Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
File:                     guItqb8KdBce67TNmPwl8wQa3S8.mft (raw, json)
Hash identifier:          euPtANqgq1pztiPrqq2yCuKW5t9Jib+2vr6m6zl2sLE=
Subject key identifier:   04:3B:98:F4:96:30:F7:2D:C0:E8:E9:11:70:FE:BC:07:02:BF:0B:59
Authority key identifier: 82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F
Certificate issuer:       /CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
Certificate serial:       01962E994D4A170A2B0C953F474E5C087762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: guItqb8KdBce67TNmPwl8wQa3S8.crl (hash: dsdo9gfMKum/+TGSiNZU+vyxUI6mNt4P+BV3Yc6mSjc=)
                          2: st7UugSXha_zumczLwSMs_JMMGo.roa (hash: zW6BjWFPz0O6Tl0aYcPhSf3EE25VQRz5yPeKPIedYY8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4d:4a:17:0a:2b:0c:95:3f:47:4e:5c:08:77:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e22da9bf0a74171eebb4cd98fc25f3041add2f
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=043b98f49630f72dc0e8e91170febc0702bf0b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:43:3c:fd:71:c2:fd:65:24:f9:81:75:97:
                    bd:ef:4c:9d:be:a8:11:22:a8:f1:9f:12:6c:09:ed:
                    93:92:e5:0e:29:c3:7e:4a:33:e8:ba:87:c3:c9:74:
                    63:a5:d8:31:7f:2a:79:3d:46:7a:89:7e:55:91:0d:
                    3e:8c:88:f4:bb:c7:b7:de:8c:dc:98:fc:ea:78:79:
                    bd:3c:6b:1f:f9:2e:0e:65:62:f2:db:8c:75:b6:69:
                    61:0f:5e:ec:ca:42:05:bc:9e:66:f2:29:d3:43:1a:
                    60:00:6a:6d:f7:b4:4f:31:f2:6e:42:7d:2f:b3:29:
                    6e:d9:1a:9f:5d:eb:29:d1:71:85:b0:f5:9b:12:f6:
                    dc:41:90:7e:44:b0:77:6c:96:06:2e:6d:b2:2c:ca:
                    33:fd:33:54:44:4e:ed:6f:3b:b6:fa:a7:90:4e:ca:
                    8b:bb:8c:eb:9e:a2:0e:9c:b7:1a:f4:70:06:51:36:
                    c6:d4:30:5c:9c:55:dd:5c:25:e8:ac:bb:da:87:c4:
                    a8:2f:ea:07:dc:f6:c4:b1:f0:35:34:76:91:29:0f:
                    65:fb:95:1a:18:0e:c3:64:66:0c:63:0d:c6:6e:f9:
                    01:8b:56:cd:4f:13:0d:41:8a:24:2f:62:b8:b3:ce:
                    e9:ad:5a:79:9f:5e:99:f7:86:5c:74:ea:bd:79:6e:
                    4c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3B:98:F4:96:30:F7:2D:C0:E8:E9:11:70:FE:BC:07:02:BF:0B:59
            X509v3 Authority Key Identifier:
