Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
File:                     jOy2jIDW2NFkiSIw-dEfJVG-04o.mft (raw, json)
Hash identifier:          HwlVAcIz1v9wClpFgHDORrmnmLBXq0RNyURYkqVVKG8=
Subject key identifier:   10:13:95:A8:7B:DB:1B:74:6B:C3:06:6B:C5:A4:38:0A:2D:92:C5:0C
Authority key identifier: 8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A
Certificate issuer:       /CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
Certificate serial:       01962DF43D87EC39F903184DF0095D225338
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft
Manifest number:          0216
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: A2uDh-ZDpKG5zZjbYmYPv0BXkfs.roa (hash: YVpgdnu79jTGnOSIhM9WXwxc/TAyiy91T+UdGFojKfA=)
                          2: jOy2jIDW2NFkiSIw-dEfJVG-04o.crl (hash: AjcXRBSN7mgIPqqaHodrlJS05e4OM0PZneZ4ofCSYV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3d:87:ec:39:f9:03:18:4d:f0:09:5d:22:53:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cecb68c80d6d8d164892230f9d11f2551bed38a
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=101395a87bdb1b746bc3066bc5a4380a2d92c50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c9:45:fe:bd:68:8a:2c:d2:ae:b4:a1:05:ec:
                    2f:d9:54:67:ae:2e:ce:42:6c:4c:91:27:9b:a7:c5:
                    1a:37:15:23:7c:4c:81:30:12:cd:50:92:d3:04:7e:
                    b0:41:96:e0:b1:ef:e4:5a:c5:bb:11:68:2e:8a:09:
                    39:45:8e:40:02:fa:1b:0b:f1:01:13:00:3b:61:4a:
                    fc:84:b8:0f:61:81:89:dd:b0:6f:d5:f2:38:a8:34:
                    2e:84:d2:c7:46:a5:76:a6:53:3d:09:31:b1:04:f4:
                    c6:b4:4d:1e:33:65:d7:b0:77:b4:0e:df:4d:1e:80:
                    0e:3a:4c:52:f2:60:63:97:8d:7b:c4:de:10:f0:c6:
                    9e:35:62:01:47:83:2d:23:d7:e3:91:70:93:18:68:
                    98:61:5e:a8:13:04:7f:c8:df:41:47:bc:83:43:db:
                    b7:61:25:d3:56:32:5d:a7:42:7e:5f:1d:53:b8:cb:
                    41:3d:d8:02:64:3f:ee:46:1e:57:d7:13:3c:09:65:
                    e0:da:f2:1f:76:f7:bf:02:c2:6d:8e:04:ef:18:4c:
                    8a:b9:17:8f:26:ab:16:49:c4:b0:ae:a2:5f:a1:45:
                    ee:52:8d:93:38:13:67:a1:74:7c:e6:75:c5:d2:18:
                    df:29:de:67:a3:a9:85:3d:88:69:4d:dd:5a:fe:b1:
                    64:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:13:95:A8:7B:DB:1B:74:6B:C3:06:6B:C5:A4:38:0A:2D:92:C5:0C
            X509v3 Authority Key Identifier:
                keyid:8C:EC:B6:8C:80:D6:D8:D1:64:89:22:30:F9:D1:1F:25:51:BE:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOy2jIDW2NFkiSIw-dEfJVG-04o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c159ad-1bfb-490e-8d78-eb00121a55e5/1/jOy2jIDW2NFkiSIw-dEfJVG-04o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:ef:6a:70:0b:51:a9:4d:ce:ee:f8:cc:64:06:4e:81:10:
         0b:8a:57:f8:14:5c:56:6f:08:35:31:0b:29:28:53:75:aa:28:
         ab:80:11:0e:72:a4:8b:92:1b:a2:a3:0e:3f:96:9e:5e:15:96:
         ca:4a:6e:1e:b1:3c:87:67:ac:5a:39:3b:ee:6f:4e:34:e7:21:
         93:ec:1c:19:92:16:8d:6b:23:71:54:fc:10:d9:8a:17:6e:30:
         14:8f:b6:09:e0:af:89:8b:64:2d:87:4e:4c:94:da:01:50:ef:
         99:d0:e1:b0:3e:ab:86:bf:ba:3f:94:38:e8:11:73:8d:99:af:
         6b:43:41:97:3c:4a:74:18:b1:01:06:73:73:fc:a9:60:30:1d:
         75:ac:4d:20:0a:c5:c4:e2:31:c7:75:8d:e9:05:bc:05:b8:9c:
         2b:fc:44:3b:bc:4c:d8:95:25:2d:e7:f1:23:92:1c:07:23:a1:
         6c:a1:7c:82:63:44:0a:f6:f5:04:37:ab:6a:69:bf:c2:af:9d:
         11:bf:b3:da:dd:a5:a1:1e:cb:dc:94:21:fa:6b:d7:2f:fb:c7:
         44:3d:f8:44:36:eb:62:c2:78:84:cb:56:dc:88:5a:00:5b:95:
         67:f1:be:a3:b9:26:a4:3e:10:fd:09:fb:c2:28:c2:dd:4e:8b:
         79:19:bd:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9D2H7Dn5AxhN8AldIlM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZWNiNjhjODBkNmQ4ZDE2NDg5MjIzMGY5ZDExZjI1NTFi
ZWQzOGEwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
EygxMDEzOTVhODdiZGIxYjc0NmJjMzA2NmJjNWE0MzgwYTJkOTJjNTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78lF/r1oiizSrrShBewv2VRnri7O
QmxMkSebp8UaNxUjfEyBMBLNUJLTBH6wQZbgse/kWsW7EWguigk5RY5AAvobC/EB
EwA7YUr8hLgPYYGJ3bBv1fI4qDQuhNLHRqV2plM9CTGxBPTGtE0eM2XXsHe0Dt9N
HoAOOkxS8mBjl417xN4Q8MaeNWIBR4MtI9fjkXCTGGiYYV6oEwR/yN9BR7yDQ9u3
YSXTVjJdp0J+Xx1TuMtBPdgCZD/uRh5X1xM8CWXg2vIfdve/AsJtjgTvGEyKuReP
JqsWScSwrqJfoUXuUo2TOBNnoXR85nXF0hjfKd5no6mFPYhpTd1a/rFkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBATlah72xt0a8MGa8WkOAotksUMMB8GA1UdIwQY
MBaAFIzstoyA1tjRZIkiMPnRHyVRvtOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9jMTU5YWQtMWJmYi00OTBlLThkNzgt
ZWIwMDEyMWE1NWU1LzEvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9jMTU5YWQtMWJmYi00OTBlLThkNzgtZWIwMDEyMWE1NWU1
LzEvak95MmpJRFcyTkZraVNJdy1kRWZKVkctMDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQ3vanAL
UalNzu74zGQGToEQC4pX+BRcVm8INTELKShTdaooq4ARDnKki5IboqMOP5aeXhWW
ykpuHrE8h2esWjk77m9ONOchk+wcGZIWjWsjcVT8ENmKF24wFI+2CeCviYtkLYdO
TJTaAVDvmdDhsD6rhr+6P5Q46BFzjZmva0NBlzxKdBixAQZzc/ypYDAddaxNIArF
xOIxx3WN6QW8BbicK/xEO7xM2JUlLefxI5IcByOhbKF8gmNECvb1BDeramm/wq+d
Eb+z2t2loR7L3JQh+mvXL/vHRD34RDbrYsJ4hMtW3IhaAFuVZ/G+o7kmpD4Q/Qn7
wijC3U6LeRm9yA==
-----END CERTIFICATE-----