Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
File:                     jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft (raw, json)
Hash identifier:          TDPHtkc1a0eMOwdDgYnt01xa5zWAVkncPBzj/GF8lJE=
Subject key identifier:   83:C6:BF:9C:D3:06:8C:19:0A:8C:99:A7:D0:91:03:D5:D4:A0:45:89
Authority key identifier: 8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
Certificate issuer:       /CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Certificate serial:       01962F074AC02CDA3F9864AD49138CC1E73A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
Manifest number:          0653
Signing time:             Sun 13 Apr 2025 12:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:09 +0000
Files and hashes:         1: jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl (hash: Ks+go35ygotTZXoG/MnTCYT0nePArdWvsWP7wNGQxTY=)
                          2: sMrQzs33rrsyMFOFMFTjCINTzTQ.roa (hash: M0Ho0S0WzI5DOHL0C5sQ6HcQ5teNM3kvhCzMJa29/0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:4a:c0:2c:da:3f:98:64:ad:49:13:8c:c1:e7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
        Validity
            Not Before: Apr 13 12:02:09 2025 GMT
            Not After : Apr 14 12:02:09 2025 GMT
        Subject: CN=83c6bf9cd3068c190a8c99a7d09103d5d4a04589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:23:45:c0:14:c2:dc:3f:38:ca:87:a5:e2:
                    d3:9e:7f:70:51:1d:21:24:03:e9:4c:2a:5c:47:fc:
                    7d:89:43:35:56:90:ab:22:e4:0f:b2:10:5f:35:36:
                    b5:5b:2e:bc:5e:34:7a:d1:8f:64:5d:1c:42:a3:ec:
                    56:d8:cc:b3:03:de:06:8b:5a:14:47:db:45:de:e8:
                    78:bc:fe:69:7f:c9:14:dd:6a:44:42:5b:02:b9:8b:
                    00:18:ac:02:4f:be:99:9e:45:1a:00:a4:a9:5a:02:
                    eb:9c:38:b1:b5:50:eb:b1:46:a0:5c:9c:3e:26:b3:
                    84:06:6d:7b:a1:26:e3:89:9e:0e:4b:01:11:ad:d9:
                    e6:e6:e0:d0:68:6c:73:d1:7f:39:47:fd:51:69:15:
                    24:29:7c:ac:fa:c4:af:f1:0c:eb:5e:d0:fb:6a:0d:
                    55:58:9c:86:65:a9:cd:39:a2:6a:7d:0f:28:f8:70:
                    18:2d:d2:8b:e6:80:28:86:12:9e:0d:f4:d3:98:d3:
                    3d:b8:41:f9:f9:3e:47:f1:cf:59:b8:08:5a:b2:2c:
                    36:3b:17:6c:52:7c:dd:07:b1:bf:73:25:0d:8e:f3:
                    0a:5e:a6:fb:0e:48:ae:64:38:1f:04:15:ab:84:a4:
                    0b:f6:95:8d:43:5a:2f:1d:32:b2:07:04:e2:4f:05:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C6:BF:9C:D3:06:8C:19:0A:8C:99:A7:D0:91:03:D5:D4:A0:45:89
            X509v3 Authority Key Identifier:
