Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
File:                     jlDZuD8_AVrYi_a3xShIZ0rly24.mft (raw, json)
Hash identifier:          yGENSDyqR7f4BiEWKnt/j+j75pvxctzGAMnLSGIIjs4=
Subject key identifier:   5F:6C:C8:CF:10:21:3A:69:F8:77:E7:8C:39:06:6B:0D:3E:34:23:69
Authority key identifier: 8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E
Certificate issuer:       /CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
Certificate serial:       01962E994D69B6AE0E695F39FBCA8DAC7EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft
Manifest number:          0864
Signing time:             Sun 13 Apr 2025 10:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:00 +0000
Files and hashes:         1: jlDZuD8_AVrYi_a3xShIZ0rly24.crl (hash: n64b8m5V1od8aDWMuH4nntC3UFclGSiZKf87betxlAM=)
                          2: kchIPTEIqMp0vpAjfgQEwz2BSpw.roa (hash: Nd32beBirDyD6e0HPEc2YHkqNEJViSi6nJI2FhIdX3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:4d:69:b6:ae:0e:69:5f:39:fb:ca:8d:ac:7e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e50d9b83f3f015ad88bf6b7c52848674ae5cb6e
        Validity
            Not Before: Apr 13 10:02:00 2025 GMT
            Not After : Apr 14 10:02:00 2025 GMT
        Subject: CN=5f6cc8cf10213a69f877e78c39066b0d3e342369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:a0:88:0f:78:b4:f8:78:52:b8:63:50:65:
                    24:f1:b8:6f:df:23:4b:f9:b9:e0:13:9d:2d:73:ea:
                    9c:c8:96:8e:05:f9:f4:49:6f:37:03:b6:1f:77:c3:
                    ec:d8:95:6c:6e:24:6e:41:3d:0f:11:4d:57:51:e3:
                    3a:13:21:7d:7e:24:e3:3a:26:b8:7f:cb:f4:59:4d:
                    f0:a5:00:57:37:b8:36:e8:f4:8e:82:0a:c9:31:33:
                    19:d1:44:f6:d1:64:19:80:01:d0:f5:62:40:51:a6:
                    45:b9:12:63:80:ca:ad:ad:1f:5e:23:88:4c:3a:1e:
                    b7:37:f3:1e:f8:c9:ac:fe:31:7a:29:3e:84:3e:4b:
                    05:85:c7:47:8b:f9:b0:fb:1d:56:5d:2b:9f:7d:48:
                    c8:8b:49:d8:f0:41:35:da:9b:4a:53:98:0d:aa:2f:
                    97:ef:77:eb:bb:c6:53:c2:ff:05:b8:b7:11:b3:d1:
                    b4:a7:af:cd:af:37:bf:4b:7d:97:be:8c:82:e0:2d:
                    d9:63:69:52:83:17:e6:cf:e0:3b:48:2e:c9:af:46:
                    17:1f:99:87:92:d2:d3:f8:1a:0c:fb:af:2a:ee:5a:
                    20:92:e4:17:fc:00:97:14:79:b4:77:b5:bf:41:6a:
                    65:fd:13:f1:5f:73:fe:15:e9:da:2d:a0:cf:ba:15:
                    e0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6C:C8:CF:10:21:3A:69:F8:77:E7:8C:39:06:6B:0D:3E:34:23:69
            X509v3 Authority Key Identifier:
