Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
File:                     GtYaUvEILs9Ml7USK0YRIlBzRRs.mft (raw, json)
Hash identifier:          PPxr6Lqm0DvB99u5sUt9sYafaiRjuEaaD/RFZGtCo0Q=
Subject key identifier:   A1:10:46:7D:D1:E7:78:E1:7B:1D:D3:46:F2:F3:42:EC:FE:43:94:FB
Authority key identifier: 1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B
Certificate issuer:       /CN=1ad61a52f1082ecf4c97b5122b4611225073451b
Certificate serial:       01962F74903B0617E0D94974022F5962B870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: GtYaUvEILs9Ml7USK0YRIlBzRRs.crl (hash: MR/w9bTQMUhKSKwetcytT7P1wX25fCn4LUHdzirIKW0=)
                          2: rDCQZOSrxJZ5t1EHBcAmewJ2zuE.roa (hash: 5o5LCz2EfBpIGStnQttGujPIzxdxxRQF2IZp5UipRj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:90:3b:06:17:e0:d9:49:74:02:2f:59:62:b8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ad61a52f1082ecf4c97b5122b4611225073451b
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=a110467dd1e778e17b1dd346f2f342ecfe4394fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:86:06:37:a6:bd:e7:30:0d:17:05:83:fe:51:
                    b9:d4:76:f8:10:96:e2:12:6d:98:5b:4d:fe:28:0f:
                    62:10:44:07:af:67:2e:a5:e3:d6:3b:40:93:e6:78:
                    b1:43:17:61:e6:51:a4:03:72:7f:0e:a2:7f:8c:05:
                    77:87:e7:f3:45:3f:3a:f8:2b:02:53:e2:0b:0d:4c:
                    56:2b:70:66:3d:f6:b4:4a:d0:e5:f6:b4:b0:0f:9a:
                    32:3a:1b:88:5b:5c:23:c5:6b:ba:07:b7:c3:78:dd:
                    d5:3d:82:ac:67:54:a5:c8:01:cb:7e:27:17:4f:f8:
                    f1:a6:86:02:d8:bc:b4:e4:f1:e5:0b:37:1e:13:84:
                    8e:e7:8e:68:e0:86:b0:8a:a7:49:6b:47:4b:7d:63:
                    38:39:47:ca:f2:72:8c:df:4b:80:26:13:9c:71:3f:
                    4f:50:17:4c:f3:36:3c:35:60:0b:10:8a:ea:e9:dc:
                    5c:68:1e:5e:49:85:57:de:cd:2e:91:3b:80:85:54:
                    8b:60:55:4b:07:6c:45:72:9f:1a:18:41:fe:b3:e0:
                    6b:15:5f:17:f1:05:8e:1a:ab:cf:75:5d:28:f5:03:
                    ab:12:fa:8e:29:bb:58:e3:81:13:45:54:79:8e:44:
                    9e:0b:eb:51:a5:e4:19:9d:14:43:dd:15:41:bd:b0:
                    d3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:10:46:7D:D1:E7:78:E1:7B:1D:D3:46:F2:F3:42:EC:FE:43:94:FB
            X509v3 Authority Key Identifier:
