Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
File:                     g-k154ofll0QiRUhXQ8Et2tzPlg.mft (raw, json)
Hash identifier:          t6lXJoqaqQfie36QEBow/cWh7q/87L2MdHD01YjhoIo=
Subject key identifier:   43:7C:45:31:61:7A:E7:42:3C:4B:D7:D6:0F:5A:C8:31:88:E0:8C:90
Authority key identifier: 83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58
Certificate issuer:       /CN=83e935e78a1f965d108915215d0f04b76b733e58
Certificate serial:       01962E98819402F33D1A27B15BDA2D5FE9D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: g-k154ofll0QiRUhXQ8Et2tzPlg.crl (hash: 0KqAvmxPW5hFmpPFIT7rC+y3UiozLN1RW5kxoCouY/Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:81:94:02:f3:3d:1a:27:b1:5b:da:2d:5f:e9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83e935e78a1f965d108915215d0f04b76b733e58
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=437c4531617ae7423c4bd7d60f5ac83188e08c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:19:c7:0b:41:3e:7f:1b:1d:0e:e2:9c:3a:
                    cc:65:4a:9b:05:01:6b:a8:90:db:51:37:1a:1f:b7:
                    10:eb:e0:6a:a9:56:33:3a:2a:47:63:18:1c:d3:f2:
                    f6:0e:22:c2:89:4c:db:94:22:95:1f:01:75:41:89:
                    5b:03:1a:2f:77:e4:73:3d:22:81:4a:44:77:e3:a1:
                    e1:79:53:f6:38:ca:ef:ff:e8:0f:d7:37:51:61:30:
                    0d:b3:05:44:06:da:68:19:12:de:c0:99:5b:87:92:
                    8a:7f:83:f6:e0:1a:f1:26:1b:e9:27:d2:cd:56:2a:
                    42:06:e9:21:c2:d3:08:ce:b6:7d:2f:d8:6c:a6:ca:
                    ef:a2:8f:fc:b0:5a:3a:ea:94:a0:86:f8:0d:73:e1:
                    ab:9f:49:ea:b5:80:73:32:e5:21:99:c5:03:1a:e7:
                    fb:b3:17:cb:fb:fb:66:72:f6:7b:56:06:1a:16:bd:
                    10:0b:4e:ec:89:ab:64:3c:85:ce:20:5f:8d:14:da:
                    29:35:a3:d9:70:ad:2d:09:c7:70:26:23:93:18:3c:
                    17:f2:07:74:fb:a0:bd:e3:9b:85:79:7d:9c:bc:92:
                    fc:de:73:76:40:f2:c4:b2:81:55:41:d2:56:3b:6b:
                    13:10:0e:e0:3d:ec:e2:28:36:07:06:18:71:4c:23:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7C:45:31:61:7A:E7:42:3C:4B:D7:D6:0F:5A:C8:31:88:E0:8C:90
            X509v3 Authority Key Identifier:
                keyid:83:E9:35:E7:8A:1F:96:5D:10:89:15:21:5D:0F:04:B7:6B:73:3E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-k154ofll0QiRUhXQ8Et2tzPlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a423c7-fa7d-49f8-a6f3-0a67f00fdede/1/g-k154ofll0QiRUhXQ8Et2tzPlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d6:8d:e4:65:47:4b:f1:fc:6d:30:4c:2d:f5:7e:42:5c:0e:
