Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
File:                     Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft (raw, json)
Hash identifier:          nT82AnXC3v/b/IdLgbm7vRyIdUcHtxAr/dqhW+/yQJo=
Subject key identifier:   2B:E9:5A:71:14:52:D6:6C:8F:65:C7:A4:A7:11:3D:B2:56:F9:20:42
Authority key identifier: 1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD
Certificate issuer:       /CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
Certificate serial:       01962F069E5B4530215BF121B1EFD4F77239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft
Manifest number:          0A6F
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: 4PVveBGxN8n2WuGPtmITlLn0GtI.roa (hash: cfEtfn0zg7NHGmh50mHK7LzfG79rGcilgz9AnPpzS50=)
                          2: Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl (hash: jMm62FfyU+lAqesgp3CHzP/qx8C0zk/uQvLmIMIduFM=)
                          3: eIp7-TA74OpVMqMjgyn5rozHch0.roa (hash: Vk4popoaDrWGjozep9hzWTbs+ZYNrWhKKEtSBoEkXJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9e:5b:45:30:21:5b:f1:21:b1:ef:d4:f7:72:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a1d2154b9324efb39ca38ba1931ba5dfb59e8fd
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=2be95a711452d66c8f65c7a4a7113db256f92042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:b7:a9:90:ed:9b:65:9b:51:11:43:d9:93:
                    d9:ff:6e:79:47:4c:9a:b0:a6:6c:6e:cb:e7:d0:17:
                    f9:2b:62:22:28:fd:4d:64:b6:01:fc:98:71:32:c5:
                    b2:49:eb:ca:ec:18:6a:96:e3:bc:a5:4f:ef:b9:c7:
                    8f:b4:c7:2c:a4:fd:f7:44:c7:db:ef:61:1e:f6:ce:
                    08:1e:37:c8:6e:fd:33:58:47:7f:55:7e:7b:41:2b:
                    ea:63:0c:d1:3d:33:d7:8e:c3:68:47:d7:c4:9e:23:
                    0d:92:4d:eb:0e:8f:7d:82:41:c7:34:0d:96:86:f3:
                    c1:53:57:ef:4f:10:a3:77:19:d5:56:1b:c7:5e:bf:
                    35:ed:a8:88:c3:f8:63:e9:d2:39:df:9b:9a:5b:e3:
                    e6:f0:7e:8c:f3:10:0c:73:f9:8a:e7:f0:ca:f7:ce:
                    0e:73:e5:53:50:40:de:7f:c6:2a:11:a3:bc:0c:d2:
                    81:63:64:d4:bd:9b:6a:dc:69:0b:70:4e:21:5e:3c:
                    5e:d3:2b:5d:da:2c:2f:b8:f0:37:d9:5f:e8:bb:48:
                    d5:ff:98:e9:16:a0:fe:00:c5:38:cf:ce:1d:28:b6:
                    c4:8d:74:cc:d3:f5:8b:9e:b6:12:9f:9f:71:8b:06:
                    92:4a:6d:b6:76:2c:01:c9:c2:97:0a:f5:62:41:50:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E9:5A:71:14:52:D6:6C:8F:65:C7:A4:A7:11:3D:B2:56:F9:20:42
            X509v3 Authority Key Identifier:
