Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
File:                     gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft (raw, json)
Hash identifier:          ZHkFPoe3lXy44d2vs6yxqT8YlSTcDtgt57Jgf0nBd2I=
Subject key identifier:   0D:7A:70:DA:66:86:6C:3C:03:24:E0:9D:10:83:64:FC:11:3F:1F:EE
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Certificate issuer:       /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial:       01962F3DC21514AD63047E4C46208683E915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft
Manifest number:          082D
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: NmyYIbuzbIXUj9jJPjF3BR9optE.roa (hash: wSdjb/vMyeBBwt44mj9k7sBn6y3WZbUfXBs3kYVLtv8=)
                          2: gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl (hash: qjNLGXGyqnB7TEizIC8j+T/hjRPowfTsiuVhtv6D/Xk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c2:15:14:ad:63:04:7e:4c:46:20:86:83:e9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=0d7a70da66866c3c0324e09d108364fc113f1fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:96:93:15:6f:09:0e:25:aa:1a:63:6b:f0:
                    ba:b4:3b:d7:57:61:df:d7:8f:ec:e7:62:9e:12:62:
                    8c:ee:f1:0b:a9:1c:f3:b8:40:75:49:9a:b5:f7:a3:
                    0d:21:b0:14:5c:e7:bc:4e:53:e8:a8:e2:5c:b5:57:
                    f0:d4:c4:8c:76:6b:71:70:88:70:b2:5d:fb:b8:45:
                    57:29:1b:28:86:0b:87:7f:40:94:c7:5e:27:ee:d6:
                    f2:cc:66:83:61:a3:b8:83:ff:ae:9d:d7:45:d5:08:
                    74:51:d8:ed:92:2d:22:09:9b:3e:cf:23:71:45:c8:
                    ce:c5:02:0f:97:8e:06:2d:a5:ee:a3:89:4e:cd:5a:
                    8b:e9:0a:fe:6d:f5:3a:f1:87:a5:7f:5f:d9:46:6d:
                    e6:18:37:7c:b6:9f:08:40:2d:77:72:cc:d9:21:e0:
                    02:5f:37:f8:b3:2e:9c:b1:3b:5a:d2:f1:30:df:36:
                    52:29:2d:85:5a:28:8a:bc:5b:06:a0:0a:1d:b4:90:
                    b9:ba:7b:cc:fc:15:19:71:84:0b:3a:77:aa:67:f0:
                    6e:26:05:0e:d7:f3:e3:0e:4e:40:78:4c:bf:d5:13:
                    93:b9:58:4b:04:7a:51:b9:fc:a0:f3:41:8d:29:c2:
                    f4:64:6c:3e:e0:a4:34:30:46:4d:d4:dc:b5:2a:09:
                    81:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7A:70:DA:66:86:6C:3C:03:24:E0:9D:10:83:64:FC:11:3F:1F:EE
            X509v3 Authority Key Identifier:
                keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7e:ee:b9:ff:b4:84:0d:ee:6d:89:a2:cf:07:c9:68:87:00:
         4f:22:c2:8c:7f:74:80:68:1f:53:86:1b:f2:af:cc:91:f8:1d:
         b3:14:01:71:c8:5b:4f:63:99:3d:04:ea:7e:b3:6d:f3:ad:01:
         4c:f5:5c:6b:36:d4:3d:c1:df:8f:06:8e:51:f5:d8:6d:1f:3c:
         c8:9d:d8:52:cf:af:a5:dd:55:1f:a9:c5:b6:35:6c:80:11:30:
         f8:72:80:59:fd:3b:3f:2f:00:53:a7:01:72:02:70:37:77:e5:
         9e:0a:ae:18:0b:31:5d:aa:94:54:bb:d0:40:01:39:21:39:5f:
         de:a6:9b:cb:0f:a3:66:f3:aa:87:57:99:ac:c5:aa:f9:63:c4:
         e9:4f:74:1b:ee:22:cf:ba:39:28:e1:b4:0f:5b:ab:36:e0:17:
         d5:ae:a4:b5:99:ab:ee:10:5a:8e:09:9d:93:51:da:cc:48:7a:
         39:2a:da:ef:09:8f:a2:aa:59:8b:80:04:ef:82:78:ef:62:cb:
         74:7e:ad:f1:3a:5f:92:8d:5b:27:fd:b0:90:55:df:7d:ed:ef:
         70:d9:07:02:90:4f:40:e2:cb:ca:38:3e:ce:58:38:22:ea:b1:
         82:92:c9:28:b0:d5:80:8d:c7:e1:4f:16:d7:a2:f4:99:a0:df:
         d7:41:77:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcIVFK1jBH5MRiCGg+kVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmFiNTUwZDgyN2EyZGVmMGQ0ZDI2MTYwNjE0MjVjMmY2
OTRjODQwHhcNMjUwNDEzMTMwMTM4WhcNMjUwNDE0MTMwMTM4WjAzMTEwLwYDVQQD
EygwZDdhNzBkYTY2ODY2YzNjMDMyNGUwOWQxMDgzNjRmYzExM2YxZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZGWkxVvCQ4lqhpja/C6tDvXV2Hf
14/s52KeEmKM7vELqRzzuEB1SZq196MNIbAUXOe8TlPoqOJctVfw1MSMdmtxcIhw
sl37uEVXKRsohguHf0CUx14n7tbyzGaDYaO4g/+unddF1Qh0Udjtki0iCZs+zyNx
RcjOxQIPl44GLaXuo4lOzVqL6Qr+bfU68Yelf1/ZRm3mGDd8tp8IQC13cszZIeAC
Xzf4sy6csTta0vEw3zZSKS2FWiiKvFsGoAodtJC5unvM/BUZcYQLOneqZ/BuJgUO
1/PjDk5AeEy/1ROTuVhLBHpRufyg80GNKcL0ZGw+4KQ0MEZN1Ny1KgmBRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA16cNpmhmw8AyTgnRCDZPwRPx/uMB8GA1UdIwQY
MBaAFID6tVDYJ6Le8NTSYWBhQlwvaUyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAt
Zjc2MjkyOWYxZjA4LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS80YmE1ZmYtNTYyZS00MzU0LTk2MDAtZjc2MjkyOWYxZjA4
LzEvZ1BxMVVOZ25vdDd3MU5KaFlHRkNYQzlwVElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH37uuf+0
hA3ubYmizwfJaIcATyLCjH90gGgfU4Yb8q/MkfgdsxQBcchbT2OZPQTqfrNt860B
TPVcazbUPcHfjwaOUfXYbR88yJ3YUs+vpd1VH6nFtjVsgBEw+HKAWf07Py8AU6cB
cgJwN3flngquGAsxXaqUVLvQQAE5ITlf3qabyw+jZvOqh1eZrMWq+WPE6U90G+4i
z7o5KOG0D1urNuAX1a6ktZmr7hBajgmdk1HazEh6OSra7wmPoqpZi4AE74J472LL
dH6t8Tpfko1bJ/2wkFXffe3vcNkHApBPQOLLyjg+zlg4IuqxgpLJKLDVgI3H4U8W
16L0maDf10F3Pw==
-----END CERTIFICATE-----