Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
File:                     Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json)
Hash identifier:          5WR4u1qtbklmLGaLETjSCKQ0ayJIMglBG61NbShKDfI=
Subject key identifier:   F9:65:B3:4D:A7:23:15:E0:D7:6F:E8:AE:6A:EE:A3:AD:F0:4A:DF:AD
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Certificate issuer:       /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial:       01962F070C59DDFAB6394004A50A37FDB8E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
Manifest number:          0D2C
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: 1333qp73ruq7A2nSo9kOVQ7ZzE0.roa (hash: JX94IngnG5jgwt/Et193zGmN4IyvZ77gInsz4D23C18=)
                          2: 72ompPbzpmnzneIjTtp_bgxv8to.roa (hash: aazsmeYdXGvcDu68YTmlm+z5hJVBvjGJrpJeAcUoELg=)
                          3: 89lMNrhD2F5x0Ke_v2bBXPEQYgU.roa (hash: K5oebEL4UYGbpI6omznf50HWdMyeoL9B3ezd2prsxV4=)
                          4: E_3-qae-50qWA7R56c8VnNml0ZU.roa (hash: nkgMixGbN46lHgT97kcU8QjXRmEi7iabVPw78zf1uq4=)
                          5: EoqOLJZzdQ3i-M95BH6ZqX7Pq-o.roa (hash: a3yd5mlm4a54YbLPpH0dQXH+MNyJ+T7A5cQjTmvitXU=)
                          6: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: l4f/SBpal639RD7lsY5jfsy54TtceOvrWoby07Cm6Ds=)
                          7: J8otkOOOFhMQcKskyfSet45vpaA.roa (hash: OKOZ6+uREzTIvRtmYWOfCPq5FGMam+EbPwErDVD6eGc=)
                          8: dPBOUNuMluSVUVsbkWd3r_lebgU.roa (hash: pOELbtPhwT+Xz573ShVJg/36cMfG9CcY6YmD29hT1jk=)
                          9: h4WPx1Sgez5mjA1QOYWXTeKaf6I.roa (hash: j0LdK7x2Tf65HMuHIG0cj+mnli0iJ+gVK8H+vxjuT5g=)
                          10: m6IyPWEEbbAvvvSNw5JH6euTQ7A.roa (hash: 06SutFrXFPpCbXeexyGeEPlk43CPE0aY99qdVjAphr0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0c:59:dd:fa:b6:39:40:04:a5:0a:37:fd:b8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=f965b34da72315e0d76fe8ae6aeea3adf04adfad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:4e:62:5d:e1:82:f8:77:c4:71:28:81:24:
                    55:47:a6:33:75:cd:47:4b:b6:80:7a:09:3a:fc:69:
                    88:fd:be:59:00:19:8e:2c:52:e6:88:fb:6c:03:70:
                    f4:7d:f0:84:08:ac:f5:45:c1:d4:c8:6e:0f:3a:a6:
                    de:32:c1:9b:3e:06:7c:59:ba:f8:27:0d:51:16:86:
                    a6:00:ef:0c:dc:fc:7b:84:9a:2c:53:c3:5a:d1:f3:
                    8a:1c:e6:99:b3:1a:d1:31:88:50:05:71:9c:95:ee:
                    05:a9:c1:2b:fe:89:9d:da:6a:17:c0:64:86:28:c8:
                    42:25:7b:2a:30:29:88:42:8b:5d:bb:e4:21:c2:44:
                    c3:b8:01:83:a7:8d:29:70:4c:de:37:5e:4e:36:3f:
                    0f:21:de:a6:05:30:0a:62:dc:01:49:a0:d9:6d:06:
