Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
File:                     FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft (raw, json)
Hash identifier:          VVRBOUWpQE5k27jL2dY0KpVUPc2G8xrL6LpVuRpCXeo=
Subject key identifier:   A6:16:8D:4E:F3:3F:53:78:1E:96:26:3D:8B:C7:B3:94:19:09:C6:9A
Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A
Certificate issuer:       /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
Certificate serial:       01962F06C9F461FD5F36827997CCDCC25419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft
Manifest number:          08E2
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: C5kS-eXFEoRGhSGKrj1aky_A-YU.roa (hash: 0Cexvh0L+qwpqym6REc7bvetIUnS6MiKORaDRSgSxQo=)
                          2: FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl (hash: ymBPOMAI0n/4miRc6ZN57xPH0Sr+9ptr8PimcjuU+ag=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c9:f4:61:fd:5f:36:82:79:97:cc:dc:c2:54:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=a6168d4ef33f53781e96263d8bc7b3941909c69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:23:09:5a:c0:e7:b7:c4:b2:a2:c9:2d:9c:
                    b3:63:9a:44:f9:d1:af:b4:ef:4b:00:62:bd:75:94:
                    5a:63:99:f7:12:89:b3:b5:73:41:01:49:53:4b:63:
                    d9:72:5d:36:1b:f0:98:3c:89:4f:c0:3b:90:0e:c1:
                    25:ee:3b:1d:17:40:42:dd:7f:ba:2c:04:36:9e:f3:
                    d2:8a:95:8e:d2:a1:24:ba:05:f7:47:2d:4f:eb:82:
                    bc:03:bb:ba:fc:9c:f7:f0:04:8a:bf:8c:34:8a:22:
                    1e:61:b1:1c:9a:d9:be:5c:d1:fb:09:90:8d:4d:4e:
                    7a:1d:13:c9:4d:fa:f6:38:8b:45:40:d8:6d:a2:b3:
                    7e:ec:3f:67:4c:15:af:08:58:95:4f:14:8f:ad:9f:
                    7a:84:ca:96:f5:40:33:91:74:1a:f0:e0:c9:51:1c:
                    03:43:d4:3d:9c:a3:fd:d2:49:24:e4:f6:65:7e:82:
                    96:ed:07:81:1e:a4:5f:a1:d0:ba:4a:c7:33:54:82:
                    d9:f6:c7:17:93:b1:57:34:45:ca:ca:d5:d4:68:6b:
                    eb:a4:28:26:9e:38:18:40:98:41:52:a6:52:95:7d:
                    c4:95:c2:5d:2c:20:d6:4a:5e:40:17:6c:5d:a2:7b:
                    a4:1f:88:56:39:38:86:b1:8b:1a:8e:93:7d:fe:cb:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:16:8D:4E:F3:3F:53:78:1E:96:26:3D:8B:C7:B3:94:19:09:C6:9A
            X509v3 Authority Key Identifier:
                keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e2:a1:c4:7d:d9:d4:2d:90:af:41:9e:c7:7a:b1:e7:9b:de:
         22:70:44:d9:bf:1e:3d:57:f3:0b:d1:a6:a8:10:57:b9:09:43:
         dd:a7:7e:9b:29:30:22:ec:14:1b:5c:d1:0f:39:13:bc:51:81:
         fb:4d:0e:9c:89:6f:78:76:59:c4:23:88:e0:6e:47:42:b8:ab:
         c6:c6:e3:bd:83:a3:89:17:92:27:bb:d1:d9:84:e9:a1:37:fd:
         84:df:48:81:e6:20:a7:a8:61:3f:ed:fd:61:34:ed:8f:08:bc:
         f8:83:0d:aa:57:b9:05:78:e4:ea:20:c7:81:51:c3:0e:c8:49:
         04:86:c7:f4:4c:e5:dc:d4:d0:d4:bc:1c:70:14:71:bf:c4:c2:
         fd:59:53:b2:71:76:0c:64:c0:87:3c:a4:f1:29:23:43:48:c5:
         7a:23:9c:18:5c:1e:f2:9a:9a:88:74:cb:19:f7:f2:d5:21:b1:
         6e:b5:a6:a9:f2:d4:bf:e8:8a:b1:69:b4:0e:8d:47:92:35:2d:
         59:53:00:3c:50:90:14:dc:48:36:ef:cd:6d:67:e3:45:04:36:
         77:fe:94:c1:55:d5:89:04:3c:aa:5b:13:06:94:a6:e0:4d:83:
         2f:4f:a1:4e:77:83:09:f0:af:36:a0:72:d0:94:ad:a0:15:ad:
         be:09:a1:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsn0Yf1fNoJ5l8zcwlQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NjJhNDk3ZWZlMGJjOTJiN2VkOTI1MjllYmJlMzljYjE5
ZDMzMGEwHhcNMjUwNDEzMTIwMTM2WhcNMjUwNDE0MTIwMTM2WjAzMTEwLwYDVQQD
EyhhNjE2OGQ0ZWYzM2Y1Mzc4MWU5NjI2M2Q4YmM3YjM5NDE5MDljNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbsjCVrA57fEsqLJLZyzY5pE+dGv
tO9LAGK9dZRaY5n3EomztXNBAUlTS2PZcl02G/CYPIlPwDuQDsEl7jsdF0BC3X+6
LAQ2nvPSipWO0qEkugX3Ry1P64K8A7u6/Jz38ASKv4w0iiIeYbEcmtm+XNH7CZCN
TU56HRPJTfr2OItFQNhtorN+7D9nTBWvCFiVTxSPrZ96hMqW9UAzkXQa8ODJURwD
Q9Q9nKP90kkk5PZlfoKW7QeBHqRfodC6SsczVILZ9scXk7FXNEXKytXUaGvrpCgm
njgYQJhBUqZSlX3ElcJdLCDWSl5AF2xdonukH4hWOTiGsYsajpN9/st2QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYWjU7zP1N4HpYmPYvHs5QZCcaaMB8GA1UdIwQY
MBaAFBRipJfv4LySt+2SUp6745yxnTMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iZTExNzEtMTIwMi00ZGY4LThjMzAt
ZDM2OTM1ZWJjNmFkLzEvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iZTExNzEtMTIwMi00ZGY4LThjMzAtZDM2OTM1ZWJjNmFk
LzEvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt+KhxH3Z
1C2Qr0Gex3qx55veInBE2b8ePVfzC9GmqBBXuQlD3ad+mykwIuwUG1zRDzkTvFGB
+00OnIlveHZZxCOI4G5HQrirxsbjvYOjiReSJ7vR2YTpoTf9hN9IgeYgp6hhP+39
YTTtjwi8+IMNqle5BXjk6iDHgVHDDshJBIbH9Ezl3NTQ1LwccBRxv8TC/VlTsnF2
DGTAhzyk8SkjQ0jFeiOcGFwe8pqaiHTLGffy1SGxbrWmqfLUv+iKsWm0Do1HkjUt
WVMAPFCQFNxINu/NbWfjRQQ2d/6UwVXViQQ8qlsTBpSm4E2DL0+hTneDCfCvNqBy
0JStoBWtvgmhRw==
-----END CERTIFICATE-----