                keyid:8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0f:29:67:8c:c4:8f:e6:8a:c0:f2:0b:50:da:48:c9:3e:b6:
         ef:30:23:b3:c3:ad:67:b3:37:21:38:a7:97:36:bd:7e:c1:93:
         55:68:cd:84:44:37:e6:cf:89:e5:7e:48:84:de:5e:15:0a:05:
         5d:dc:cc:5a:96:23:b7:69:1c:4c:ed:48:f4:01:88:12:ea:8c:
         a7:0e:60:7f:bf:54:85:ed:11:58:e3:54:d8:ec:ca:ed:38:87:
         e0:a2:75:b3:0f:3f:82:b9:a1:84:f3:ab:9e:14:bc:3c:1d:22:
         8d:ef:c3:84:f6:a6:af:96:41:b6:7f:09:f3:37:f7:aa:ff:d6:
         5f:89:da:02:43:c4:15:ff:23:58:fd:98:ae:4c:b4:ee:0d:70:
         53:68:91:b6:f6:4b:e8:44:9e:68:ca:ee:bc:c4:da:bc:84:62:
         e9:2b:49:12:32:1b:a5:59:ae:aa:11:cd:c7:c3:00:52:6f:d0:
         16:3a:a9:64:08:47:a8:2e:60:c3:90:f0:37:6f:65:53:7e:5a:
         dc:76:cb:03:7a:7d:28:83:12:f7:a2:6a:5d:6f:c5:23:18:f9:
         25:1c:70:a8:b8:27:d2:0a:0a:84:66:ea:cf:94:49:93:57:d9:
         36:c9:b0:08:fb:8f:ea:15:e1:bd:ca:97:df:83:96:af:e8:e9:
         eb:b1:f3:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvB0rALNo/mGStSROMwec6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZThkZjM5ZTM2MjYwODdhZTE2ZjYwZWJlNjFhY2M4YzZk
MTM1NzMwHhcNMjUwNDEzMTIwMjA5WhcNMjUwNDE0MTIwMjA5WjAzMTEwLwYDVQQD
Eyg4M2M2YmY5Y2QzMDY4YzE5MGE4Yzk5YTdkMDkxMDNkNWQ0YTA0NTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yQjRcAUwtw/OMqHpeLTnn9wUR0h
JAPpTCpcR/x9iUM1VpCrIuQPshBfNTa1Wy68XjR60Y9kXRxCo+xW2MyzA94Gi1oU
R9tF3uh4vP5pf8kU3WpEQlsCuYsAGKwCT76ZnkUaAKSpWgLrnDixtVDrsUagXJw+
JrOEBm17oSbjiZ4OSwERrdnm5uDQaGxz0X85R/1RaRUkKXys+sSv8QzrXtD7ag1V
WJyGZanNOaJqfQ8o+HAYLdKL5oAohhKeDfTTmNM9uEH5+T5H8c9ZuAhasiw2Oxds
UnzdB7G/cyUNjvMKXqb7DkiuZDgfBBWrhKQL9pWNQ1ovHTKyBwTiTwWWuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPGv5zTBowZCoyZp9CRA9XUoEWJMB8GA1UdIwQY
MBaAFIzo3znjYmCHrhb2Dr5hrMjG0TVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak9qZk9lTmlZSWV1RnZZT3ZtR3N5TWJSTlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zNWIwMjAtYTIyNS00ZGZmLWIxNzIt
ZDA4MThlZjA2NjU5LzEvak9qZk9lTmlZSWV1RnZZT3ZtR3N5TWJSTlhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8zNWIwMjAtYTIyNS00ZGZmLWIxNzItZDA4MThlZjA2NjU5
LzEvak9qZk9lTmlZSWV1RnZZT3ZtR3N5TWJSTlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg8pZ4zE
j+aKwPILUNpIyT627zAjs8OtZ7M3ITinlza9fsGTVWjNhEQ35s+J5X5IhN5eFQoF
XdzMWpYjt2kcTO1I9AGIEuqMpw5gf79Uhe0RWONU2OzK7TiH4KJ1sw8/grmhhPOr
nhS8PB0ije/DhPamr5ZBtn8J8zf3qv/WX4naAkPEFf8jWP2Yrky07g1wU2iRtvZL
6ESeaMruvMTavIRi6StJEjIbpVmuqhHNx8MAUm/QFjqpZAhHqC5gw5DwN29lU35a
3HbLA3p9KIMS96JqXW/FIxj5JRxwqLgn0goKhGbqz5RJk1fZNsmwCPuP6hXhvcqX
34OWr+jp67Hz0Q==
-----END CERTIFICATE-----