Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File:                     g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier:          MZZX6IP8C0yZAz7tRmaHAFb9ULLig6KrPxluzHTUSgo=
Subject key identifier:   18:65:D7:26:BB:B4:B3:55:1B:F6:C6:57:9E:E6:02:1F:50:75:A3:8F
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer:       /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial:       01962E993C00C63E2F24A8E48E5EC27723BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number:          03EE
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: /RVstz9MsPlGK6MdbnH6K31laT0AxGCwJa/CzaZo5NM=)
                          2: hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa (hash: 5eRa0XK3oy+0XVVEDTa2qZR1cDbvimVVidnig16u0uM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3c:00:c6:3e:2f:24:a8:e4:8e:5e:c2:77:23:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=1865d726bbb4b3551bf6c6579ee6021f5075a38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a0:2f:22:2b:fd:4e:ef:9c:27:1b:38:2f:5f:
                    c4:35:0b:d8:42:ef:d2:3e:c6:87:51:66:1a:e0:d3:
                    a4:b9:88:37:ed:2f:c9:50:18:d7:1a:b7:40:08:a4:
                    c3:52:1b:3a:23:11:ae:2c:ae:6c:d7:1b:e7:64:aa:
                    76:36:0e:61:c4:de:0f:f5:0c:98:7a:ee:35:4a:a9:
                    1d:f1:36:2f:1d:ee:17:f6:9b:84:52:af:e1:01:93:
                    09:d6:bc:ac:c9:b6:96:28:48:43:b9:27:de:22:e5:
                    ce:10:10:fa:d7:c9:b8:06:de:cc:fb:1b:db:c2:f9:
                    62:a2:30:ec:e2:4c:77:c3:5f:ed:f8:a1:79:f5:23:
                    76:d2:a0:b1:d0:3a:bd:b2:b1:cd:86:fa:8f:66:b0:
                    ae:0d:00:41:2e:87:10:51:8b:65:5d:17:60:33:1a:
                    f6:da:b6:f3:49:2c:95:92:cd:96:68:cf:60:13:56:
                    dc:8e:b6:84:0a:50:5f:8c:3b:39:40:ca:29:6c:dc:
                    a6:3c:32:bd:3e:45:33:91:6d:1f:e3:0f:06:7d:3b:
                    74:3b:e1:e0:92:04:06:3f:75:76:49:85:1b:c4:a1:
                    a6:fb:c4:48:f5:55:4e:d0:2c:64:0a:96:24:27:03:
                    92:b7:e5:1c:a5:69:85:a8:0b:fb:04:47:ef:78:a5:
                    56:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:65:D7:26:BB:B4:B3:55:1B:F6:C6:57:9E:E6:02:1F:50:75:A3:8F
            X509v3 Authority Key Identifier:
                keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:61:97:23:dd:4d:51:7b:93:61:57:13:56:25:ec:c8:4d:17:
         f6:9e:bd:2c:73:c9:74:83:c9:0c:84:6d:46:21:a6:09:a2:f8:
         8f:05:da:54:fe:91:ee:bf:15:30:9a:87:6d:99:c1:d5:5e:b1:
         df:1b:b6:9e:61:4a:09:08:43:92:3a:66:f5:20:c7:df:89:f2:
         24:84:99:07:7d:72:48:4e:4b:2a:35:50:c2:0b:3a:6c:78:4d:
         54:42:9f:a2:1a:f5:d2:14:6e:5f:66:33:76:3e:56:65:05:57:
         2a:bc:99:c0:06:bf:fa:12:7f:b5:1e:0d:9e:50:f2:d9:1e:6d:
         8d:c2:30:5f:46:39:bb:c5:7d:c2:70:e7:5c:b7:5c:80:2c:4a:
         28:c2:6a:33:c9:05:cb:c9:eb:77:96:bf:ed:4c:f2:d4:4b:e8:
         e4:53:6b:23:d1:8a:8a:69:20:2b:26:6e:5b:ed:f7:e7:09:1a:
         a3:23:79:51:47:ea:fe:16:65:6d:bb:65:ce:7d:51:13:ad:45:
         36:44:f3:92:0a:50:52:f6:cd:59:2c:8b:26:ee:ed:57:66:42:
         d0:bb:9b:70:0e:ed:c5:9c:bf:8a:22:45:48:1b:42:fd:96:76:
         3c:31:48:00:91:33:70:64:fa:ae:fd:32:ce:0d:cf:3f:3b:37:
         da:0a:3a:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumTwAxj4vJKjkjl7CdyO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYjViNDkxM2NjNzhlNDA4MDNjMDBiZWM2YjFhOWRjNDhm
ZjM2ODQwHhcNMjUwNDEzMTAwMTU2WhcNMjUwNDE0MTAwMTU2WjAzMTEwLwYDVQQD
EygxODY1ZDcyNmJiYjRiMzU1MWJmNmM2NTc5ZWU2MDIxZjUwNzVhMzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqAvIiv9Tu+cJxs4L1/ENQvYQu/S
PsaHUWYa4NOkuYg37S/JUBjXGrdACKTDUhs6IxGuLK5s1xvnZKp2Ng5hxN4P9QyY
eu41Sqkd8TYvHe4X9puEUq/hAZMJ1rysybaWKEhDuSfeIuXOEBD618m4Bt7M+xvb
wvliojDs4kx3w1/t+KF59SN20qCx0Dq9srHNhvqPZrCuDQBBLocQUYtlXRdgMxr2
2rbzSSyVks2WaM9gE1bcjraEClBfjDs5QMopbNymPDK9PkUzkW0f4w8GfTt0O+Hg
kgQGP3V2SYUbxKGm+8RI9VVO0CxkCpYkJwOSt+UcpWmFqAv7BEfveKVWRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhl1ya7tLNVG/bGV57mAh9QdaOPMB8GA1UdIwQY
MBaAFIO1tJE8x45AgDwAvsaxqdxI/zaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2Yt
ODY3OTY1ZWI1MGNhLzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2YtODY3OTY1ZWI1MGNh
LzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWGXI91N
UXuTYVcTViXsyE0X9p69LHPJdIPJDIRtRiGmCaL4jwXaVP6R7r8VMJqHbZnB1V6x
3xu2nmFKCQhDkjpm9SDH34nyJISZB31ySE5LKjVQwgs6bHhNVEKfohr10hRuX2Yz
dj5WZQVXKryZwAa/+hJ/tR4NnlDy2R5tjcIwX0Y5u8V9wnDnXLdcgCxKKMJqM8kF
y8nrd5a/7Uzy1Evo5FNrI9GKimkgKyZuW+335wkaoyN5UUfq/hZlbbtlzn1RE61F
NkTzkgpQUvbNWSyLJu7tV2ZC0LubcA7txZy/iiJFSBtC/ZZ2PDFIAJEzcGT6rv0y
zg3PPzs32go6dQ==
-----END CERTIFICATE-----