Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
File:                     rscJx80lRFyxg8_P69Syv8eEwxg.mft (raw, json)
Hash identifier:          H1Ar7jmb2PKODkSjvnGY1tA7FkYaMdDe53xutF/t+eE=
Subject key identifier:   38:31:50:34:47:2E:79:05:6E:E0:7D:51:D5:C4:37:F9:12:DA:82:D1
Authority key identifier: AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18
Certificate issuer:       /CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
Certificate serial:       01962F74E1679C607FC8358BD495C55255C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft
Manifest number:          1477
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: cZMPtHPEAZf_3rOtN3QOawqy6Fo.roa (hash: 5NwHkOnEjFTXG8rGVd8jWfp99z8LekTFbUc8ApfS/FM=)
                          2: rscJx80lRFyxg8_P69Syv8eEwxg.crl (hash: oBmqj4g//1S99kZQW3ZfW/g8/gnLUGK/LdEvGx8Xnps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e1:67:9c:60:7f:c8:35:8b:d4:95:c5:52:55:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec709c7cd25445cb183cfcfebd4b2bfc784c318
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=38315034472e79056ee07d51d5c437f912da82d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:a5:68:a5:a0:2c:1c:2f:a5:54:b7:3c:97:
                    78:63:8c:2d:27:fe:34:d2:62:00:44:ed:c2:b4:48:
                    d1:26:05:5c:8f:0c:dd:4d:15:3d:88:eb:44:30:97:
                    c8:61:61:81:98:fe:95:7c:98:3c:1b:05:a9:11:54:
                    75:d1:53:2c:f1:69:d2:ab:c9:43:31:c5:76:22:e0:
                    65:1c:0e:c2:6b:65:c0:09:df:72:d2:95:a6:f2:3e:
                    cb:f9:a2:48:76:48:c9:c1:09:6f:14:85:f2:f1:bc:
                    f6:e7:30:22:33:73:35:73:89:ac:71:c2:25:f9:a8:
                    57:b1:7b:e6:c7:30:bb:02:b4:0c:84:fc:c0:88:2f:
                    3e:9d:98:fc:4c:1c:a5:5e:f1:77:e6:0d:9a:82:9e:
                    04:b4:df:74:60:29:0b:dc:3c:b0:24:63:63:10:79:
                    97:8c:c1:d5:81:fd:79:10:54:2f:c1:75:36:5a:01:
                    88:bb:ce:7f:34:f3:b9:46:ec:f9:18:f0:2d:20:cc:
                    ad:0d:d5:4b:4b:ed:2c:3e:10:99:9d:45:09:36:fc:
                    25:67:f0:15:43:fc:1b:7f:79:6d:29:52:7f:ef:df:
                    f9:7c:d5:b5:f8:ca:ae:1c:96:f7:a4:c0:cd:d7:32:
                    37:44:02:c3:35:1b:c4:e8:c2:eb:81:3c:d2:84:4c:
                    8a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:31:50:34:47:2E:79:05:6E:E0:7D:51:D5:C4:37:F9:12:DA:82:D1
            X509v3 Authority Key Identifier:
