Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File:                     jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier:          4jpHgMy5xmZKSkZQjl+taFwS95GnB6oVojZ5k+TbSy0=
Subject key identifier:   8F:80:CB:3C:E0:E8:87:50:AD:7A:EC:37:92:08:71:01:CF:25:41:C5
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer:       /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial:       01962FAB65853533CBCB0648579E47E1CD6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:23 +0000
Files and hashes:         1: GJFvvd_DhSTge6litoTaxiewidk.roa (hash: RLpkP+iqljJeiJ6QCXluN39pRk9A6A/5JPgUBEpuWhk=)
                          2: HzBkiKhuiqff_TTVGmLjYBovMzQ.roa (hash: qKqhsRRVPhaKh0NQ1lXqtQkYrgEiWm0P2Q/f/i1BnBs=)
                          3: OUb4f2kMek4JWOT-2hKVrK3yUkc.roa (hash: BGMCH6XtBbK3ErSxfRu28beFp+9P5g1GIIEgyGFXRQQ=)
                          4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: 70VIve3A+Gp+kAIh9KdNAAN3Nc+dlhUwys7Vwx++QTE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:65:85:35:33:cb:cb:06:48:57:9e:47:e1:cd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
        Validity
            Not Before: Apr 13 15:01:23 2025 GMT
            Not After : Apr 14 15:01:23 2025 GMT
        Subject: CN=8f80cb3ce0e88750ad7aec3792087101cf2541c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:db:76:9e:e4:95:7f:53:14:e9:69:1c:99:
                    2f:38:ef:d7:ae:b6:f5:a9:b3:c2:1b:3f:f8:81:25:
                    45:43:15:cb:f2:ad:0b:91:ad:49:a5:c5:99:52:0c:
                    5e:a1:7c:57:f8:b7:70:8e:44:53:75:d7:41:7a:58:
                    02:ac:ed:6e:51:3b:89:9e:22:f6:90:bc:4e:b2:8d:
                    3f:9e:8b:a3:06:fd:56:2b:af:bf:9a:27:b1:9a:48:
                    89:7e:bf:d6:2c:b6:22:92:dd:16:a5:74:e6:7a:a1:
                    1d:d4:1a:42:90:87:95:e0:cf:56:6c:f6:3a:90:86:
                    7a:e6:5f:39:74:39:6f:c2:1f:75:81:1d:62:34:1e:
                    a9:85:b7:99:48:a7:eb:80:c3:2d:29:dd:71:50:40:
                    7b:b1:09:c0:94:a9:09:b7:7f:a4:5f:af:07:0a:4e:
                    e6:9f:aa:34:ed:ea:d0:34:73:3c:04:e0:0d:7b:33:
                    c2:da:05:a3:30:8b:c5:55:f1:c1:09:de:45:8c:70:
                    da:57:35:f2:55:dd:3b:23:2d:c5:a8:67:bf:92:5b:
                    a0:5e:cb:29:97:db:60:7c:79:de:68:5e:4f:d9:d2:
                    8b:13:9f:fb:c7:f9:60:1e:9d:d1:56:6d:d1:a6:b6:
                    e9:59:13:25:9d:cc:19:bb:b8:24:2d:08:c2:f5:56:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:80:CB:3C:E0:E8:87:50:AD:7A:EC:37:92:08:71:01:CF:25:41:C5
            X509v3 Authority Key Identifier:
                keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:12:d0:f4:a8:33:fa:6d:95:b5:b0:f7:f3:95:61:c6:0a:b7:
         d0:f3:50:89:1e:0f:6c:48:c2:49:f7:64:95:63:a4:2f:30:28:
         22:0d:a5:cd:01:f3:9d:23:6e:e7:31:ef:d0:8c:3d:11:34:7d:
         a9:e3:18:0b:b6:5a:9f:eb:87:d2:55:93:10:31:03:8f:d8:3d:
         3e:eb:2d:fb:40:45:4c:36:f7:f3:b1:8b:14:c9:93:1f:13:cc:
         cc:b3:f6:bb:de:3c:10:67:57:e7:a6:0c:84:13:de:a3:32:c8:
         b6:6f:16:c7:1f:7f:f2:78:3c:1e:9f:86:6f:b7:cd:c6:2c:89:
         c3:68:fd:02:1f:19:8a:de:38:b6:09:ee:54:35:a4:7b:2c:46:
         8b:49:29:bb:aa:11:f1:01:dd:fd:ce:16:38:76:66:bc:6c:3e:
         9c:b3:25:c4:95:34:83:0e:d3:0c:77:ae:b1:62:e7:a5:b6:74:
         88:fd:88:38:41:6f:7d:7b:12:65:94:20:e6:2c:f0:6a:e9:91:
         46:89:c5:a9:44:3c:e2:be:af:9c:fe:c2:9f:3c:fd:57:bd:49:
         86:e6:0d:58:72:cc:63:17:bd:eb:e8:5b:8e:4b:02:43:2e:29:
         df:0b:22:5e:63:20:9c:b6:c6:b9:37:c5:ab:cd:85:2e:36:e0:
         22:e3:41:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2WFNTPLywZIV55H4c1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjUxZDA2NzA3MTVlYjY5ZWZhMmZiZmYxOTk4YzNiZGJk
OGE5ZjUwHhcNMjUwNDEzMTUwMTIzWhcNMjUwNDE0MTUwMTIzWjAzMTEwLwYDVQQD
Eyg4ZjgwY2IzY2UwZTg4NzUwYWQ3YWVjMzc5MjA4NzEwMWNmMjU0MWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnjbdp7klX9TFOlpHJkvOO/Xrrb1
qbPCGz/4gSVFQxXL8q0Lka1JpcWZUgxeoXxX+LdwjkRTdddBelgCrO1uUTuJniL2
kLxOso0/noujBv1WK6+/miexmkiJfr/WLLYikt0WpXTmeqEd1BpCkIeV4M9WbPY6
kIZ65l85dDlvwh91gR1iNB6phbeZSKfrgMMtKd1xUEB7sQnAlKkJt3+kX68HCk7m
n6o07erQNHM8BOANezPC2gWjMIvFVfHBCd5FjHDaVzXyVd07Iy3FqGe/klugXssp
l9tgfHneaF5P2dKLE5/7x/lgHp3RVm3RprbpWRMlncwZu7gkLQjC9VYhJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+Ayzzg6IdQrXrsN5IIcQHPJUHFMB8GA1UdIwQY
MBaAFI31HQZwcV62nvovv/GZjDvb2Kn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDkt
N2E3OTRkNWNlZDNkLzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDktN2E3OTRkNWNlZDNk
LzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBLQ9Kgz
+m2VtbD385Vhxgq30PNQiR4PbEjCSfdklWOkLzAoIg2lzQHznSNu5zHv0Iw9ETR9
qeMYC7Zan+uH0lWTEDEDj9g9Pust+0BFTDb387GLFMmTHxPMzLP2u948EGdX56YM
hBPeozLItm8Wxx9/8ng8Hp+Gb7fNxiyJw2j9Ah8Zit44tgnuVDWkeyxGi0kpu6oR
8QHd/c4WOHZmvGw+nLMlxJU0gw7TDHeusWLnpbZ0iP2IOEFvfXsSZZQg5izwaumR
RonFqUQ84r6vnP7Cnzz9V71JhuYNWHLMYxe96+hbjksCQy4p3wsiXmMgnLbGuTfF
q82FLjbgIuNBbQ==
-----END CERTIFICATE-----