Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
File:                     guRyorh_8WgtNi8N3kGOkxGsBGQ.mft (raw, json)
Hash identifier:          1b3OOnt+YZ3G3s90Kpx3PryxNZRTl905YpWfTZaHXGA=
Subject key identifier:   D2:76:6B:A5:40:4A:80:27:DA:47:80:7B:AA:08:2C:E4:4E:30:40:C8
Authority key identifier: 82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64
Certificate issuer:       /CN=82e472a2b87ff1682d362f0dde418e9311ac0464
Certificate serial:       01962E2AD7CFA3FA34A5F9568ED70D0A6337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft
Manifest number:          13D8
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: guRyorh_8WgtNi8N3kGOkxGsBGQ.crl (hash: fjDyNvc6VkQxze9xGApjGr7VmOZt3yt/KxhRJB1Svxk=)
                          2: wM-Q4PYw-g7L6gGW4qe1neIC43c.roa (hash: hm2k81ASEePQ7E1Ry4WD3zVSD28SUrbakN2SZMVNLMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d7:cf:a3:fa:34:a5:f9:56:8e:d7:0d:0a:63:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e472a2b87ff1682d362f0dde418e9311ac0464
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=d2766ba5404a8027da47807baa082ce44e3040c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:61:d8:13:56:37:87:6b:56:42:20:24:8f:
                    a3:20:2c:16:e7:c9:12:f1:a6:61:cb:79:e9:bb:d9:
                    a8:c0:63:77:57:b0:18:64:aa:13:8a:e3:74:7d:95:
                    53:f9:26:d4:0d:0e:70:09:2d:2b:29:7a:ec:fe:ec:
                    fc:61:51:df:89:d0:eb:d1:21:a4:77:e6:26:19:84:
                    38:66:ce:7f:c8:cd:17:90:72:6b:9a:5d:0f:53:58:
                    b7:6a:60:38:af:55:bf:5f:91:0d:8b:04:9c:3e:52:
                    61:53:ae:0f:ea:79:68:71:bf:4d:63:89:97:ca:40:
                    7c:71:43:ad:53:60:95:c5:54:3d:24:6c:5e:9b:d9:
                    0c:b0:24:9a:0b:60:4e:0f:af:a7:73:8f:88:f5:2b:
                    10:11:49:a1:e7:1a:cf:22:3c:2a:bc:78:e0:a2:fc:
                    76:0d:e9:92:b7:0c:27:ca:71:20:ff:bf:ee:dd:69:
                    e9:ed:be:da:b6:8f:d5:b0:7b:6d:ea:0a:95:c6:51:
                    2c:94:7b:d8:5d:44:a4:51:9f:1d:7b:b8:1a:03:0b:
                    e3:cd:2a:7a:36:2c:94:5b:f5:f3:be:f1:5e:ca:85:
                    d4:79:e0:7a:42:59:1a:09:f4:c9:3f:2f:9e:70:e6:
                    e4:4c:43:78:5d:25:79:59:fd:11:b2:16:bb:f7:b5:
                    8c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:76:6B:A5:40:4A:80:27:DA:47:80:7B:AA:08:2C:E4:4E:30:40:C8
            X509v3 Authority Key Identifier:
                keyid:82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:05:7b:0d:cb:eb:e3:54:8e:2b:97:1f:bb:b8:e5:a9:b2:5b:
         21:ce:d1:ce:6e:b6:c4:79:bd:15:d2:d1:84:9a:3a:ae:1c:fb:
         7b:96:80:22:5e:fb:88:a7:63:3a:49:7f:be:76:b0:03:99:fd:
         01:be:7c:80:cd:94:29:8a:1c:c7:17:4d:96:02:4a:4f:9e:ac:
         23:15:89:88:57:31:6f:5a:9b:7a:cf:2b:5a:ec:72:ee:2f:ea:
         62:ea:ad:c1:47:e5:79:67:4b:4f:c6:d9:df:c9:c2:5e:bf:ad:
         ff:3e:95:6a:f0:77:c3:3c:8d:24:dc:0e:9b:31:4c:b1:57:bd:
         16:70:bf:16:1b:24:f1:48:29:b1:f5:cc:c5:f8:9f:ec:73:68:
         ab:73:48:40:6d:2b:fc:2d:e6:23:5f:e8:65:5d:93:62:58:d8:
         f6:45:07:ae:8b:92:c0:96:8e:aa:94:e4:0a:45:b8:45:3f:ab:
         2e:9c:05:7d:73:42:96:af:53:72:b3:da:e7:35:13:1a:ae:03:
         6a:37:44:c9:58:53:02:34:c6:33:aa:99:3b:9c:9f:29:40:a2:
         33:18:6f:29:80:97:59:04:89:17:46:a3:b4:00:d0:64:a8:e7:
         a8:47:1c:72:48:c3:39:cf:b6:20:79:e4:2d:02:4a:01:70:4e:
         ba:4f:01:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtfPo/o0pflWjtcNCmM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTQ3MmEyYjg3ZmYxNjgyZDM2MmYwZGRlNDE4ZTkzMTFh
YzA0NjQwHhcNMjUwNDEzMDgwMTIxWhcNMjUwNDE0MDgwMTIxWjAzMTEwLwYDVQQD
EyhkMjc2NmJhNTQwNGE4MDI3ZGE0NzgwN2JhYTA4MmNlNDRlMzA0MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYlh2BNWN4drVkIgJI+jICwW58kS
8aZhy3npu9mowGN3V7AYZKoTiuN0fZVT+SbUDQ5wCS0rKXrs/uz8YVHfidDr0SGk
d+YmGYQ4Zs5/yM0XkHJrml0PU1i3amA4r1W/X5ENiwScPlJhU64P6nlocb9NY4mX
ykB8cUOtU2CVxVQ9JGxem9kMsCSaC2BOD6+nc4+I9SsQEUmh5xrPIjwqvHjgovx2
DemStwwnynEg/7/u3Wnp7b7ato/VsHtt6gqVxlEslHvYXUSkUZ8de7gaAwvjzSp6
NiyUW/XzvvFeyoXUeeB6QlkaCfTJPy+ecObkTEN4XSV5Wf0Rsha797WMKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJ2a6VASoAn2keAe6oILOROMEDIMB8GA1UdIwQY
MBaAFILkcqK4f/FoLTYvDd5BjpMRrARkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85MmI0ZDYtYjkyNC00YjMxLTk0ZDct
MjM2MTZjNzlhZTAyLzEvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85MmI0ZDYtYjkyNC00YjMxLTk0ZDctMjM2MTZjNzlhZTAy
LzEvZ3VSeW9yaF84V2d0Tmk4TjNrR09reEdzQkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQV7Dcvr
41SOK5cfu7jlqbJbIc7Rzm62xHm9FdLRhJo6rhz7e5aAIl77iKdjOkl/vnawA5n9
Ab58gM2UKYocxxdNlgJKT56sIxWJiFcxb1qbes8rWuxy7i/qYuqtwUfleWdLT8bZ
38nCXr+t/z6VavB3wzyNJNwOmzFMsVe9FnC/Fhsk8UgpsfXMxfif7HNoq3NIQG0r
/C3mI1/oZV2TYljY9kUHrouSwJaOqpTkCkW4RT+rLpwFfXNClq9TcrPa5zUTGq4D
ajdEyVhTAjTGM6qZO5yfKUCiMxhvKYCXWQSJF0ajtADQZKjnqEccckjDOc+2IHnk
LQJKAXBOuk8B0Q==
-----END CERTIFICATE-----