Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File:                     jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier:          /ILIyCbHgigRCpMAfZiFeR62EuMrrMI/GRic7vxH+PY=
Subject key identifier:   B8:05:9C:E9:75:21:79:5C:A2:B8:F1:4B:AA:1C:FB:68:0B:A5:2C:4B
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer:       /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial:       01962ECF7C1549CB18B2B0E28A189E997851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number:          086D
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: djq23V4eA0hrtL3JjtzZq_jD0sw.roa (hash: u2ZEUIKDADE8gsgv3Z8cy40l1mRaFT3X8dzep8zrVh8=)
                          2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: XFnLkSsEfU0X5F2FD+hMWlzi2l9gl6dqZbqhen5bp1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7c:15:49:cb:18:b2:b0:e2:8a:18:9e:99:78:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=b8059ce97521795ca2b8f14baa1cfb680ba52c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:f5:d5:20:cb:14:98:0b:cb:27:d8:e9:cf:
                    a1:19:12:a7:b8:35:3d:8c:d1:f8:36:48:d3:1f:94:
                    96:be:5c:a6:3d:27:9a:a4:e5:56:bf:bf:0f:cc:d1:
                    15:b9:1e:cb:a4:b8:92:b3:67:b1:6d:98:46:c0:d0:
                    79:ed:ec:f0:15:a7:71:19:b3:4c:f2:b6:4d:e2:95:
                    7c:0c:08:ee:92:c6:1a:28:15:6a:52:cc:69:29:4f:
                    d2:e8:30:c6:e1:36:ee:68:d0:f5:07:67:54:44:64:
                    3f:bd:fb:0f:7d:e6:79:0d:da:2d:2e:4f:91:4a:ef:
                    ed:63:d3:1a:c7:05:07:0d:22:12:af:42:bc:53:b6:
                    91:d4:bb:45:c6:07:21:80:0a:08:68:b4:71:cd:cc:
                    94:33:8b:0f:22:7c:9a:dd:40:e4:61:52:5e:00:39:
                    c0:31:f4:7a:c2:04:32:07:16:31:d5:52:c2:ef:e6:
                    f5:3f:89:8d:87:c3:9a:23:9f:00:65:e7:34:cc:04:
                    b3:79:ae:6b:c5:d3:92:42:ff:b9:60:64:98:ed:76:
                    5b:53:b1:1b:97:6b:65:b4:09:05:12:86:fe:f2:6b:
                    e1:90:c2:41:2b:df:b2:3c:54:16:8a:45:d5:eb:7d:
                    f5:97:44:f4:9c:7c:a2:43:03:77:6c:2c:81:3e:cb:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:05:9C:E9:75:21:79:5C:A2:B8:F1:4B:AA:1C:FB:68:0B:A5:2C:4B
            X509v3 Authority Key Identifier:
                keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:09:63:0e:27:3e:4d:9a:c3:5a:bc:25:d3:1e:31:e4:45:85:
         1b:c7:51:57:08:81:5c:2b:ca:a2:e8:82:28:51:7c:f1:d7:64:
         8f:8c:c6:70:f7:a8:a2:42:56:06:2b:a7:9e:1b:b1:24:bd:56:
         20:ed:0f:1e:8a:46:20:1a:b7:15:fe:49:9c:3d:2c:e2:98:45:
         6f:e1:6f:b8:82:ed:66:07:ed:44:eb:ef:8c:2c:1b:c1:66:72:
         40:9c:ab:0c:56:fe:94:a2:76:d1:47:27:25:bb:66:d6:bf:28:
         47:35:87:6e:82:c8:de:2e:84:09:1b:ca:08:1c:2e:51:ec:b5:
         1b:b7:3c:6c:56:c4:d7:2d:78:63:a9:44:a3:1e:3a:12:5d:c6:
         2e:75:67:d8:65:b9:5d:9a:87:65:aa:3e:cc:c5:34:37:fc:57:
         71:90:14:7c:1b:c1:e1:32:50:21:2a:e5:c9:cc:dc:11:21:12:
         26:ed:d7:70:20:5b:0a:e2:99:a9:8e:d7:db:bd:10:4c:09:8e:
         73:28:cf:75:c5:74:32:5e:f0:05:73:8b:4c:7d:a4:c2:1f:f2:
         44:53:7e:0e:a3:c7:32:51:e2:57:46:99:2f:e3:6a:d0:cc:73:
         67:8b:ab:fc:87:8b:5d:af:36:bf:46:5e:ac:75:cf:77:76:97:
         61:96:2c:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3wVScsYsrDiihiemXhRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTNlYjhmZDlkOGRiNGI2OGE5NjljOGZmZGQ0ODQ2ODAy
YWIwYWIwHhcNMjUwNDEzMTEwMTExWhcNMjUwNDE0MTEwMTExWjAzMTEwLwYDVQQD
EyhiODA1OWNlOTc1MjE3OTVjYTJiOGYxNGJhYTFjZmI2ODBiYTUyYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHX11SDLFJgLyyfY6c+hGRKnuDU9
jNH4NkjTH5SWvlymPSeapOVWv78PzNEVuR7LpLiSs2exbZhGwNB57ezwFadxGbNM
8rZN4pV8DAjuksYaKBVqUsxpKU/S6DDG4TbuaND1B2dURGQ/vfsPfeZ5DdotLk+R
Su/tY9MaxwUHDSISr0K8U7aR1LtFxgchgAoIaLRxzcyUM4sPInya3UDkYVJeADnA
MfR6wgQyBxYx1VLC7+b1P4mNh8OaI58AZec0zASzea5rxdOSQv+5YGSY7XZbU7Eb
l2tltAkFEob+8mvhkMJBK9+yPFQWikXV6331l0T0nHyiQwN3bCyBPsu1SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgFnOl1IXlcorjxS6oc+2gLpSxLMB8GA1UdIwQY
MBaAFIwT64/Z2NtLaKlpyP/dSEaAKrCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEt
ZTY4MmJjYjlhNjNhLzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEtZTY4MmJjYjlhNjNh
LzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAljDic+
TZrDWrwl0x4x5EWFG8dRVwiBXCvKouiCKFF88ddkj4zGcPeookJWBiunnhuxJL1W
IO0PHopGIBq3Ff5JnD0s4phFb+FvuILtZgftROvvjCwbwWZyQJyrDFb+lKJ20Ucn
Jbtm1r8oRzWHboLI3i6ECRvKCBwuUey1G7c8bFbE1y14Y6lEox46El3GLnVn2GW5
XZqHZao+zMU0N/xXcZAUfBvB4TJQISrlyczcESESJu3XcCBbCuKZqY7X270QTAmO
cyjPdcV0Ml7wBXOLTH2kwh/yRFN+DqPHMlHiV0aZL+Nq0MxzZ4ur/IeLXa82v0Ze
rHXPd3aXYZYspw==
-----END CERTIFICATE-----