                keyid:8E:50:D9:B8:3F:3F:01:5A:D8:8B:F6:B7:C5:28:48:67:4A:E5:CB:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlDZuD8_AVrYi_a3xShIZ0rly24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/28b5cd-73b0-4097-955f-3fe518ea5ba6/1/jlDZuD8_AVrYi_a3xShIZ0rly24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8b:70:db:4a:21:04:a0:bc:38:84:0a:57:8f:44:a8:50:27:
         1a:61:4d:02:88:a8:b2:a4:b1:7c:6e:b9:20:7d:e1:ba:ff:af:
         37:16:33:d0:17:53:34:16:e6:5f:39:9b:13:ec:e9:c4:59:fc:
         ea:74:b0:da:73:63:36:b2:dc:0e:05:0c:6c:da:b2:fd:98:b0:
         9a:04:50:c7:5c:c6:5c:83:e2:6b:83:34:a8:3b:00:50:c6:89:
         15:45:62:65:94:94:d2:0d:95:0d:a2:7a:d5:5b:db:b6:e5:6d:
         fe:18:30:65:34:cd:2b:d2:e8:d1:b9:54:7f:ac:39:56:e4:4b:
         cd:43:b6:c7:df:04:2c:80:bd:f7:a4:25:85:f3:f6:91:93:17:
         26:4a:40:06:0d:20:1b:81:21:ae:fa:12:49:d1:4b:16:7e:03:
         da:96:36:a4:ff:ee:fd:67:1a:ff:41:8a:b9:d1:bf:4c:bf:e2:
         f4:8b:49:44:ba:44:cd:5c:ad:a4:60:8a:93:54:ab:d2:8c:8c:
         ed:df:57:49:4b:97:f6:17:37:0a:26:85:e3:c0:7b:8e:5c:26:
         48:22:a1:18:7d:cd:13:66:b0:aa:ec:ed:85:50:1f:e0:79:6c:
         e1:f0:63:d8:57:59:5b:18:c9:6a:cc:1c:7f:2d:6d:2b:82:bd:
         59:c2:78:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumU1ptq4OaV85+8qNrH6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTBkOWI4M2YzZjAxNWFkODhiZjZiN2M1Mjg0ODY3NGFl
NWNiNmUwHhcNMjUwNDEzMTAwMjAwWhcNMjUwNDE0MTAwMjAwWjAzMTEwLwYDVQQD
Eyg1ZjZjYzhjZjEwMjEzYTY5Zjg3N2U3OGMzOTA2NmIwZDNlMzQyMzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/egiA94tPh4UrhjUGUk8bhv3yNL
+bngE50tc+qcyJaOBfn0SW83A7Yfd8Ps2JVsbiRuQT0PEU1XUeM6EyF9fiTjOia4
f8v0WU3wpQBXN7g26PSOggrJMTMZ0UT20WQZgAHQ9WJAUaZFuRJjgMqtrR9eI4hM
Oh63N/Me+Mms/jF6KT6EPksFhcdHi/mw+x1WXSuffUjIi0nY8EE12ptKU5gNqi+X
73fru8ZTwv8FuLcRs9G0p6/Nrze/S32XvoyC4C3ZY2lSgxfmz+A7SC7Jr0YXH5mH
ktLT+BoM+68q7logkuQX/ACXFHm0d7W/QWpl/RPxX3P+FenaLaDPuhXgbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9syM8QITpp+HfnjDkGaw0+NCNpMB8GA1UdIwQY
MBaAFI5Q2bg/PwFa2Iv2t8UoSGdK5ctuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxEWnVEOF9BVnJZaV9hM3hTaElaMHJseTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yOGI1Y2QtNzNiMC00MDk3LTk1NWYt
M2ZlNTE4ZWE1YmE2LzEvamxEWnVEOF9BVnJZaV9hM3hTaElaMHJseTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yOGI1Y2QtNzNiMC00MDk3LTk1NWYtM2ZlNTE4ZWE1YmE2
LzEvamxEWnVEOF9BVnJZaV9hM3hTaElaMHJseTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYtw20oh
BKC8OIQKV49EqFAnGmFNAoiosqSxfG65IH3huv+vNxYz0BdTNBbmXzmbE+zpxFn8
6nSw2nNjNrLcDgUMbNqy/ZiwmgRQx1zGXIPia4M0qDsAUMaJFUViZZSU0g2VDaJ6
1VvbtuVt/hgwZTTNK9Lo0blUf6w5VuRLzUO2x98ELIC996QlhfP2kZMXJkpABg0g
G4EhrvoSSdFLFn4D2pY2pP/u/Wca/0GKudG/TL/i9ItJRLpEzVytpGCKk1Sr0oyM
7d9XSUuX9hc3CiaF48B7jlwmSCKhGH3NE2awquzthVAf4Hls4fBj2FdZWxjJaswc
fy1tK4K9WcJ4UQ==
-----END CERTIFICATE-----