Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File:                     GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier:          X1HkIXjB0lMZpYFaOW0bUd/2gPKLNITAizWCIVLdwuM=
Subject key identifier:   16:DF:1F:BF:75:BF:92:1C:7C:4F:5D:8C:F0:2C:D6:4D:2C:CE:B2:9D
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer:       /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial:       01962F3D497808895620EEE71F10B411DFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: S+ErtrF9A+ad3NdOX5aOO5bk0MaJbzuMne5b42NyVFM=)
                          2: MG8GkG1guL2JPQamlCCVL0WmXAU.roa (hash: zOqvBBG8dg13+yUZPiGoLbhSAZEkww5TYWxAzF0vCsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:49:78:08:89:56:20:ee:e7:1f:10:b4:11:df:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=16df1fbf75bf921c7c4f5d8cf02cd64d2cceb29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:28:45:dc:70:05:95:d2:d8:87:21:2c:78:
                    c4:40:75:c2:3a:ea:98:93:12:ea:0e:1b:da:18:b1:
                    07:fe:4c:10:82:ae:e0:40:f5:b6:7c:6e:f0:89:30:
                    27:0e:3c:e9:15:6d:db:7d:92:a2:79:61:63:e0:c2:
                    f9:30:55:9c:1b:1f:7a:b4:fc:c5:68:ea:f8:69:4f:
                    d3:ee:10:59:f6:1c:66:8e:89:07:4e:5a:5a:69:39:
                    25:e2:e2:9c:2d:02:d8:de:37:07:da:e1:44:c5:09:
                    91:80:20:76:f1:08:20:df:e3:ee:7c:cc:d8:19:6e:
                    30:79:32:58:78:eb:35:9c:40:b4:51:23:87:2c:e1:
                    96:a7:e9:02:6c:45:fc:2b:12:43:3b:7b:7c:67:f1:
                    21:4d:95:3f:8e:2e:3a:e4:46:67:0d:2c:ff:c5:3a:
                    46:2d:9f:95:35:fa:6a:40:c8:b3:2f:29:c2:fd:6f:
                    81:e7:1b:ba:79:e3:73:fd:6b:87:ca:e3:4b:19:8c:
                    80:7d:f6:e8:58:03:cf:d1:6f:de:34:f2:63:56:d1:
                    ea:5d:ca:96:e2:4b:ae:2d:04:f0:34:73:c7:f1:06:
                    c5:2f:f7:0a:d1:40:31:b5:ca:b4:d5:02:14:83:c1:
                    76:09:90:d5:b9:ac:4e:bb:90:6c:99:e6:16:0c:3d:
                    d9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DF:1F:BF:75:BF:92:1C:7C:4F:5D:8C:F0:2C:D6:4D:2C:CE:B2:9D
            X509v3 Authority Key Identifier:
                keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ec:1a:fe:18:be:e3:56:fb:89:6d:a9:78:1e:8e:70:0a:d9:
         da:ae:69:b8:b2:a4:5f:8f:76:b9:8d:f7:0f:3d:30:9f:8c:55:
         91:58:d4:10:ff:60:00:25:15:cb:42:0e:c0:5f:3c:b9:53:64:
         06:5c:79:02:c5:9c:47:0c:91:63:34:04:cc:e1:14:72:14:28:
         e0:93:ab:e9:81:33:6a:96:dd:93:1b:59:01:1d:df:6c:33:97:
         fc:22:d7:5e:d5:3a:1a:cf:87:a4:3b:e3:07:78:47:7a:dd:5a:
         82:36:2c:82:f0:49:73:9f:a2:c2:5f:ea:70:34:21:ef:b9:44:
         7d:4d:f1:a4:07:f4:39:0f:eb:d2:15:9e:92:86:65:52:6d:86:
         7c:a6:12:90:33:37:18:8a:22:97:42:92:6c:b3:78:a1:57:6a:
         1e:83:cf:a0:53:34:72:13:2a:58:9e:ef:b7:82:71:59:54:8f:
         a7:3e:ac:c3:9a:e7:b2:31:8d:f7:69:42:57:ae:14:47:52:21:
         26:ac:e7:38:4f:89:87:90:1a:3a:ed:81:74:42:ff:ca:20:9a:
         77:7d:35:66:e2:5e:0a:36:30:d9:5a:7a:55:bb:79:7f:68:80:
         26:5d:36:ab:ed:d0:2a:52:42:aa:a1:e4:b6:03:41:19:3d:a2:
         be:62:26:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUl4CIlWIO7nHxC0Ed/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDIzOTE3OTkzMzc2MDEzMzFmNWExMmFmMTFlOWY0ZjY0
MjExNTkwHhcNMjUwNDEzMTMwMTA3WhcNMjUwNDE0MTMwMTA3WjAzMTEwLwYDVQQD
EygxNmRmMWZiZjc1YmY5MjFjN2M0ZjVkOGNmMDJjZDY0ZDJjY2ViMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwMoRdxwBZXS2IchLHjEQHXCOuqY
kxLqDhvaGLEH/kwQgq7gQPW2fG7wiTAnDjzpFW3bfZKieWFj4ML5MFWcGx96tPzF
aOr4aU/T7hBZ9hxmjokHTlpaaTkl4uKcLQLY3jcH2uFExQmRgCB28Qgg3+PufMzY
GW4weTJYeOs1nEC0USOHLOGWp+kCbEX8KxJDO3t8Z/EhTZU/ji465EZnDSz/xTpG
LZ+VNfpqQMizLynC/W+B5xu6eeNz/WuHyuNLGYyAffboWAPP0W/eNPJjVtHqXcqW
4kuuLQTwNHPH8QbFL/cK0UAxtcq01QIUg8F2CZDVuaxOu5BsmeYWDD3Z7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbfH791v5IcfE9djPAs1k0szrKdMB8GA1UdIwQY
MBaAFBkCOReZM3YBMx9aEq8R6fT2QhFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODct
NTU5NzI2MGY2NWVlLzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hOWZmMWEtZDU4MC00YjQyLWJkODctNTU5NzI2MGY2NWVl
LzEvR1FJNUY1a3pkZ0V6SDFvU3J4SHA5UFpDRVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWewa/hi+
41b7iW2peB6OcArZ2q5puLKkX492uY33Dz0wn4xVkVjUEP9gACUVy0IOwF88uVNk
Blx5AsWcRwyRYzQEzOEUchQo4JOr6YEzapbdkxtZAR3fbDOX/CLXXtU6Gs+HpDvj
B3hHet1agjYsgvBJc5+iwl/qcDQh77lEfU3xpAf0OQ/r0hWekoZlUm2GfKYSkDM3
GIoil0KSbLN4oVdqHoPPoFM0chMqWJ7vt4JxWVSPpz6sw5rnsjGN92lCV64UR1Ih
JqznOE+Jh5AaOu2BdEL/yiCad301ZuJeCjYw2Vp6Vbt5f2iAJl02q+3QKlJCqqHk
tgNBGT2ivmImuA==
-----END CERTIFICATE-----