                    ff:cb:d8:09:59:21:0c:d1:23:4b:69:0d:73:ce:44:
                    94:68:af:ad:87:bc:76:68:7b:f3:bf:ec:bb:cc:ca:
                    a1:82:e8:e4:f6:9c:75:af:b7:87:de:b6:31:b8:3d:
                    00:a5:77:5f:68:09:b7:ed:8e:51:98:ef:da:60:aa:
                    3b:0b:39:d0:d4:9d:5a:4c:fc:bf:13:c3:0e:23:91:
                    88:62:b5:4e:46:bd:8c:37:89:fe:8e:c9:29:c2:d8:
                    39:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:65:B3:4D:A7:23:15:E0:D7:6F:E8:AE:6A:EE:A3:AD:F0:4A:DF:AD
            X509v3 Authority Key Identifier:
                keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:79:c1:c1:52:71:47:17:39:5a:eb:08:eb:a2:73:b2:bc:04:
         a4:91:eb:fd:16:ec:71:74:cd:a5:db:4f:32:7b:31:ba:8e:04:
         e3:8d:57:1d:da:a8:ab:7b:a8:ae:4f:48:cc:49:21:fc:c6:b5:
         e9:f4:b2:e0:29:0a:77:e8:28:e8:10:5a:5e:8f:96:82:e5:b7:
         c5:21:a8:e8:57:b6:c6:ce:dd:c8:70:3f:c9:cf:0f:08:aa:de:
         74:aa:10:d3:c9:a5:b3:04:e1:01:08:50:24:54:f7:57:80:79:
         c4:66:ef:1c:e6:99:ef:5f:e1:9f:55:6c:01:de:5a:f7:89:a7:
         d1:8b:10:dd:09:77:aa:50:07:fc:c3:a2:d0:c4:2d:f4:45:db:
         39:25:e1:cb:cf:ee:c1:d0:bc:4a:32:92:52:65:23:89:02:7a:
         e6:ce:f7:e9:c2:00:ac:cc:cc:b3:b6:89:27:7f:c2:b3:ec:a4:
         89:4f:b9:1f:ea:3c:54:08:42:02:4a:bd:97:c8:16:9e:1b:f3:
         ba:84:42:d2:bf:d3:6b:64:0a:05:95:2e:f9:2b:a8:52:92:13:
         2c:1c:82:02:f7:1c:f8:57:fd:79:81:16:26:1e:55:d5:8c:86:
         3c:9e:cf:91:83:3d:7b:b9:89:cb:10:4e:e1:81:32:cd:41:4b:
         06:f6:0c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBwxZ3fq2OUAEpQo3/bjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjUwNDEzMTIwMTUzWhcNMjUwNDE0MTIwMTUzWjAzMTEwLwYDVQQD
EyhmOTY1YjM0ZGE3MjMxNWUwZDc2ZmU4YWU2YWVlYTNhZGYwNGFkZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHBOYl3hgvh3xHEogSRVR6Yzdc1H
S7aAegk6/GmI/b5ZABmOLFLmiPtsA3D0ffCECKz1RcHUyG4POqbeMsGbPgZ8Wbr4
Jw1RFoamAO8M3Px7hJosU8Na0fOKHOaZsxrRMYhQBXGcle4FqcEr/omd2moXwGSG
KMhCJXsqMCmIQotdu+QhwkTDuAGDp40pcEzeN15ONj8PId6mBTAKYtwBSaDZbQb/
y9gJWSEM0SNLaQ1zzkSUaK+th7x2aHvzv+y7zMqhgujk9px1r7eH3rYxuD0ApXdf
aAm37Y5RmO/aYKo7CznQ1J1aTPy/E8MOI5GIYrVORr2MN4n+jskpwtg5lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlls02nIxXg12/ormruo63wSt+tMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHnBwVJx
Rxc5WusI66JzsrwEpJHr/RbscXTNpdtPMnsxuo4E441XHdqoq3uork9IzEkh/Ma1
6fSy4CkKd+go6BBaXo+WguW3xSGo6Fe2xs7dyHA/yc8PCKredKoQ08mlswThAQhQ
JFT3V4B5xGbvHOaZ71/hn1VsAd5a94mn0YsQ3Ql3qlAH/MOi0MQt9EXbOSXhy8/u
wdC8SjKSUmUjiQJ65s736cIArMzMs7aJJ3/Cs+ykiU+5H+o8VAhCAkq9l8gWnhvz
uoRC0r/Ta2QKBZUu+SuoUpITLByCAvcc+Ff9eYEWJh5V1YyGPJ7PkYM9e7mJyxBO
4YEyzUFLBvYMYQ==
-----END CERTIFICATE-----