         eb:cc:6d:dd:7e:ec:78:f9:d2:d9:f2:f2:4d:3d:b7:0c:35:19:
         be:a0:17:db:42:8d:28:6f:19:b9:4e:ad:93:55:23:86:54:91:
         a2:6a:26:d0:b6:6f:4b:08:0d:f9:af:48:85:c3:28:5b:4a:33:
         9b:c9:6e:11:fa:05:84:ac:38:07:01:32:bc:43:e7:9a:57:98:
         13:24:b7:98:d8:84:c9:45:86:52:a1:b0:d4:33:b6:9b:1e:35:
         77:73:a4:66:6d:7b:6b:e2:59:04:b3:f7:d9:ab:66:3d:68:4a:
         e3:52:ab:ce:a3:d2:e9:9b:e9:67:fc:da:0e:46:e0:0f:24:73:
         47:37:8a:84:3c:2c:ec:ff:b4:04:2f:8d:cf:bd:24:6d:0c:e7:
         dc:83:ca:e1:e8:78:4e:82:0f:67:85:ca:71:3a:52:a5:78:74:
         aa:5d:7d:ca:a0:6f:15:ff:ed:f9:ba:1f:bf:63:ca:e9:da:b2:
         d2:85:2d:68:46:3e:06:0e:a3:b6:bc:eb:43:b4:8e:bd:1b:08:
         71:65:0c:3e:f1:87:42:4b:6b:ca:d0:6f:45:47:4b:5b:ce:ef:
         39:22:02:e1:7f:3d:6a:45:48:23:e5:11:f2:ef:39:0c:96:00:
         04:e6:dc:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumIGUAvM9GiexW9otX+nZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTkzNWU3OGExZjk2NWQxMDg5MTUyMTVkMGYwNGI3NmI3
MzNlNTgwHhcNMjUwNDEzMTAwMTA4WhcNMjUwNDE0MTAwMTA4WjAzMTEwLwYDVQQD
Eyg0MzdjNDUzMTYxN2FlNzQyM2M0YmQ3ZDYwZjVhYzgzMTg4ZTA4YzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtsZxwtBPn8bHQ7inDrMZUqbBQFr
qJDbUTcaH7cQ6+BqqVYzOipHYxgc0/L2DiLCiUzblCKVHwF1QYlbAxovd+RzPSKB
SkR346HheVP2OMrv/+gP1zdRYTANswVEBtpoGRLewJlbh5KKf4P24BrxJhvpJ9LN
VipCBukhwtMIzrZ9L9hspsrvoo/8sFo66pSghvgNc+Grn0nqtYBzMuUhmcUDGuf7
sxfL+/tmcvZ7VgYaFr0QC07siatkPIXOIF+NFNopNaPZcK0tCcdwJiOTGDwX8gd0
+6C945uFeX2cvJL83nN2QPLEsoFVQdJWO2sTEA7gPeziKDYHBhhxTCOfwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEN8RTFheudCPEvX1g9ayDGI4IyQMB8GA1UdIwQY
MBaAFIPpNeeKH5ZdEIkVIV0PBLdrcz5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1rMTU0b2ZsbDBRaVJVaFhROEV0MnR6UGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNDIzYzctZmE3ZC00OWY4LWE2ZjMt
MGE2N2YwMGZkZWRlLzEvZy1rMTU0b2ZsbDBRaVJVaFhROEV0MnR6UGxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNDIzYzctZmE3ZC00OWY4LWE2ZjMtMGE2N2YwMGZkZWRl
LzEvZy1rMTU0b2ZsbDBRaVJVaFhROEV0MnR6UGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtaN5GVH
S/H8bTBMLfV+QlwO68xt3X7sePnS2fLyTT23DDUZvqAX20KNKG8ZuU6tk1UjhlSR
omom0LZvSwgN+a9IhcMoW0ozm8luEfoFhKw4BwEyvEPnmleYEyS3mNiEyUWGUqGw
1DO2mx41d3OkZm17a+JZBLP32atmPWhK41KrzqPS6ZvpZ/zaDkbgDyRzRzeKhDws
7P+0BC+Nz70kbQzn3IPK4eh4ToIPZ4XKcTpSpXh0ql19yqBvFf/t+bofv2PK6dqy
0oUtaEY+Bg6jtrzrQ7SOvRsIcWUMPvGHQktrytBvRUdLW87vOSIC4X89akVII+UR
8u85DJYABObcdg==
-----END CERTIFICATE-----