Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
File:                     jzj4WeXmdmKuCZkPOE-obJMnEKs.mft (raw, json)
Hash identifier:          fzh8PehUAMpUSfThCSf/0bDhfd4iUUP6r/wYzkz4LbU=
Subject key identifier:   3F:F7:B4:92:31:A3:80:C8:C6:B4:F6:17:D2:94:2D:1B:EA:B5:1F:07
Authority key identifier: 8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB
Certificate issuer:       /CN=8f38f859e5e67662ae09990f384fa86c932710ab
Certificate serial:       01962E61C4E9163EA531B44D62A20936D5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft
Manifest number:          048F
Signing time:             Sun 13 Apr 2025 09:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:21 +0000
Files and hashes:         1: 9gswIUnAaS1IBv5fuNBqUKNMfqs.roa (hash: lylk+NlcGPhSxgLHOS7jiDLjzNF20oemeodaYXlxSEQ=)
                          2: jzj4WeXmdmKuCZkPOE-obJMnEKs.crl (hash: em4FqmMN3PP4/7mh5LB5XdtmFTDk1qTX4F0AA9uZk3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c4:e9:16:3e:a5:31:b4:4d:62:a2:09:36:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f38f859e5e67662ae09990f384fa86c932710ab
        Validity
            Not Before: Apr 13 09:01:21 2025 GMT
            Not After : Apr 14 09:01:21 2025 GMT
        Subject: CN=3ff7b49231a380c8c6b4f617d2942d1beab51f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:fb:c2:65:95:3b:41:18:3a:da:b7:2b:42:
                    e1:05:1a:44:28:4e:66:63:d6:9d:54:e8:22:ea:6e:
                    2d:31:c8:2a:82:0d:c2:a0:bf:78:b1:03:21:7a:1c:
                    68:f7:a7:ab:10:8f:26:51:09:2d:25:15:1f:24:b1:
                    53:ad:ac:3b:c3:cc:7b:4d:19:ad:2f:43:99:9b:8a:
                    5b:b0:7a:34:48:02:40:fc:73:49:2f:4b:88:8d:9d:
                    18:b4:8c:de:09:37:42:28:c5:78:a1:38:8a:e5:18:
                    3a:9e:0b:f2:4f:12:4f:50:5b:ca:34:1b:0e:bf:d5:
                    f7:3d:09:ff:7f:cb:e4:49:b3:8e:db:af:9f:c2:d2:
                    88:db:e8:87:c2:f9:c8:aa:46:1f:1e:3a:ed:1c:04:
                    20:b8:21:3d:5e:68:6d:a4:23:6f:84:77:17:d7:df:
                    0e:f8:28:e9:8c:0a:4a:2f:33:59:91:f7:df:d4:d5:
                    8c:48:8a:ab:63:f9:86:d0:77:7d:fd:85:22:1e:42:
                    f8:a7:30:9c:c0:c9:ee:f5:49:ce:21:28:df:e6:88:
                    1f:57:96:b8:0e:97:9c:e9:07:4c:35:c4:0f:0e:96:
                    14:61:4a:b0:aa:53:15:15:4b:9d:ad:7f:b0:69:0a:
                    ce:2f:fe:55:2c:6e:d4:65:73:34:f3:78:bc:16:d0:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F7:B4:92:31:A3:80:C8:C6:B4:F6:17:D2:94:2D:1B:EA:B5:1F:07
            X509v3 Authority Key Identifier:
