Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File:                     J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier:          +APJZqIX+46uRXwqdzZmYTNksOpAEpy59bB+CFC9Dtg=
Subject key identifier:   A3:06:E5:14:DD:10:CF:29:27:30:BF:AA:67:C7:90:12:6D:CF:30:6C
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer:       /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial:       01962F3DDAC99E3C811288C38DA744FC8683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number:          0B09
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa (hash: vD/F/679cA73k7OkjDpOttD102xB/cx2AgMSLChmbBA=)
                          2: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: pAS8SsHMrtvX1Tezdtlk7YzgSnWXGqkNuZdYvt6oySs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:da:c9:9e:3c:81:12:88:c3:8d:a7:44:fc:86:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=a306e514dd10cf292730bfaa67c790126dcf306c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1e:fa:a7:2a:de:90:bd:70:33:f9:86:74:9f:
                    b4:c7:85:75:e1:e1:e4:b2:5b:06:c1:8b:04:6b:da:
                    8b:ae:bf:18:a6:32:4e:e7:8e:dd:2a:62:82:5e:33:
                    07:a7:f5:38:cd:93:6f:6a:66:1f:bd:68:e2:4d:34:
                    54:9d:47:4a:1b:6e:0b:0e:8a:ee:71:5f:10:5f:cf:
                    6a:54:7a:19:b3:c0:3e:f1:06:08:08:3a:f3:bc:cd:
                    3d:da:63:6d:8c:ab:aa:3c:52:45:95:6b:ba:0d:62:
                    f6:4c:dd:7a:5c:14:7f:a6:93:50:f7:54:fc:34:9a:
                    7a:7a:50:f4:f2:79:43:9b:6b:0c:9f:11:72:63:81:
                    78:f4:99:82:e4:6a:38:26:88:b0:ca:61:7f:d2:8f:
                    1e:ae:d7:f4:5d:78:9f:3e:c5:60:a0:23:77:82:a0:
                    46:56:4e:3e:21:73:9e:79:82:40:bb:4a:64:2b:1f:
                    5f:5e:8a:a9:10:da:41:48:53:a8:74:04:9a:5a:e3:
                    d8:17:de:cf:58:bb:e9:06:8e:ff:10:c1:be:79:c7:
                    34:13:47:9f:87:1a:b3:76:64:0c:d7:be:73:80:f4:
                    b6:fc:cf:8f:14:cc:0a:4b:55:cc:07:62:72:4e:0c:
                    89:a7:d3:96:8b:8a:a6:54:5c:99:d5:e3:cd:14:d0:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:E5:14:DD:10:CF:29:27:30:BF:AA:67:C7:90:12:6D:CF:30:6C
            X509v3 Authority Key Identifier:
                keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cd:7f:8a:fe:65:bc:16:7e:c5:bc:5e:69:a6:54:95:ed:b2:
         aa:f6:08:ec:17:d5:eb:45:5f:71:4d:0c:06:3e:0e:70:b9:e6:
         bd:73:2a:2f:99:ae:7d:0a:a3:55:4e:cf:30:9c:ce:3f:ca:5e:
         65:7f:79:42:52:b1:fa:b5:9e:4e:0a:5f:84:85:83:c7:54:03:
         be:63:d9:0d:75:13:27:8c:3d:38:ff:49:20:fb:69:a0:a9:8e:
         e1:49:e7:47:32:44:c5:28:b2:af:5e:f0:fe:11:59:40:04:94:
         1c:bf:9f:fa:1e:c0:25:c9:cb:b3:34:ec:0b:45:ad:80:7c:11:
         2d:8e:ab:95:d4:78:03:76:48:4f:6c:2e:49:6c:84:61:5f:f7:
         7c:0f:4a:97:31:89:67:5a:a6:8d:ae:14:39:a6:2a:11:3b:7e:
         d1:a3:7f:8d:98:9d:15:2d:d2:a6:a1:0d:c0:81:0f:5c:8a:0a:
         7d:c2:71:35:73:db:9b:ff:59:e3:02:17:c2:b5:8d:aa:a9:0c:
         06:51:80:1d:af:13:0b:2e:14:ee:13:e4:a9:1e:29:34:55:cb:
         07:63:26:8f:52:86:3f:36:96:a7:51:45:a5:64:68:cb:93:2c:
         c9:d2:8e:ac:73:c0:ee:fd:2a:0e:29:92:7f:bf:0d:2f:37:1b:
         e0:0e:6c:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdrJnjyBEojDjadE/IaDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NmFiYjFhZDU2N2U1YmIxZTQ3NWE3MmEwYTY4NDUzZTNm
YmExY2QwHhcNMjUwNDEzMTMwMTQ0WhcNMjUwNDE0MTMwMTQ0WjAzMTEwLwYDVQQD
EyhhMzA2ZTUxNGRkMTBjZjI5MjczMGJmYWE2N2M3OTAxMjZkY2YzMDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh76pyrekL1wM/mGdJ+0x4V14eHk
slsGwYsEa9qLrr8YpjJO547dKmKCXjMHp/U4zZNvamYfvWjiTTRUnUdKG24LDoru
cV8QX89qVHoZs8A+8QYICDrzvM092mNtjKuqPFJFlWu6DWL2TN16XBR/ppNQ91T8
NJp6elD08nlDm2sMnxFyY4F49JmC5Go4JoiwymF/0o8ertf0XXifPsVgoCN3gqBG
Vk4+IXOeeYJAu0pkKx9fXoqpENpBSFOodASaWuPYF97PWLvpBo7/EMG+ecc0E0ef
hxqzdmQM175zgPS2/M+PFMwKS1XMB2JyTgyJp9OWi4qmVFyZ1ePNFNAZ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMG5RTdEM8pJzC/qmfHkBJtzzBsMB8GA1UdIwQY
MBaAFCdquxrVZ+W7HkdacqCmhFPj+6HNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MjY5NGYtODlhNi00M2M4LTgzNDYt
YmIwZWVkMTNmMjNiLzEvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80MjY5NGYtODlhNi00M2M4LTgzNDYtYmIwZWVkMTNmMjNi
LzEvSjJxN0d0Vm41YnNlUjFweW9LYUVVLVA3b2MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANc1/iv5l
vBZ+xbxeaaZUle2yqvYI7BfV60VfcU0MBj4OcLnmvXMqL5mufQqjVU7PMJzOP8pe
ZX95QlKx+rWeTgpfhIWDx1QDvmPZDXUTJ4w9OP9JIPtpoKmO4UnnRzJExSiyr17w
/hFZQASUHL+f+h7AJcnLszTsC0WtgHwRLY6rldR4A3ZIT2wuSWyEYV/3fA9KlzGJ
Z1qmja4UOaYqETt+0aN/jZidFS3SpqENwIEPXIoKfcJxNXPbm/9Z4wIXwrWNqqkM
BlGAHa8TCy4U7hPkqR4pNFXLB2Mmj1KGPzaWp1FFpWRoy5MsydKOrHPA7v0qDimS
f78NLzcb4A5snQ==
-----END CERTIFICATE-----