                keyid:1A:1D:21:54:B9:32:4E:FB:39:CA:38:BA:19:31:BA:5D:FB:59:E8:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gh0hVLkyTvs5yji6GTG6XftZ6P0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/60f623-ed79-4030-8980-8901b052b86b/1/Gh0hVLkyTvs5yji6GTG6XftZ6P0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:8e:9b:d3:b9:e7:b8:e6:90:68:4d:7e:57:68:4f:e3:a9:5d:
         40:62:81:19:07:63:f8:69:b9:6a:6d:c7:24:84:34:81:1b:f0:
         ad:21:cf:fb:7c:75:44:57:bc:8d:f0:33:88:da:66:55:31:b4:
         a5:b3:29:da:f3:eb:c0:47:d4:33:59:d9:a5:1e:6e:de:af:c9:
         77:b3:cf:9e:4b:26:8e:36:28:36:f7:b9:69:ed:e5:44:a8:67:
         aa:ce:6f:57:10:de:8d:f4:0d:4a:9d:91:1a:d9:43:dd:5e:ea:
         e2:a5:01:6d:40:92:66:88:24:62:1c:2c:0b:b8:75:ca:b0:f8:
         d8:03:7b:49:49:3b:0d:2d:05:6d:65:1f:92:ad:dd:9f:53:3c:
         7e:7e:8e:b1:99:5b:21:a6:2c:e5:18:ee:31:de:f5:2b:c0:f3:
         a5:ae:00:54:03:fa:06:a7:c8:7d:bd:99:6e:8e:d8:0c:df:f6:
         03:23:41:01:af:4f:c7:84:41:8c:86:7b:55:00:9e:2c:42:33:
         8e:f3:e6:33:98:dc:fb:09:0c:0b:01:c9:81:ca:5e:e6:f9:3b:
         b8:6e:c7:4f:48:e3:b4:ae:5d:b2:62:a3:e1:63:7f:4d:67:7f:
         a2:27:2e:84:23:5f:9d:19:e8:ee:da:a0:c2:a1:0f:5a:29:95:
         8b:e0:3c:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBp5bRTAhW/Ehse/U93I5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMWQyMTU0YjkzMjRlZmIzOWNhMzhiYTE5MzFiYTVkZmI1
OWU4ZmQwHhcNMjUwNDEzMTIwMTI0WhcNMjUwNDE0MTIwMTI0WjAzMTEwLwYDVQQD
EygyYmU5NWE3MTE0NTJkNjZjOGY2NWM3YTRhNzExM2RiMjU2ZjkyMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Fm3qZDtm2WbURFD2ZPZ/255R0ya
sKZsbsvn0Bf5K2IiKP1NZLYB/JhxMsWySevK7BhqluO8pU/vucePtMcspP33RMfb
72Ee9s4IHjfIbv0zWEd/VX57QSvqYwzRPTPXjsNoR9fEniMNkk3rDo99gkHHNA2W
hvPBU1fvTxCjdxnVVhvHXr817aiIw/hj6dI535uaW+Pm8H6M8xAMc/mK5/DK984O
c+VTUEDef8YqEaO8DNKBY2TUvZtq3GkLcE4hXjxe0ytd2iwvuPA32V/ou0jV/5jp
FqD+AMU4z84dKLbEjXTM0/WLnrYSn59xiwaSSm22diwBycKXCvViQVBycwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvpWnEUUtZsj2XHpKcRPbJW+SBCMB8GA1UdIwQY
MBaAFBodIVS5Mk77Oco4uhkxul37Wej9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAt
ODkwMWIwNTJiODZiLzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82MGY2MjMtZWQ3OS00MDMwLTg5ODAtODkwMWIwNTJiODZi
LzEvR2gwaFZMa3lUdnM1eWppNkdURzZYZnRaNlAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAro6b07nn
uOaQaE1+V2hP46ldQGKBGQdj+Gm5am3HJIQ0gRvwrSHP+3x1RFe8jfAziNpmVTG0
pbMp2vPrwEfUM1nZpR5u3q/Jd7PPnksmjjYoNve5ae3lRKhnqs5vVxDejfQNSp2R
GtlD3V7q4qUBbUCSZogkYhwsC7h1yrD42AN7SUk7DS0FbWUfkq3dn1M8fn6OsZlb
IaYs5RjuMd71K8Dzpa4AVAP6BqfIfb2Zbo7YDN/2AyNBAa9Px4RBjIZ7VQCeLEIz
jvPmM5jc+wkMCwHJgcpe5vk7uG7HT0jjtK5dsmKj4WN/TWd/oicuhCNfnRno7tqg
wqEPWimVi+A8pA==
-----END CERTIFICATE-----