Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
File:                     jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft (raw, json)
Hash identifier:          oSjNuGLTawf2XtdaWcS9OE9H+2t3brbeS3HnO3DoWCI=
Subject key identifier:   31:4C:1B:4C:9E:D4:5C:77:9C:AF:5C:62:A1:CE:C1:78:6A:32:18:ED
Authority key identifier: 8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29
Certificate issuer:       /CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
Certificate serial:       01962F06ADC8E3AE89C18BE5FE0940539F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft
Manifest number:          0F9C
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl (hash: 8OfwnuokyQ1JkJdjzyyNvkdmr8tKWEj2TMvT/DzfB98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ad:c8:e3:ae:89:c1:8b:e5:fe:09:40:53:9f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14003d657ecbe5f9b6f4947b8ca72adace9d29
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=314c1b4c9ed45c779caf5c62a1cec1786a3218ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:26:4f:8a:05:3f:31:6e:cf:e6:6b:c7:4f:09:
                    b6:b3:74:69:cf:76:a6:35:17:f9:39:e5:92:ad:7a:
                    5e:34:ae:86:29:72:17:4f:cf:06:eb:d8:a2:e3:56:
                    9e:ab:06:ae:f9:64:29:de:1f:55:21:dd:bc:89:c5:
                    7f:c0:ee:fa:df:85:0c:5c:30:49:07:33:83:d6:22:
                    71:0d:98:ef:3b:c0:b2:bc:07:b5:f3:95:6e:3e:e4:
                    0c:07:6f:79:34:04:b7:b9:57:17:5a:58:8c:e7:50:
                    a5:eb:41:32:c9:75:41:63:14:93:3e:a0:02:5f:d4:
                    59:99:11:7c:e1:10:82:01:20:6a:91:b8:c3:fc:58:
                    eb:bc:3b:09:cd:54:a9:1e:98:90:fc:b3:e4:82:9e:
                    ed:9a:41:75:3e:1f:98:32:0c:a8:04:17:4f:eb:86:
                    e6:52:d1:de:f5:d7:be:dd:24:cf:60:03:86:96:2a:
                    f5:72:3c:19:ed:a3:e8:84:49:4a:14:f9:31:a0:07:
                    d7:b8:69:2e:1f:69:19:6b:d2:16:bc:f7:5f:38:1b:
                    d2:db:41:8b:2f:9b:96:f8:e2:81:94:f8:df:58:6c:
                    41:9e:b4:03:a0:fe:f1:60:19:a0:05:6c:3b:c0:a9:
                    d9:b7:fd:67:c0:12:d9:ee:86:f3:51:c1:5a:c6:a7:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4C:1B:4C:9E:D4:5C:77:9C:AF:5C:62:A1:CE:C1:78:6A:32:18:ED
            X509v3 Authority Key Identifier:
                keyid:8F:14:00:3D:65:7E:CB:E5:F9:B6:F4:94:7B:8C:A7:2A:DA:CE:9D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxQAPWV-y-X5tvSUe4ynKtrOnSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7f4653-dec1-4735-9ff7-eb3c9a2e7eea/1/jxQAPWV-y-X5tvSUe4ynKtrOnSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:25:7e:63:06:18:2e:26:45:d7:d2:99:1d:a3:26:75:e5:ba:
         93:af:87:9c:d5:de:2c:e9:97:5d:92:d4:7d:8a:c0:f2:d1:e8:
         70:2c:1c:50:fe:1d:67:75:49:5e:29:b9:ad:19:44:ef:8d:fe:
         79:32:35:89:97:f9:f8:2f:99:9e:b7:ce:1c:fe:b0:1f:0d:c4:
         af:bc:8e:8b:29:d4:63:44:b9:b7:a2:52:c5:fb:32:95:d5:90:
         ec:e0:0b:a7:f3:c4:d6:e8:09:2e:b0:ce:3c:21:d6:8f:ba:55:
         8b:cc:67:ba:b8:67:aa:09:8f:38:f0:cf:3c:6e:b9:ce:55:af:
         8b:2e:76:1d:63:92:22:ce:29:85:02:5b:f3:4e:15:75:8c:5c:
         02:15:28:72:df:79:17:a6:d8:c8:a0:1b:aa:81:d2:85:df:2c:
         31:bd:8f:31:ef:41:72:76:72:5a:9b:09:e4:af:fa:4a:71:9f:
         3b:f5:23:d3:2b:52:6b:73:c6:3e:75:73:ed:de:7f:b4:95:d8:
         3c:2c:ab:df:1d:be:93:f9:16:99:42:57:29:ec:a8:5b:bb:80:
         15:8f:f5:b0:c0:d4:6b:be:7e:e8:a2:e9:e5:e7:9e:cc:5d:d1:
         da:15:b4:c5:94:1e:02:aa:0f:e0:d7:fc:6b:26:89:67:41:c8:
         7d:8f:35:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBq3I466JwYvl/glAU58lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTQwMDNkNjU3ZWNiZTVmOWI2ZjQ5NDdiOGNhNzJhZGFj
ZTlkMjkwHhcNMjUwNDEzMTIwMTI4WhcNMjUwNDE0MTIwMTI4WjAzMTEwLwYDVQQD
EygzMTRjMWI0YzllZDQ1Yzc3OWNhZjVjNjJhMWNlYzE3ODZhMzIxOGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiZPigU/MW7P5mvHTwm2s3Rpz3am
NRf5OeWSrXpeNK6GKXIXT88G69ii41aeqwau+WQp3h9VId28icV/wO7634UMXDBJ
BzOD1iJxDZjvO8CyvAe185VuPuQMB295NAS3uVcXWliM51Cl60EyyXVBYxSTPqAC
X9RZmRF84RCCASBqkbjD/FjrvDsJzVSpHpiQ/LPkgp7tmkF1Ph+YMgyoBBdP64bm
UtHe9de+3STPYAOGlir1cjwZ7aPohElKFPkxoAfXuGkuH2kZa9IWvPdfOBvS20GL
L5uW+OKBlPjfWGxBnrQDoP7xYBmgBWw7wKnZt/1nwBLZ7obzUcFaxqevjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFMG0ye1Fx3nK9cYqHOwXhqMhjtMB8GA1UdIwQY
MBaAFI8UAD1lfsvl+bb0lHuMpyrazp0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjct
ZWIzYzlhMmU3ZWVhLzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS83ZjQ2NTMtZGVjMS00NzM1LTlmZjctZWIzYzlhMmU3ZWVh
LzEvanhRQVBXVi15LVg1dHZTVWU0eW5LdHJPblNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAziV+YwYY
LiZF19KZHaMmdeW6k6+HnNXeLOmXXZLUfYrA8tHocCwcUP4dZ3VJXim5rRlE743+
eTI1iZf5+C+ZnrfOHP6wHw3Er7yOiynUY0S5t6JSxfsyldWQ7OALp/PE1ugJLrDO
PCHWj7pVi8xnurhnqgmPOPDPPG65zlWviy52HWOSIs4phQJb804VdYxcAhUoct95
F6bYyKAbqoHShd8sMb2PMe9BcnZyWpsJ5K/6SnGfO/Uj0ytSa3PGPnVz7d5/tJXY
PCyr3x2+k/kWmUJXKeyoW7uAFY/1sMDUa75+6KLp5eeezF3R2hW0xZQeAqoP4Nf8
ayaJZ0HIfY81QQ==
-----END CERTIFICATE-----