                keyid:AE:C7:09:C7:CD:25:44:5C:B1:83:CF:CF:EB:D4:B2:BF:C7:84:C3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rscJx80lRFyxg8_P69Syv8eEwxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9fa093-43d6-4aa0-8a95-f7fa8e2ff95f/1/rscJx80lRFyxg8_P69Syv8eEwxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ab:16:4a:9c:89:92:4b:75:79:01:65:ac:1a:78:4c:0a:b4:
         7f:48:42:97:98:23:d6:d5:e2:99:08:f6:1b:b6:cd:fc:97:ea:
         06:53:14:f7:61:87:85:48:e4:0e:d6:35:6d:23:0c:22:06:7e:
         6b:d4:f0:e9:4a:49:ba:d0:4f:e4:0f:4e:05:36:45:ea:cc:37:
         22:a7:47:13:3b:fd:c3:bd:ee:b4:7b:1c:2f:94:12:41:95:ce:
         08:f6:73:51:ce:0a:12:5c:3c:8b:c0:df:9b:c5:8e:74:f4:a9:
         f6:71:b6:80:5e:b9:22:f9:08:12:07:ac:24:00:fe:8a:6b:5c:
         af:0f:05:60:24:84:b2:25:42:a0:70:e0:b0:36:d2:73:f4:e7:
         ee:0b:8f:3f:59:be:6a:a5:01:ce:35:f6:70:ba:6c:38:db:3c:
         38:b6:cf:c4:f5:f8:fe:43:dc:4d:4a:53:47:75:f6:f1:b7:02:
         08:a6:8f:0d:88:22:c9:86:ee:3a:1f:fd:8e:91:54:33:f1:19:
         2c:af:a9:7f:70:a8:1c:f1:95:3d:c7:65:5a:e9:b3:bb:52:b9:
         09:23:83:6c:51:d2:8f:27:e6:58:a7:b6:0e:8d:71:8e:2c:22:
         65:04:4a:b5:d7:db:32:0d:45:ba:f3:16:85:b2:2f:14:ae:aa:
         84:8c:04:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOFnnGB/yDWL1JXFUlXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYzcwOWM3Y2QyNTQ0NWNiMTgzY2ZjZmViZDRiMmJmYzc4
NGMzMTgwHhcNMjUwNDEzMTQwMTUxWhcNMjUwNDE0MTQwMTUxWjAzMTEwLwYDVQQD
EygzODMxNTAzNDQ3MmU3OTA1NmVlMDdkNTFkNWM0MzdmOTEyZGE4MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57OlaKWgLBwvpVS3PJd4Y4wtJ/40
0mIARO3CtEjRJgVcjwzdTRU9iOtEMJfIYWGBmP6VfJg8GwWpEVR10VMs8WnSq8lD
McV2IuBlHA7Ca2XACd9y0pWm8j7L+aJIdkjJwQlvFIXy8bz25zAiM3M1c4msccIl
+ahXsXvmxzC7ArQMhPzAiC8+nZj8TBylXvF35g2agp4EtN90YCkL3DywJGNjEHmX
jMHVgf15EFQvwXU2WgGIu85/NPO5Ruz5GPAtIMytDdVLS+0sPhCZnUUJNvwlZ/AV
Q/wbf3ltKVJ/79/5fNW1+MquHJb3pMDN1zI3RALDNRvE6MLrgTzShEyKrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgxUDRHLnkFbuB9UdXEN/kS2oLRMB8GA1UdIwQY
MBaAFK7HCcfNJURcsYPPz+vUsr/HhMMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85ZmEwOTMtNDNkNi00YWEwLThhOTUt
ZjdmYThlMmZmOTVmLzEvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi85ZmEwOTMtNDNkNi00YWEwLThhOTUtZjdmYThlMmZmOTVm
LzEvcnNjSng4MGxSRnl4ZzhfUDY5U3l2OGVFd3hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKsWSpyJ
kkt1eQFlrBp4TAq0f0hCl5gj1tXimQj2G7bN/JfqBlMU92GHhUjkDtY1bSMMIgZ+
a9Tw6UpJutBP5A9OBTZF6sw3IqdHEzv9w73utHscL5QSQZXOCPZzUc4KElw8i8Df
m8WOdPSp9nG2gF65IvkIEgesJAD+imtcrw8FYCSEsiVCoHDgsDbSc/Tn7guPP1m+
aqUBzjX2cLpsONs8OLbPxPX4/kPcTUpTR3X28bcCCKaPDYgiyYbuOh/9jpFUM/EZ
LK+pf3CoHPGVPcdlWumzu1K5CSODbFHSjyfmWKe2Do1xjiwiZQRKtdfbMg1FuvMW
hbIvFK6qhIwEzQ==
-----END CERTIFICATE-----