94:b2:85:20:a5:0c:d4:d8:aa:67:a2:24:c0:6f:8b:
                    c5:24:57:98:e2:f8:96:9b:fa:41:e2:a7:24:8e:b5:
                    fe:8a:36:cd:18:65:aa:04:9d:f9:69:50:b8:a8:08:
                    9a:ff:d7:32:93:e4:8a:1f:59:57:68:4b:8b:c6:cb:
                    a3:ee:7b:10:10:83:30:83:9f:0e:21:ef:39:4e:bb:
                    19:d3:fc:e3:9a:79:24:8b:f9:90:0f:d5:08:36:d2:
                    4a:92:d6:0d:92:b5:c1:33:e4:33:26:68:26:76:2f:
                    fb:4b:4a:62:6a:d6:93:ab:7e:2e:ee:dd:13:f9:25:
                    9b:99:7f:2d:14:7b:4d:49:5c:99:a7:51:14:20:75:
                    cb:2d:00:60:21:b3:78:5f:83:47:93:be:30:dc:3b:
                    48:fc:a3:08:4d:c3:c3:7c:d8:29:4f:78:28:b2:a2:
                    0c:49:28:cc:e5:82:db:f7:16:71:7a:a2:a4:a3:fb:
                    1e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:44:54:A7:65:AF:52:A0:5B:29:DC:61:7F:A4:75:99:D6:63:C1:78
            X509v3 Authority Key Identifier:
                keyid:81:20:5E:F3:9B:0D:3F:5D:72:FA:1D:97:1D:41:91:E0:BA:26:86:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSBe85sNP11y-h2XHUGR4Lomhr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b56881-e919-445a-9923-89a9023261f1/1/gSBe85sNP11y-h2XHUGR4Lomhr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:be:d1:93:62:d0:df:bf:f8:af:2b:c0:9f:c9:86:19:30:6d:
         f9:3a:e3:b3:a4:ee:1f:fb:ef:2d:74:ed:65:50:ae:c8:4f:d7:
         5d:d1:a7:0e:1a:95:e9:2a:da:59:92:ca:71:11:15:10:e8:22:
         65:98:82:6d:2d:ea:ff:f5:2e:b6:65:18:7e:be:6b:e7:93:b8:
         ce:33:b9:32:90:0f:f4:11:14:71:2a:0a:58:9c:f4:5c:4c:a0:
         7b:c2:34:27:f3:7b:a3:c3:98:0b:ac:56:98:2e:21:f7:1d:f7:
         a9:18:ac:85:3c:b8:db:28:49:cd:48:41:24:22:ab:11:a6:32:
         dd:9d:4d:0f:16:2f:12:5b:16:64:82:29:43:78:58:54:8a:56:
         ae:0d:a9:7d:b1:de:45:32:e3:89:51:bb:11:77:d8:b9:47:66:
         81:fd:c7:3b:ff:83:de:5b:df:e5:f7:80:bb:04:1f:65:57:5c:
         64:c9:9d:d6:18:44:03:48:31:d8:73:ef:4f:4e:98:b4:cc:96:
         bb:ba:cd:8b:35:37:6f:26:08:f9:e2:bc:ec:ae:3e:f0:ab:05:
         25:ad:82:9d:98:71:8d:50:30:25:05:2d:f9:cb:2d:2f:da:8a:
         5a:18:cd:74:39:a2:26:4a:93:9e:48:8e:70:72:5c:f4:07:92:
         05:f8:30:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz30MXegn/gGhBOWpTcbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMjA1ZWYzOWIwZDNmNWQ3MmZhMWQ5NzFkNDE5MWUwYmEy
Njg2YmYwHhcNMjUwNDEzMTEwMTExWhcNMjUwNDE0MTEwMTExWjAzMTEwLwYDVQQD
Eyg0NjQ0NTRhNzY1YWY1MmEwNWIyOWRjNjE3ZmE0NzU5OWQ2NjNjMTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HIyqsm97LQDb2TAetzF5dJ1eJPY
6Hv/sxALVDNkIGAvuvp+mqG5odqsP2vv8f6X8PScdxYhgOECnXAZUsNdAeGqgVHB
iW6UcR6UsoUgpQzU2KpnoiTAb4vFJFeY4viWm/pB4qckjrX+ijbNGGWqBJ35aVC4
qAia/9cyk+SKH1lXaEuLxsuj7nsQEIMwg58OIe85TrsZ0/zjmnkki/mQD9UINtJK
ktYNkrXBM+QzJmgmdi/7S0piataTq34u7t0T+SWbmX8tFHtNSVyZp1EUIHXLLQBg
IbN4X4NHk74w3DtI/KMITcPDfNgpT3gosqIMSSjM5YLb9xZxeqKko/seUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZEVKdlr1KgWyncYX+kdZnWY8F4MB8GA1UdIwQY
MBaAFIEgXvObDT9dcvodlx1BkeC6Joa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMt
ODlhOTAyMzI2MWYxLzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iNTY4ODEtZTkxOS00NDVhLTk5MjMtODlhOTAyMzI2MWYx
LzEvZ1NCZTg1c05QMTF5LWgyWEhVR1I0TG9taHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh77Rk2LQ
37/4ryvAn8mGGTBt+Trjs6TuH/vvLXTtZVCuyE/XXdGnDhqV6SraWZLKcREVEOgi
ZZiCbS3q//UutmUYfr5r55O4zjO5MpAP9BEUcSoKWJz0XEyge8I0J/N7o8OYC6xW
mC4h9x33qRishTy42yhJzUhBJCKrEaYy3Z1NDxYvElsWZIIpQ3hYVIpWrg2pfbHe
RTLjiVG7EXfYuUdmgf3HO/+D3lvf5feAuwQfZVdcZMmd1hhEA0gx2HPvT06YtMyW
u7rNizU3byYI+eK87K4+8KsFJa2CnZhxjVAwJQUt+cstL9qKWhjNdDmiJkqTnkiO
cHJc9AeSBfgwJQ==
-----END CERTIFICATE-----