Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
File:                     gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft (raw, json)
Hash identifier:          /3XtVxNsx+83XOvjSdlw588+zkMP1GM01zWkXzltLok=
Subject key identifier:   A8:D2:01:1E:07:CB:62:E1:61:B7:D1:40:21:F7:EB:E4:95:3D:7E:12
Authority key identifier: 81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD
Certificate issuer:       /CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
Certificate serial:       01962E2B290F7F9F6C22CD41A60E56248BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft
Manifest number:          0C71
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: 8eWD8Ql-1KtgIOkNC8YKuoueCck.roa (hash: r76wcz0I4RjQIe4PO8q2P9lP7fbFaLdOJ6XIYZNCtEg=)
                          2: ClDShRWVAJsP6NoIbSAj2Ahd24Q.roa (hash: vntq+Z6Tbd8s/QqwS6T999xv/EcabW8VhdgxR1iSPhU=)
                          3: gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl (hash: qBm/pP995mv158lxrZi+kf8ce/30sMGfBLu0y2OmmZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:29:0f:7f:9f:6c:22:cd:41:a6:0e:56:24:8b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81812385b82dda0fd4826abb7aefeb0df3eb8ffd
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=a8d2011e07cb62e161b7d14021f7ebe4953d7e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:63:6a:22:b3:0e:12:23:9d:b6:58:fc:95:e7:
                    3e:09:cd:b2:7b:13:fb:c9:af:6b:be:44:6a:22:9d:
                    28:9e:75:da:90:f1:c0:19:f4:75:64:97:50:02:df:
                    2f:3c:42:72:c1:9c:83:45:ad:dc:de:a5:dd:5e:9d:
                    df:e9:59:03:b0:ee:f7:28:66:36:e5:5a:16:e5:27:
                    a4:05:fd:9e:fd:90:62:67:4b:d3:53:d1:fa:f6:7a:
                    d8:7f:ad:74:4e:a7:19:64:a9:5c:b9:ae:b1:b2:06:
                    10:c3:72:94:96:80:cb:d7:f2:cf:e1:08:35:b3:25:
                    0b:0c:e1:de:87:c4:fa:a8:d6:27:d9:2e:d8:8b:03:
                    9f:01:14:87:1a:a9:16:cd:c0:85:5d:32:eb:48:ec:
                    8d:02:67:c9:0b:7c:33:b0:91:7a:16:74:e3:b4:fd:
                    27:20:15:e3:4e:aa:91:d5:70:84:98:a0:fd:1c:a0:
                    80:22:f4:24:5f:20:f0:6c:30:4e:20:a7:f5:74:47:
                    52:81:41:ec:39:fb:0b:37:bc:ba:59:8a:b4:2a:47:
                    60:6f:f7:1f:33:77:39:13:20:15:5b:f7:b6:79:64:
                    50:33:46:49:ab:84:3c:b8:0a:03:f0:2a:f9:98:bd:
                    3b:6d:6d:aa:1f:14:e6:e7:ed:61:04:26:09:f0:1f:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D2:01:1E:07:CB:62:E1:61:B7:D1:40:21:F7:EB:E4:95:3D:7E:12
            X509v3 Authority Key Identifier:
