Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File:                     jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier:          8kMpigzprJbMvxzeVqcglXlwp/JXu4NTFSuc9jUIRoE=
Subject key identifier:   2C:BD:3D:33:9B:B9:E0:BB:95:65:33:59:6F:30:51:BF:60:18:B8:41
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer:       /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial:       01962E2ACE03312C6012C7196F4E313C03CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
                          2: MQoy-ze9auOiRnYWkevo5ug6b74.roa (hash: e50zWSr9FAOpXTByWZCk9NzWnhOqRMc92RH7Gp5XlqE=)
                          3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
                          4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: AOvxnFxL8RYOvg+UpgLwdDGiyWvX7EfPD9V2RogtZ3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ce:03:31:2c:60:12:c7:19:6f:4e:31:3c:03:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=2cbd3d339bb9e0bb956533596f3051bf6018b841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:5a:76:8d:03:3d:b4:2f:4e:a2:83:da:26:
                    0b:44:97:c9:6f:50:1a:f7:59:c4:a6:37:62:45:f9:
                    66:f1:dd:2a:b7:6a:36:82:14:03:79:0e:66:39:23:
                    39:2f:53:8c:d7:15:86:4c:1d:16:ae:69:a5:09:c9:
                    fe:db:4e:db:c1:6f:80:f8:d9:ea:09:d9:27:8c:ca:
                    e4:98:58:9c:dc:76:ef:9f:28:bd:80:ec:74:d8:b5:
                    72:a1:0e:f1:be:37:10:67:19:de:33:80:6d:eb:a2:
                    1a:ce:72:d8:14:0d:e0:fc:dd:3a:bc:0f:c5:a2:47:
                    49:27:7f:60:de:bd:20:5d:37:dc:a8:ae:de:3c:57:
                    ce:89:bf:3c:c5:0f:df:4b:7d:64:5d:ac:b3:0b:ee:
                    05:ca:1e:9f:b0:6b:a9:67:a2:84:3c:76:9e:1d:af:
                    dc:21:2f:77:3c:bd:ab:f4:ea:0a:10:cc:81:76:b4:
                    cf:04:18:e7:4d:14:57:ce:07:33:c5:7e:80:c1:c3:
                    30:81:fc:4e:fa:08:c2:d7:7e:b2:34:be:14:33:bf:
                    43:56:78:dd:df:19:40:14:cc:97:8d:92:4a:d0:4c:
                    55:ee:9e:70:6a:9e:d2:51:d9:b1:03:18:d5:22:3c:
                    23:c3:50:1d:71:a2:e3:5f:2c:ac:2f:fa:21:8e:73:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BD:3D:33:9B:B9:E0:BB:95:65:33:59:6F:30:51:BF:60:18:B8:41
            X509v3 Authority Key Identifier:
                keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:52:1f:2c:3c:b1:ab:ad:1b:63:fb:8e:0b:cc:28:a9:ed:3e:
         96:51:b0:6d:cd:d7:75:b8:b8:bb:82:d3:e8:f8:ca:de:2f:d3:
         84:4e:9b:1f:cc:27:57:4a:2d:76:75:81:b5:98:c2:08:40:8a:
         cc:eb:22:77:4e:f4:6d:51:bb:f8:0c:8c:95:87:07:b8:0f:08:
         d5:48:aa:a3:87:c7:12:fa:db:89:a5:b2:be:67:3a:74:0b:b4:
         20:ee:1d:eb:19:e1:ca:b7:1a:17:f6:06:48:c4:7b:ee:df:b7:
         d2:d9:ce:7c:bd:a4:30:50:28:b3:46:73:a7:89:86:d0:9a:5b:
         a7:8d:93:a3:41:b9:8d:31:e1:f2:44:3f:4c:86:5e:85:46:cd:
         66:e6:89:0f:43:2e:51:38:32:20:33:f6:46:65:56:b2:4c:21:
         91:5e:3e:09:6d:ae:b2:0f:73:08:99:23:30:45:b3:e9:b6:aa:
         03:b2:cd:59:e6:56:b3:49:26:86:71:5f:5c:ef:70:65:f0:b6:
         36:a6:6f:de:5f:3d:c7:20:1e:31:7d:de:70:4a:c4:fa:3e:94:
         ac:f4:4a:67:15:27:78:2b:a3:7c:0d:9a:3f:6a:92:03:a4:b3:
         c1:64:0e:7f:a9:36:6b:72:3d:b7:12:38:7e:7a:75:68:39:2f:
         3e:59:83:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKs4DMSxgEscZb04xPAPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNzcwMTNlNDg4YTA5YzcwOWI2MzIyNDZkOTQwNWRhNDU4
YzU1MzgwHhcNMjUwNDEzMDgwMTE5WhcNMjUwNDE0MDgwMTE5WjAzMTEwLwYDVQQD
EygyY2JkM2QzMzliYjllMGJiOTU2NTMzNTk2ZjMwNTFiZjYwMThiODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3xado0DPbQvTqKD2iYLRJfJb1Aa
91nEpjdiRflm8d0qt2o2ghQDeQ5mOSM5L1OM1xWGTB0WrmmlCcn+207bwW+A+Nnq
CdknjMrkmFic3Hbvnyi9gOx02LVyoQ7xvjcQZxneM4Bt66IaznLYFA3g/N06vA/F
okdJJ39g3r0gXTfcqK7ePFfOib88xQ/fS31kXayzC+4Fyh6fsGupZ6KEPHaeHa/c
IS93PL2r9OoKEMyBdrTPBBjnTRRXzgczxX6AwcMwgfxO+gjC136yNL4UM79DVnjd
3xlAFMyXjZJK0ExV7p5wap7SUdmxAxjVIjwjw1AdcaLjXyysL/ohjnPnkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCy9PTObueC7lWUzWW8wUb9gGLhBMB8GA1UdIwQY
MBaAFIx3AT5IignHCbYyJG2UBdpFjFU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgt
MDIxMjk1MzNhMzNkLzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xNjg1MDktMmNmMy00ODNkLWJjZDgtMDIxMjk1MzNhMzNk
LzEvakhjQlBraUtDY2NKdGpJa2JaUUYya1dNVlRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAylIfLDyx
q60bY/uOC8woqe0+llGwbc3Xdbi4u4LT6PjK3i/ThE6bH8wnV0otdnWBtZjCCECK
zOsid070bVG7+AyMlYcHuA8I1Uiqo4fHEvrbiaWyvmc6dAu0IO4d6xnhyrcaF/YG
SMR77t+30tnOfL2kMFAos0Zzp4mG0Jpbp42To0G5jTHh8kQ/TIZehUbNZuaJD0Mu
UTgyIDP2RmVWskwhkV4+CW2usg9zCJkjMEWz6baqA7LNWeZWs0kmhnFfXO9wZfC2
NqZv3l89xyAeMX3ecErE+j6UrPRKZxUneCujfA2aP2qSA6SzwWQOf6k2a3I9txI4
fnp1aDkvPlmDtg==
-----END CERTIFICATE-----