Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
File:                     GLbl-LQJfB26dKICIGFFk5_x4do.mft (raw, json)
Hash identifier:          hDdBcJciizsq6wUrkm1fQHAmT+uK5S534c2E+OJBsIA=
Subject key identifier:   06:73:9C:6B:21:FA:79:0B:B4:C5:20:94:89:C6:15:7A:61:EB:B1:5F
Authority key identifier: 18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA
Certificate issuer:       /CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
Certificate serial:       01962F3D771031CD41F9CAED485BB3890EB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: GLbl-LQJfB26dKICIGFFk5_x4do.crl (hash: CKBTS6lg47uKqO/VMmoSAOwSD2gV3jYA0fAC8dqRBwo=)
                          2: HBHAqT8jajsD1nwf_6k2IJVgvHo.roa (hash: Y84KjLE8NtO9vOG8nx25z9ZTKrfTK1iHhME9/Rj/s64=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:77:10:31:cd:41:f9:ca:ed:48:5b:b3:89:0e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18b6e5f8b4097c1dba74a202206145939ff1e1da
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=06739c6b21fa790bb4c5209489c6157a61ebb15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:b4:52:94:10:4e:1c:94:56:70:8e:b8:63:
                    48:6d:c5:ee:e1:ac:a7:dc:ad:c3:71:a9:88:dc:d5:
                    37:1a:0d:b7:a2:50:8f:aa:bc:17:e8:c3:e7:40:b9:
                    1f:bb:64:c1:38:0e:c8:4b:77:1f:b1:f7:eb:1e:1f:
                    83:05:3b:66:56:42:85:7e:d6:bd:f1:28:ac:9a:3b:
                    60:c7:43:3b:b3:83:bd:a7:51:d5:62:e8:99:51:cf:
                    24:00:64:04:00:3b:aa:07:1a:3e:04:25:65:22:ad:
                    cd:78:8c:df:c9:1b:a5:3c:c5:b1:8d:af:20:52:25:
                    80:aa:7e:b3:4a:c6:ea:90:0d:f7:3c:fa:f2:a5:b4:
                    d3:b1:7c:79:2b:42:74:02:2c:a6:11:c2:c8:23:b3:
                    77:c1:5e:53:83:27:38:ac:96:e2:48:ca:21:8e:ca:
                    77:32:46:ab:53:cc:0a:a2:0a:9d:36:50:d6:38:bc:
                    d8:f3:0d:8f:1c:b0:2c:a3:a1:e8:96:c6:28:10:eb:
                    4a:74:33:83:85:4d:24:16:fb:f6:64:27:2d:be:8c:
                    8b:11:9e:47:ad:15:94:2e:d0:e8:24:c9:ad:fb:77:
                    4d:c7:77:50:db:23:92:77:46:b9:40:68:14:b3:6d:
                    f8:1a:cc:02:05:54:3f:7d:52:cd:07:dc:bb:2c:f2:
                    23:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:73:9C:6B:21:FA:79:0B:B4:C5:20:94:89:C6:15:7A:61:EB:B1:5F
            X509v3 Authority Key Identifier:
                keyid:18:B6:E5:F8:B4:09:7C:1D:BA:74:A2:02:20:61:45:93:9F:F1:E1:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLbl-LQJfB26dKICIGFFk5_x4do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/73160d-1714-44f2-9be4-a7d4253b271f/1/GLbl-LQJfB26dKICIGFFk5_x4do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d5:22:82:4b:82:06:2a:eb:4f:51:07:3e:98:da:36:af:6e:
         c5:d4:bd:ac:bc:94:86:a0:c2:31:c1:20:e6:3d:96:f8:05:53:
         dd:b2:53:e7:a1:17:4c:7a:b0:76:c1:f7:cc:6c:e0:ce:38:e4:
         77:85:06:1f:fc:7f:f8:24:dd:75:b8:83:c3:63:e1:4d:76:96:
         b4:4b:34:99:56:5d:86:38:45:e5:b9:b3:f7:b0:d0:8f:3e:12:
         6f:0b:ae:79:47:0e:f7:4f:ff:7d:1a:10:9b:b1:b1:4d:20:12:
         9b:16:86:88:04:2e:10:f1:77:4a:f3:c3:d2:b6:88:41:ec:96:
         cb:76:2a:ac:50:b2:5e:ab:1b:bc:bd:a5:52:1e:fc:de:20:09:
         1c:58:34:0d:a2:7a:d8:a6:ef:8a:2e:20:91:09:d5:f7:26:72:
         5c:ce:b5:c2:fc:0b:f2:25:f5:5c:58:7a:dc:1e:af:4c:b9:d1:
         d7:14:ee:42:cf:58:5e:13:5b:38:69:d4:f1:0f:24:87:bc:d5:
         3f:7f:52:8f:f5:0e:08:f2:c7:39:31:be:cc:49:dd:c1:38:17:
         dc:df:20:8c:6c:2d:b6:dd:30:1b:7d:1d:6b:03:01:66:5b:d1:
         2e:99:3e:d1:82:0d:d9:3a:e2:b8:fe:31:9b:37:d2:64:af:6c:
         2c:66:84:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXcQMc1B+crtSFuziQ64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YjZlNWY4YjQwOTdjMWRiYTc0YTIwMjIwNjE0NTkzOWZm
MWUxZGEwHhcNMjUwNDEzMTMwMTE5WhcNMjUwNDE0MTMwMTE5WjAzMTEwLwYDVQQD
EygwNjczOWM2YjIxZmE3OTBiYjRjNTIwOTQ4OWM2MTU3YTYxZWJiMTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvu0UpQQThyUVnCOuGNIbcXu4ayn
3K3DcamI3NU3Gg23olCPqrwX6MPnQLkfu2TBOA7IS3cfsffrHh+DBTtmVkKFfta9
8Sismjtgx0M7s4O9p1HVYuiZUc8kAGQEADuqBxo+BCVlIq3NeIzfyRulPMWxja8g
UiWAqn6zSsbqkA33PPrypbTTsXx5K0J0AiymEcLII7N3wV5Tgyc4rJbiSMohjsp3
MkarU8wKogqdNlDWOLzY8w2PHLAso6HolsYoEOtKdDODhU0kFvv2ZCctvoyLEZ5H
rRWULtDoJMmt+3dNx3dQ2yOSd0a5QGgUs234GswCBVQ/fVLNB9y7LPIjAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZznGsh+nkLtMUglInGFXph67FfMB8GA1UdIwQY
MBaAFBi25fi0CXwdunSiAiBhRZOf8eHaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83MzE2MGQtMTcxNC00NGYyLTliZTQt
YTdkNDI1M2IyNzFmLzEvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83MzE2MGQtMTcxNC00NGYyLTliZTQtYTdkNDI1M2IyNzFm
LzEvR0xibC1MUUpmQjI2ZEtJQ0lHRkZrNV94NGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdUigkuC
BirrT1EHPpjaNq9uxdS9rLyUhqDCMcEg5j2W+AVT3bJT56EXTHqwdsH3zGzgzjjk
d4UGH/x/+CTddbiDw2PhTXaWtEs0mVZdhjhF5bmz97DQjz4SbwuueUcO90//fRoQ
m7GxTSASmxaGiAQuEPF3SvPD0raIQeyWy3YqrFCyXqsbvL2lUh783iAJHFg0DaJ6
2Kbvii4gkQnV9yZyXM61wvwL8iX1XFh63B6vTLnR1xTuQs9YXhNbOGnU8Q8kh7zV
P39Sj/UOCPLHOTG+zEndwTgX3N8gjGwttt0wG30dawMBZlvRLpk+0YIN2TriuP4x
mzfSZK9sLGaE6g==
-----END CERTIFICATE-----