Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File:                     gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier:          ma+xuF3M4Va1qiASxyCLLEyVp1uSiYqNMuu46Fyih3g=
Subject key identifier:   A6:B2:C1:54:C1:3F:4B:60:D2:E2:EA:16:62:2C:CF:C1:38:C8:B0:67
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer:       /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial:       01962F07356AC1AD48BA30F290B8AA8AC5C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: GHZFdJdEJwkZjGdm57Mhrtj88/tuar1y5THDYuTivIk=)
                          2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
                          3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:35:6a:c1:ad:48:ba:30:f2:90:b8:aa:8a:c5:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=a6b2c154c13f4b60d2e2ea16622ccfc138c8b067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ea:0a:c9:c7:35:7d:8f:a7:e8:6e:79:27:91:
                    85:96:7b:c4:ed:53:96:6c:b5:7b:9b:df:77:38:83:
                    c9:1f:d4:c0:c3:dc:c8:a7:75:2a:2a:9e:3a:3f:d1:
                    96:3e:79:d7:9c:47:39:94:a5:b9:d1:21:fa:3e:6b:
                    bc:56:b1:7e:53:f6:d7:e5:ee:a6:41:1f:5c:ab:f0:
                    ab:73:57:89:8d:6a:fc:6a:2c:c6:61:34:27:22:5a:
                    00:74:1b:20:23:34:1a:3a:7d:5b:61:06:ba:9d:63:
                    20:2e:fa:65:5e:a9:4a:5e:ec:c8:9f:a0:eb:6b:3b:
                    11:00:e6:ad:57:a9:d4:98:00:c0:8d:1f:05:2f:14:
                    bd:34:60:bf:4f:71:9f:08:3d:9e:55:56:32:61:be:
                    22:74:51:7f:93:93:d7:03:6e:46:d0:09:ee:2f:6d:
                    02:e2:22:06:de:8f:b8:fc:54:8b:5e:f3:4c:db:3f:
                    0f:93:16:50:df:47:d1:f8:6e:c0:af:e3:01:39:3a:
                    e2:be:d4:21:94:78:3a:1f:f1:c4:95:02:30:34:7f:
                    01:9a:a5:39:f8:09:de:4f:c0:d5:b9:bd:5b:dd:1b:
                    ac:fa:e1:a1:67:e9:79:82:a1:61:e8:75:c2:67:20:
                    3f:e1:1a:c3:df:e8:e3:cb:82:52:23:e5:30:eb:61:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B2:C1:54:C1:3F:4B:60:D2:E2:EA:16:62:2C:CF:C1:38:C8:B0:67
            X509v3 Authority Key Identifier:
                keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:67:a5:f2:f6:e8:ca:0d:01:56:06:04:21:bc:ac:4d:36:60:
         db:26:04:df:3f:9b:02:45:4e:f7:e5:4a:65:99:07:96:96:b2:
         85:35:a6:18:99:17:cc:b3:d4:84:a3:ed:0d:ee:0d:aa:ef:a9:
         ba:5f:39:02:dc:e5:7c:6f:ab:a1:f0:cb:d0:4d:03:53:67:61:
         2d:9f:a8:4a:74:cc:b3:a3:05:05:48:bf:af:3b:7e:2c:32:83:
         16:97:43:83:2e:94:8a:d1:25:61:44:e0:ed:3a:d8:18:93:16:
         d2:e5:e5:37:22:d4:e0:66:8d:e5:bf:1c:c2:d0:d0:db:9c:23:
         a7:e5:78:f6:76:a4:9d:b3:1e:9f:50:18:91:75:0e:94:5b:66:
         ab:b4:46:fb:eb:95:eb:89:47:b9:1e:74:38:4c:7f:5a:fe:ab:
         19:ab:1e:48:d4:1c:c4:22:d4:96:50:b8:32:30:7f:82:60:8d:
         8c:63:bf:5b:e2:9a:1f:cf:3c:87:52:17:fa:41:db:05:04:0e:
         94:d7:70:d2:4a:c6:24:99:3a:9b:1a:63:98:e2:e5:56:98:dc:
         cd:e6:7f:be:de:5d:69:f4:c4:05:eb:4e:eb:16:88:76:6a:94:
         3e:77:41:c4:6f:ed:65:8d:f4:f5:e7:c9:59:d5:7f:86:b6:7f:
         bc:cd:34:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzVqwa1IujDykLiqisXCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMmY1YTZjMGI5NTY0N2YwNzAzNTBlNjUyNGUxMjIwZmJh
NDdmYTMwHhcNMjUwNDEzMTIwMjAzWhcNMjUwNDE0MTIwMjAzWjAzMTEwLwYDVQQD
EyhhNmIyYzE1NGMxM2Y0YjYwZDJlMmVhMTY2MjJjY2ZjMTM4YzhiMDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+oKycc1fY+n6G55J5GFlnvE7VOW
bLV7m993OIPJH9TAw9zIp3UqKp46P9GWPnnXnEc5lKW50SH6Pmu8VrF+U/bX5e6m
QR9cq/Crc1eJjWr8aizGYTQnIloAdBsgIzQaOn1bYQa6nWMgLvplXqlKXuzIn6Dr
azsRAOatV6nUmADAjR8FLxS9NGC/T3GfCD2eVVYyYb4idFF/k5PXA25G0AnuL20C
4iIG3o+4/FSLXvNM2z8PkxZQ30fR+G7Ar+MBOTrivtQhlHg6H/HElQIwNH8BmqU5
+AneT8DVub1b3Rus+uGhZ+l5gqFh6HXCZyA/4RrD3+jjy4JSI+Uw62HUgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKaywVTBP0tg0uLqFmIsz8E4yLBnMB8GA1UdIwQY
MBaAFIIvWmwLlWR/BwNQ5lJOEiD7pH+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMt
NWQwZTA5YTAyMDRmLzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZGYyNjItMmUwYi00ZmI3LWIwZDMtNWQwZTA5YTAyMDRm
LzEvZ2k5YWJBdVZaSDhIQTFEbVVrNFNJUHVrZjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2el8vbo
yg0BVgYEIbysTTZg2yYE3z+bAkVO9+VKZZkHlpayhTWmGJkXzLPUhKPtDe4Nqu+p
ul85AtzlfG+rofDL0E0DU2dhLZ+oSnTMs6MFBUi/rzt+LDKDFpdDgy6UitElYUTg
7TrYGJMW0uXlNyLU4GaN5b8cwtDQ25wjp+V49naknbMen1AYkXUOlFtmq7RG++uV
64lHuR50OEx/Wv6rGaseSNQcxCLUllC4MjB/gmCNjGO/W+KaH888h1IX+kHbBQQO
lNdw0krGJJk6mxpjmOLlVpjczeZ/vt5dafTEBetO6xaIdmqUPndBxG/tZY309efJ
WdV/hrZ/vM00Ng==
-----END CERTIFICATE-----