Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File:                     G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier:          rVLPTP4RLrFvxiwE/+QCDGbniUdoby1XfOiHNFYOlqQ=
Subject key identifier:   93:B5:B6:7B:FA:FC:1A:7F:55:FC:AA:4C:1F:6B:BF:48:00:A9:4B:96
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer:       /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial:       01962E61FFDC304978B79B44BA5E4055FEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: WEG93pbsKdDuqJTe6KiRQHDW1jCVdbywOvpSsnOpNow=)
                          2: xIsbgd-1jNIqLfaxvWsXTolM4hw.roa (hash: IbSWm3FdPDBzLYRsZr3IBY9SNHNxrtPl7LMS9I121XU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ff:dc:30:49:78:b7:9b:44:ba:5e:40:55:fe:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=93b5b67bfafc1a7f55fcaa4c1f6bbf4800a94b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:e8:a2:0e:b2:2e:60:a0:4a:0d:0f:a7:da:
                    d1:65:b6:cd:80:e9:b2:e9:d0:76:b6:3c:52:9d:38:
                    c3:9f:68:28:5c:37:1b:cd:45:8f:95:44:cf:8c:a2:
                    2d:50:47:7d:11:cb:54:35:35:44:f8:29:64:b2:eb:
                    e4:e4:38:69:ba:e4:47:88:e4:89:85:b6:5a:52:d1:
                    c3:8d:b3:50:68:c2:04:55:85:c8:fd:f1:73:67:e9:
                    90:ef:cf:23:3d:d7:fe:8d:06:18:3a:88:e3:8c:13:
                    46:3f:bf:be:7e:66:21:8f:b1:10:53:a9:fd:31:78:
                    75:26:2a:d3:4e:42:d2:a3:7e:f4:69:ae:af:19:3f:
                    33:4c:d6:c6:6f:de:7f:fc:f6:16:0e:bc:39:6f:ed:
                    8a:30:ef:3c:41:f6:5b:d9:b3:af:63:ce:92:9f:d1:
                    d2:47:f0:a3:eb:3d:37:ab:e8:61:fc:c4:ab:02:a2:
                    70:fb:27:90:31:4f:32:fa:17:41:d1:7d:fe:86:49:
                    37:2a:82:03:3e:5f:d3:e4:a2:41:16:93:5e:c3:f1:
                    44:ee:74:a3:1d:26:c4:f3:40:0f:63:aa:df:32:79:
                    91:bc:ad:43:06:88:e7:23:1b:c9:f6:a2:c1:69:6a:
                    59:58:f0:38:d6:6d:a7:2f:08:85:39:2f:3c:6e:d7:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B5:B6:7B:FA:FC:1A:7F:55:FC:AA:4C:1F:6B:BF:48:00:A9:4B:96
            X509v3 Authority Key Identifier:
                keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:26:b1:0e:65:12:d3:5e:f0:f9:99:c5:97:6a:0a:4a:64:78:
         54:fe:4e:3c:c1:31:15:cb:dd:7c:09:3a:e5:27:58:f9:66:d6:
         25:eb:2c:75:87:c5:b4:61:5d:74:f6:83:7b:0e:1a:a7:73:0d:
         35:35:6d:d7:ee:e5:32:7c:72:80:94:20:69:7f:a0:1e:38:c2:
         1d:44:a6:de:31:df:31:db:f7:30:06:85:ea:64:98:a6:23:87:
         11:3f:1a:a7:97:7d:ed:0b:20:fb:c2:18:fe:52:f5:f5:2c:e3:
         71:ed:bc:80:0b:ca:00:3a:d6:16:76:80:0d:2e:77:50:d7:a6:
         24:c0:78:a7:91:3b:b7:7e:d0:8c:3a:c8:62:7c:06:b7:c0:6d:
         98:ea:ea:5b:09:08:ae:e0:18:4b:50:91:2c:3c:71:dc:d2:f1:
         38:d6:24:62:15:2f:c0:51:4b:05:83:23:80:d8:06:e1:7e:6d:
         03:8e:ee:d3:32:f2:4d:f3:4b:48:16:87:cc:ed:11:30:5b:2d:
         e8:62:31:db:18:ff:c4:24:89:be:47:bf:e2:b8:1e:b2:12:c3:
         17:0d:cc:42:9e:7d:3f:8f:a7:c7:63:b1:98:43:2d:57:a5:88:
         67:fe:19:72:2a:3b:06:bf:b3:95:0f:7c:35:96:fc:0a:5f:15:
         05:a9:e1:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYf/cMEl4t5tEul5AVf6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZGJjNDExNDQ0NDgwNjUzMTNlZjBiODJlMWNjZjdhZTZl
YTU3MjAwHhcNMjUwNDEzMDkwMTM2WhcNMjUwNDE0MDkwMTM2WjAzMTEwLwYDVQQD
Eyg5M2I1YjY3YmZhZmMxYTdmNTVmY2FhNGMxZjZiYmY0ODAwYTk0Yjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm3oog6yLmCgSg0Pp9rRZbbNgOmy
6dB2tjxSnTjDn2goXDcbzUWPlUTPjKItUEd9EctUNTVE+Clksuvk5DhpuuRHiOSJ
hbZaUtHDjbNQaMIEVYXI/fFzZ+mQ788jPdf+jQYYOojjjBNGP7++fmYhj7EQU6n9
MXh1JirTTkLSo370aa6vGT8zTNbGb95//PYWDrw5b+2KMO88QfZb2bOvY86Sn9HS
R/Cj6z03q+hh/MSrAqJw+yeQMU8y+hdB0X3+hkk3KoIDPl/T5KJBFpNew/FE7nSj
HSbE80APY6rfMnmRvK1DBojnIxvJ9qLBaWpZWPA41m2nLwiFOS88btedVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO1tnv6/Bp/VfyqTB9rv0gAqUuWMB8GA1UdIwQY
MBaAFBvbxBFERIBlMT7wuC4cz3rm6lcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODct
YmQ5OGIzZTkwZTQzLzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80YTI5M2ItNGM0MS00MjhjLTkyODctYmQ5OGIzZTkwZTQz
LzEvRzl2RUVVUkVnR1V4UHZDNExoelBldWJxVnlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSaxDmUS
017w+ZnFl2oKSmR4VP5OPMExFcvdfAk65SdY+WbWJessdYfFtGFddPaDew4ap3MN
NTVt1+7lMnxygJQgaX+gHjjCHUSm3jHfMdv3MAaF6mSYpiOHET8ap5d97Qsg+8IY
/lL19Szjce28gAvKADrWFnaADS53UNemJMB4p5E7t37QjDrIYnwGt8BtmOrqWwkI
ruAYS1CRLDxx3NLxONYkYhUvwFFLBYMjgNgG4X5tA47u0zLyTfNLSBaHzO0RMFst
6GIx2xj/xCSJvke/4rgeshLDFw3MQp59P4+nx2OxmEMtV6WIZ/4Zcio7Br+zlQ98
NZb8Cl8VBanh6g==
-----END CERTIFICATE-----