                keyid:81:81:23:85:B8:2D:DA:0F:D4:82:6A:BB:7A:EF:EB:0D:F3:EB:8F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/gYEjhbgt2g_Ugmq7eu_rDfPrj_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:cf:67:2e:30:73:57:cc:97:59:60:98:63:93:8d:a6:c1:
         50:67:f4:5c:9b:76:79:d0:a9:3e:58:a0:c0:3f:7d:2a:0f:5b:
         ed:d3:0b:96:48:96:44:32:74:d7:9d:87:45:a9:35:51:33:48:
         11:59:ad:f5:63:53:0a:d0:93:05:5f:30:4d:34:e9:ca:5a:70:
         cb:de:03:34:c0:ab:8a:f2:cc:7f:a4:ce:bc:0c:f4:4c:2b:fd:
         01:e3:43:35:73:66:8c:e4:57:8d:3f:14:73:ef:e5:40:d3:f7:
         74:c5:5d:c2:56:8c:f3:c9:6b:ff:6e:cb:82:1c:5d:29:be:a9:
         0f:3a:0c:a6:06:29:27:f4:23:43:8e:04:85:14:d5:0a:20:2e:
         99:b8:5e:47:ca:97:db:8e:d4:45:fb:e5:71:7c:62:ce:33:4d:
         45:7b:6c:bb:1d:22:e6:c2:46:ee:ef:4e:47:d5:38:86:70:c9:
         5a:68:0d:ab:36:ac:d0:3e:ae:84:a3:d3:64:65:dc:81:65:63:
         d8:b6:68:5e:2c:ef:a1:4a:ca:a0:b9:0b:92:61:95:3e:25:87:
         c2:71:d5:75:d8:bd:1e:ac:5c:ac:c0:dd:83:40:0a:af:b0:07:
         57:dd:b7:03:28:6c:ce:e9:7e:ea:c4:b9:f7:ef:8b:fa:09:08:
         21:22:75:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKykPf59sIs1Bpg5WJIvCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxODEyMzg1YjgyZGRhMGZkNDgyNmFiYjdhZWZlYjBkZjNl
YjhmZmQwHhcNMjUwNDEzMDgwMTQyWhcNMjUwNDE0MDgwMTQyWjAzMTEwLwYDVQQD
EyhhOGQyMDExZTA3Y2I2MmUxNjFiN2QxNDAyMWY3ZWJlNDk1M2Q3ZTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WNqIrMOEiOdtlj8lec+Cc2yexP7
ya9rvkRqIp0onnXakPHAGfR1ZJdQAt8vPEJywZyDRa3c3qXdXp3f6VkDsO73KGY2
5VoW5SekBf2e/ZBiZ0vTU9H69nrYf610TqcZZKlcua6xsgYQw3KUloDL1/LP4Qg1
syULDOHeh8T6qNYn2S7YiwOfARSHGqkWzcCFXTLrSOyNAmfJC3wzsJF6FnTjtP0n
IBXjTqqR1XCEmKD9HKCAIvQkXyDwbDBOIKf1dEdSgUHsOfsLN7y6WYq0Kkdgb/cf
M3c5EyAVW/e2eWRQM0ZJq4Q8uAoD8Cr5mL07bW2qHxTm5+1hBCYJ8B/SoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjSAR4Hy2LhYbfRQCH36+SVPX4SMB8GA1UdIwQY
MBaAFIGBI4W4LdoP1IJqu3rv6w3z64/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEt
ZGEyZWM4Y2ZiODg4LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wMDkwNzQtNjZmNi00ZDRkLTk3NGEtZGEyZWM4Y2ZiODg4
LzEvZ1lFamhiZ3QyZ19VZ21xN2V1X3JEZlByal8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwbPZy4w
c1fMl1lgmGOTjabBUGf0XJt2edCpPligwD99Kg9b7dMLlkiWRDJ0152HRak1UTNI
EVmt9WNTCtCTBV8wTTTpylpwy94DNMCrivLMf6TOvAz0TCv9AeNDNXNmjORXjT8U
c+/lQNP3dMVdwlaM88lr/27LghxdKb6pDzoMpgYpJ/QjQ44EhRTVCiAumbheR8qX
247URfvlcXxizjNNRXtsux0i5sJG7u9OR9U4hnDJWmgNqzas0D6uhKPTZGXcgWVj
2LZoXizvoUrKoLkLkmGVPiWHwnHVddi9HqxcrMDdg0AKr7AHV923Ayhszul+6sS5
9++L+gkIISJ1oQ==
-----END CERTIFICATE-----