                keyid:8F:38:F8:59:E5:E6:76:62:AE:09:99:0F:38:4F:A8:6C:93:27:10:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzj4WeXmdmKuCZkPOE-obJMnEKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1ca47c-b087-46ef-a051-ab0bc52a1883/1/jzj4WeXmdmKuCZkPOE-obJMnEKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ff:83:bb:05:3e:6c:ff:12:17:bb:7c:58:58:4c:e8:ef:8f:
         c5:3c:fc:dd:96:4b:8f:cb:1e:65:ca:a3:8a:e4:90:55:2d:5f:
         40:90:93:c6:f8:03:69:8c:df:8b:20:3d:a6:97:80:bd:ae:8c:
         86:d9:3e:34:8a:d4:3a:1d:6c:d6:99:a9:27:d3:8b:33:50:14:
         c3:35:06:04:88:d0:80:18:b6:d0:1d:16:b4:33:e8:d2:87:89:
         12:47:34:e1:5f:f0:9b:a2:d2:34:8d:df:da:21:34:7e:ef:da:
         2c:b1:a5:18:33:50:1e:91:a4:b4:d8:42:29:33:67:0b:eb:ee:
         6e:c2:d9:cb:c4:9a:da:16:36:f0:18:96:af:73:bc:ab:05:de:
         c9:72:31:ec:58:64:45:a0:21:9c:f0:1d:16:c0:47:35:df:af:
         6e:f9:3d:9e:f7:b2:bb:a2:04:74:3a:c1:14:00:f3:45:f1:26:
         8a:60:05:4d:4b:3d:d4:fe:ff:69:dd:5f:a4:63:dd:0a:ad:47:
         b9:ec:1f:85:41:b7:35:6f:8e:40:6b:f1:0a:d8:77:dd:a7:1c:
         09:34:e5:0c:75:e6:92:d9:55:38:12:de:3c:46:35:59:83:f1:
         07:bc:6f:42:5a:dd:ae:45:72:c8:ae:d4:3d:c3:9e:d3:14:7e:
         76:99:00:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcTpFj6lMbRNYqIJNtXAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzhmODU5ZTVlNjc2NjJhZTA5OTkwZjM4NGZhODZjOTMy
NzEwYWIwHhcNMjUwNDEzMDkwMTIxWhcNMjUwNDE0MDkwMTIxWjAzMTEwLwYDVQQD
EygzZmY3YjQ5MjMxYTM4MGM4YzZiNGY2MTdkMjk0MmQxYmVhYjUxZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Yr7wmWVO0EYOtq3K0LhBRpEKE5m
Y9adVOgi6m4tMcgqgg3CoL94sQMhehxo96erEI8mUQktJRUfJLFTraw7w8x7TRmt
L0OZm4pbsHo0SAJA/HNJL0uIjZ0YtIzeCTdCKMV4oTiK5Rg6ngvyTxJPUFvKNBsO
v9X3PQn/f8vkSbOO26+fwtKI2+iHwvnIqkYfHjrtHAQguCE9XmhtpCNvhHcX198O
+CjpjApKLzNZkfff1NWMSIqrY/mG0Hd9/YUiHkL4pzCcwMnu9UnOISjf5ogfV5a4
Dpec6QdMNcQPDpYUYUqwqlMVFUudrX+waQrOL/5VLG7UZXM083i8FtAcWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/3tJIxo4DIxrT2F9KULRvqtR8HMB8GA1UdIwQY
MBaAFI84+Fnl5nZirgmZDzhPqGyTJxCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEt
YWIwYmM1MmExODgzLzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xY2E0N2MtYjA4Ny00NmVmLWEwNTEtYWIwYmM1MmExODgz
LzEvanpqNFdlWG1kbUt1Q1prUE9FLW9iSk1uRUtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMv+DuwU+
bP8SF7t8WFhM6O+PxTz83ZZLj8seZcqjiuSQVS1fQJCTxvgDaYzfiyA9ppeAva6M
htk+NIrUOh1s1pmpJ9OLM1AUwzUGBIjQgBi20B0WtDPo0oeJEkc04V/wm6LSNI3f
2iE0fu/aLLGlGDNQHpGktNhCKTNnC+vubsLZy8Sa2hY28BiWr3O8qwXeyXIx7Fhk
RaAhnPAdFsBHNd+vbvk9nveyu6IEdDrBFADzRfEmimAFTUs91P7/ad1fpGPdCq1H
uewfhUG3NW+OQGvxCth33accCTTlDHXmktlVOBLePEY1WYPxB7xvQlrdrkVyyK7U
PcOe0xR+dpkAGg==
-----END CERTIFICATE-----