                keyid:82:E2:2D:A9:BF:0A:74:17:1E:EB:B4:CD:98:FC:25:F3:04:1A:DD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guItqb8KdBce67TNmPwl8wQa3S8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a89b3c-972c-4bee-80f2-5c2919da8df3/1/guItqb8KdBce67TNmPwl8wQa3S8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:49:b5:97:6b:8c:29:aa:8a:36:00:70:a1:f2:b0:85:da:0d:
         fb:6b:23:4e:ac:b1:cf:ab:e2:f8:d7:85:4f:36:e1:b7:ec:12:
         92:f6:5b:c9:21:1e:04:fc:c2:cf:d4:05:43:98:b6:c7:e8:90:
         63:33:b8:b0:2d:6a:af:d3:a9:08:a7:67:4b:4e:80:f1:23:fc:
         0d:24:77:dc:9d:d8:ac:60:3a:d6:b1:b7:09:fc:a7:4e:66:a7:
         49:27:9f:7c:6e:88:48:39:02:79:f1:ba:10:5c:fa:38:10:92:
         ae:16:de:46:0a:26:f9:22:8e:f8:a2:31:b5:eb:22:9a:98:ab:
         fa:76:92:6b:77:ac:4a:bd:20:d7:a2:2d:cf:3c:b8:4c:a7:fa:
         ea:f9:22:5d:4b:ca:0b:3e:7b:0a:07:2b:a7:21:69:4e:8b:bf:
         47:a5:18:68:87:0a:4e:a9:c8:96:8f:6c:c4:c8:25:89:9b:22:
         18:d7:35:d2:09:d5:92:38:d1:36:31:52:81:69:69:f3:9e:b1:
         6f:02:d3:e5:51:10:ae:31:5e:fe:db:86:dc:ff:34:fa:1a:d2:
         8b:84:99:12:1b:f6:95:d3:f1:03:8f:6e:ee:d3:6c:df:8b:65:
         24:38:84:96:95:0a:6d:93:21:de:98:fd:4e:2d:df:b8:04:b3:
         c3:de:e5:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumU1KFworDJU/R05cCHdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZTIyZGE5YmYwYTc0MTcxZWViYjRjZDk4ZmMyNWYzMDQx
YWRkMmYwHhcNMjUwNDEzMTAwMjAwWhcNMjUwNDE0MTAwMjAwWjAzMTEwLwYDVQQD
EygwNDNiOThmNDk2MzBmNzJkYzBlOGU5MTE3MGZlYmMwNzAyYmYwYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bBDPP1xwv1lJPmBdZe970ydvqgR
IqjxnxJsCe2TkuUOKcN+SjPouofDyXRjpdgxfyp5PUZ6iX5VkQ0+jIj0u8e33ozc
mPzqeHm9PGsf+S4OZWLy24x1tmlhD17sykIFvJ5m8inTQxpgAGpt97RPMfJuQn0v
sylu2RqfXesp0XGFsPWbEvbcQZB+RLB3bJYGLm2yLMoz/TNURE7tbzu2+qeQTsqL
u4zrnqIOnLca9HAGUTbG1DBcnFXdXCXorLvah8SoL+oH3PbEsfA1NHaRKQ9l+5Ua
GA7DZGYMYw3GbvkBi1bNTxMNQYokL2K4s87prVp5n16Z94ZcdOq9eW5MjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ7mPSWMPctwOjpEXD+vAcCvwtZMB8GA1UdIwQY
MBaAFILiLam/CnQXHuu0zZj8JfMEGt0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjIt
NWMyOTE5ZGE4ZGYzLzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hODliM2MtOTcyYy00YmVlLTgwZjItNWMyOTE5ZGE4ZGYz
LzEvZ3VJdHFiOEtkQmNlNjdUTm1Qd2w4d1FhM1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUm1l2uM
KaqKNgBwofKwhdoN+2sjTqyxz6vi+NeFTzbht+wSkvZbySEeBPzCz9QFQ5i2x+iQ
YzO4sC1qr9OpCKdnS06A8SP8DSR33J3YrGA61rG3CfynTmanSSeffG6ISDkCefG6
EFz6OBCSrhbeRgom+SKO+KIxtesimpir+naSa3esSr0g16Itzzy4TKf66vkiXUvK
Cz57CgcrpyFpTou/R6UYaIcKTqnIlo9sxMgliZsiGNc10gnVkjjRNjFSgWlp856x
bwLT5VEQrjFe/tuG3P80+hrSi4SZEhv2ldPxA49u7tNs34tlJDiElpUKbZMh3pj9
Ti3fuASzw97llQ==
-----END CERTIFICATE-----