Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File:                     GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier:          BlPsdfL+PWvp9HMokWSTjUHJN8kvigLyUBWIv0czaCE=
Subject key identifier:   32:6F:93:88:34:13:DD:F8:19:96:75:EE:F1:59:CA:B3:9F:18:1D:95
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer:       /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial:       01962F0708471340F41644434E0DCC6600BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number:          042A
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: hkFlB1oDi61BajA1GChC3UHEM8T0TCsbIAUB/pf1/1U=)
                          2: _Y3WU0rL_Z5yMospeFK2kheOtgM.roa (hash: qqDo+PPhN0qvkLG+7KSZ3FS8hY7kC2hitlOvSMnc4pQ=)
                          3: cqleo2TkA-Dax9YzlbPC4oCeXks.roa (hash: WDLbfAf8uLhRV57uZSklRDXJ7tKTUOclgtS0od1R4M4=)
                          4: spoNsBquI5wjgn7gu8viZ3BO3l4.roa (hash: G+9zvvKyQogrHpfux1dzt3BVRrnfOK8LLcMasK0KKtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:08:47:13:40:f4:16:44:43:4e:0d:cc:66:00:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=326f93883413ddf8199675eef159cab39f181d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6e:b7:58:cc:db:82:32:62:e8:60:e5:1f:92:
                    25:63:6f:d1:cf:67:80:8c:40:3d:d5:e3:8a:c5:6e:
                    31:13:c1:e7:7b:6f:ef:14:fb:04:12:6f:ab:4a:d6:
                    5a:0f:18:ed:20:67:a8:df:a3:37:65:14:65:83:ac:
                    6d:fa:1a:4d:d0:7a:32:61:92:39:2f:ad:e6:0d:a3:
                    8b:ce:43:0f:aa:16:cb:b0:dc:d4:a9:ba:f7:28:35:
                    36:48:a4:2f:27:f0:fa:d5:64:5d:76:8b:88:b8:56:
                    8c:45:bb:17:87:de:8a:78:4c:d3:ae:9b:31:1b:2a:
                    23:f2:a8:b9:d5:e1:aa:37:3b:05:96:7a:1c:3b:10:
                    ed:04:c5:f4:05:73:ed:2e:4f:63:6f:f1:d6:e3:64:
                    75:02:bd:c1:2b:aa:41:50:a1:6a:42:eb:a9:f7:29:
                    f7:6b:c6:85:1f:6a:83:85:00:8c:58:e3:cb:06:72:
                    0a:f1:50:01:f6:75:18:2d:68:37:cd:97:69:7b:b5:
                    b2:95:32:f3:a6:ab:a7:24:e2:50:9c:29:5d:c6:81:
                    0a:f1:cc:0f:79:93:8c:84:05:08:ff:aa:73:50:27:
                    06:bb:58:09:aa:82:c3:87:43:42:ec:65:b9:55:cd:
                    c6:a3:31:86:13:61:6b:e2:5a:92:cc:1d:fc:e9:8a:
                    f3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6F:93:88:34:13:DD:F8:19:96:75:EE:F1:59:CA:B3:9F:18:1D:95
            X509v3 Authority Key Identifier:
                keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:b6:49:75:48:a2:cd:55:3e:38:ac:9e:8e:26:11:8e:27:21:
         ea:37:c5:92:b7:a6:60:17:6c:29:89:ff:35:ef:54:d4:eb:af:
         20:f3:4e:c2:03:f4:c6:09:88:dc:b1:6d:b6:53:7d:5d:81:c7:
         6d:f4:0a:3e:44:a4:eb:94:f1:5a:ce:06:40:01:3f:79:d7:a3:
         cf:4b:83:a5:86:64:74:e4:f7:6b:30:92:3d:9b:ef:8e:8f:2c:
         1e:95:64:fd:ac:59:17:8e:0f:9e:a6:c1:f1:c7:a1:3f:88:fb:
         ec:b2:b6:48:aa:10:0b:b8:dd:35:93:01:07:5d:83:1d:9b:8d:
         74:81:fb:ab:53:32:03:ec:34:e6:49:06:b9:d6:26:d8:e1:20:
         69:eb:97:aa:63:2e:a5:7f:ef:69:0e:ad:58:29:00:7c:11:38:
         c0:d5:14:42:35:ec:3c:67:35:44:72:4a:e5:6a:d8:75:44:7f:
         54:86:a6:98:9d:75:d9:c7:c1:c0:2b:5c:3e:ac:ff:53:6e:45:
         aa:f1:5a:1f:4b:7b:19:66:fa:10:19:fa:a7:fb:dc:c5:42:15:
         2a:3c:df:ec:a4:c8:70:38:d1:6c:0a:35:8d:37:b2:93:d6:6d:
         da:23:98:57:df:1b:4d:f1:98:64:da:71:33:82:77:88:cf:0b:
         e8:de:68:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwhHE0D0FkRDTg3MZgC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDAxZDU1N2EwNjk4ZGFkNzdjNGIzZWRkZjJhN2QzNmI3
MmFiMDAwHhcNMjUwNDEzMTIwMTUyWhcNMjUwNDE0MTIwMTUyWjAzMTEwLwYDVQQD
EygzMjZmOTM4ODM0MTNkZGY4MTk5Njc1ZWVmMTU5Y2FiMzlmMTgxZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG63WMzbgjJi6GDlH5IlY2/Rz2eA
jEA91eOKxW4xE8Hne2/vFPsEEm+rStZaDxjtIGeo36M3ZRRlg6xt+hpN0HoyYZI5
L63mDaOLzkMPqhbLsNzUqbr3KDU2SKQvJ/D61WRddouIuFaMRbsXh96KeEzTrpsx
Gyoj8qi51eGqNzsFlnocOxDtBMX0BXPtLk9jb/HW42R1Ar3BK6pBUKFqQuup9yn3
a8aFH2qDhQCMWOPLBnIK8VAB9nUYLWg3zZdpe7WylTLzpqunJOJQnCldxoEK8cwP
eZOMhAUI/6pzUCcGu1gJqoLDh0NC7GW5Vc3GozGGE2Fr4lqSzB386YrzWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJvk4g0E934GZZ17vFZyrOfGB2VMB8GA1UdIwQY
MBaAFBkAHVV6Bpja13xLPt3yp9NrcqsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDkt
MjBkZTY5NzI2MDliLzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDktMjBkZTY5NzI2MDli
LzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt7ZJdUii
zVU+OKyejiYRjich6jfFkremYBdsKYn/Ne9U1OuvIPNOwgP0xgmI3LFttlN9XYHH
bfQKPkSk65TxWs4GQAE/edejz0uDpYZkdOT3azCSPZvvjo8sHpVk/axZF44PnqbB
8cehP4j77LK2SKoQC7jdNZMBB12DHZuNdIH7q1MyA+w05kkGudYm2OEgaeuXqmMu
pX/vaQ6tWCkAfBE4wNUUQjXsPGc1RHJK5WrYdUR/VIammJ112cfBwCtcPqz/U25F
qvFaH0t7GWb6EBn6p/vcxUIVKjzf7KTIcDjRbAo1jTeyk9Zt2iOYV98bTfGYZNpx
M4J3iM8L6N5olQ==
-----END CERTIFICATE-----