                keyid:1A:D6:1A:52:F1:08:2E:CF:4C:97:B5:12:2B:46:11:22:50:73:45:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtYaUvEILs9Ml7USK0YRIlBzRRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d555-20bd-4c42-84ba-72ce95ba9afa/1/GtYaUvEILs9Ml7USK0YRIlBzRRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:79:9c:4b:5c:88:12:26:b5:60:f5:d5:61:15:14:01:f6:c7:
         ca:ef:79:02:47:ff:7e:4b:9c:7f:cf:24:ed:c2:f5:3d:3c:a5:
         39:83:61:bf:ab:0b:8d:2e:d1:cb:56:c0:09:60:fe:ab:32:f1:
         6b:b5:4a:8f:cf:0e:32:9c:72:c9:4e:73:16:65:e6:ee:ee:2d:
         89:7c:ec:8e:60:4b:6c:f1:82:c3:37:19:91:32:de:ec:b9:70:
         da:9f:38:56:83:3c:fb:38:65:8a:40:50:01:dd:c6:f3:92:0d:
         5f:ac:5e:cf:47:bc:4e:a6:e3:e0:7a:6a:c6:96:2f:50:5c:d4:
         e8:5e:08:85:9e:74:9d:90:08:8d:7e:11:d3:22:0b:6b:8f:2d:
         e3:72:2e:91:49:6e:52:66:da:ab:cc:e4:42:34:53:7d:1c:24:
         84:96:2c:a3:3f:67:ad:c1:eb:54:33:a9:0b:b2:65:cc:11:53:
         99:58:89:cc:f5:ee:65:75:da:6f:40:fb:44:fa:ba:a4:9b:8e:
         9a:11:fa:d9:9a:65:ce:65:1c:34:fd:67:38:40:83:e1:c3:5a:
         fd:45:57:4d:d1:54:9c:fe:b1:20:3c:19:1d:43:3b:c4:9b:08:
         d0:5e:c6:8b:4a:2a:4b:18:62:77:25:cc:b7:3b:2f:d0:31:3c:
         8f:49:12:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJA7Bhfg2Ul0Ai9ZYrhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZDYxYTUyZjEwODJlY2Y0Yzk3YjUxMjJiNDYxMTIyNTA3
MzQ1MWIwHhcNMjUwNDEzMTQwMTMwWhcNMjUwNDE0MTQwMTMwWjAzMTEwLwYDVQQD
EyhhMTEwNDY3ZGQxZTc3OGUxN2IxZGQzNDZmMmYzNDJlY2ZlNDM5NGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIYGN6a95zANFwWD/lG51Hb4EJbi
Em2YW03+KA9iEEQHr2cupePWO0CT5nixQxdh5lGkA3J/DqJ/jAV3h+fzRT86+CsC
U+ILDUxWK3BmPfa0StDl9rSwD5oyOhuIW1wjxWu6B7fDeN3VPYKsZ1SlyAHLficX
T/jxpoYC2Ly05PHlCzceE4SO545o4IawiqdJa0dLfWM4OUfK8nKM30uAJhOccT9P
UBdM8zY8NWALEIrq6dxcaB5eSYVX3s0ukTuAhVSLYFVLB2xFcp8aGEH+s+BrFV8X
8QWOGqvPdV0o9QOrEvqOKbtY44ETRVR5jkSeC+tRpeQZnRRD3RVBvbDTEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEQRn3R53jhex3TRvLzQuz+Q5T7MB8GA1UdIwQY
MBaAFBrWGlLxCC7PTJe1EitGESJQc0UbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81OWQ1NTUtMjBiZC00YzQyLTg0YmEt
NzJjZTk1YmE5YWZhLzEvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81OWQ1NTUtMjBiZC00YzQyLTg0YmEtNzJjZTk1YmE5YWZh
LzEvR3RZYVV2RUlMczlNbDdVU0swWVJJbEJ6UlJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXmcS1yI
Eia1YPXVYRUUAfbHyu95Akf/fkucf88k7cL1PTylOYNhv6sLjS7Ry1bACWD+qzLx
a7VKj88OMpxyyU5zFmXm7u4tiXzsjmBLbPGCwzcZkTLe7Llw2p84VoM8+zhlikBQ
Ad3G85INX6xez0e8Tqbj4HpqxpYvUFzU6F4IhZ50nZAIjX4R0yILa48t43IukUlu
Umbaq8zkQjRTfRwkhJYsoz9nrcHrVDOpC7JlzBFTmViJzPXuZXXab0D7RPq6pJuO
mhH62ZplzmUcNP1nOECD4cNa/UVXTdFUnP6xIDwZHUM7xJsI0F7Gi0oqSxhidyXM
tzsv0DE8j0kSFA==
-----END CERTIFICATE-----