Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File:                     jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier:          dIexHRl6Rt0SHBYY1fzXqlEyjCqhZwaFAwgZPmZ5cLE=
Subject key identifier:   C1:37:1A:8A:09:0D:F1:06:FE:D3:36:30:07:29:68:95:63:80:BD:0D
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer:       /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial:       01962F06DE990C8F89280B93708B57CFA268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number:          07AB
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
                          2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: nN9k6psHVM7AtkF47yjRg7ni6mx8jfej3yVL35usfq8=)
                          3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:de:99:0c:8f:89:28:0b:93:70:8b:57:cf:a2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=c1371a8a090df106fed33630072968956380bd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:71:aa:83:d9:c5:ba:2c:04:0a:a3:93:00:3a:
                    f0:0a:c8:36:af:4c:7a:de:3e:0a:95:ca:09:b1:79:
                    1c:44:50:e9:b9:e6:1b:c8:dc:45:cd:67:b7:25:26:
                    22:d1:c6:98:74:24:ad:f6:a6:e6:0d:33:16:97:d3:
                    d2:8c:ea:af:3d:e0:a0:24:46:93:9a:b8:41:25:5c:
                    90:85:f0:61:c4:1d:31:86:f1:29:eb:07:e3:fe:39:
                    db:26:f8:06:8a:d0:61:46:9e:7d:61:be:9c:56:e2:
                    4b:5b:5d:89:cb:1f:13:7d:2f:bc:5e:26:2d:95:d3:
                    b9:1b:e5:8a:5c:5e:16:38:36:25:1d:b2:d8:30:d9:
                    e3:83:04:bb:ed:d9:e8:05:b6:67:84:4b:d7:28:29:
                    fa:b1:4f:59:a7:29:59:ac:0e:c6:bc:ef:51:ca:f6:
                    b7:9f:83:b4:72:22:e2:ac:48:86:3f:f1:18:a5:9f:
                    16:62:08:e3:12:78:eb:cf:40:f0:68:b5:53:f6:d9:
                    37:5d:b8:d3:92:c1:62:fb:5f:99:85:bd:67:30:c8:
                    60:65:c7:6f:05:83:bc:c1:81:51:db:39:ae:9d:46:
                    2a:59:92:e0:01:bb:7e:89:64:0c:4d:b9:51:1b:7e:
                    11:50:9c:40:1f:17:b2:d7:40:5f:58:1e:f5:fa:9d:
                    81:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:37:1A:8A:09:0D:F1:06:FE:D3:36:30:07:29:68:95:63:80:BD:0D
            X509v3 Authority Key Identifier:
                keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6f:65:b8:aa:63:1e:9f:0b:84:12:77:65:ce:07:d0:80:57:
         54:b8:30:6d:bf:25:ca:2f:00:ef:a2:2c:99:1e:56:1a:c0:b3:
         43:db:32:af:c4:4f:64:ba:74:2b:0b:b0:21:e6:e1:54:d8:3f:
         f0:43:70:cc:47:56:07:f6:de:71:df:65:98:40:6f:0f:af:95:
         0c:f8:49:c2:fa:77:70:49:52:7d:56:66:df:cb:49:9b:70:ea:
         78:09:32:ca:2b:a6:33:33:44:d7:1e:15:45:f5:3c:4e:18:5c:
         83:bc:35:c8:40:1c:69:53:f4:6d:7f:2c:6a:c1:a9:cd:6b:76:
         31:e0:1b:12:d5:cb:44:b4:f6:61:7c:94:7e:d5:88:3e:13:7b:
         c7:82:ee:f2:83:50:e5:9e:cd:77:59:4d:c7:78:fa:07:a1:04:
         ef:fe:56:f8:e1:95:88:8b:d5:0c:da:e1:48:47:83:e7:c8:f0:
         75:62:47:9e:44:86:cb:5f:c4:08:ce:13:22:a3:e7:d2:11:57:
         57:11:2d:93:43:0f:8d:40:37:3e:f7:b3:b9:5b:95:0e:32:07:
         d6:79:80:12:fd:36:b6:fd:57:94:bd:e1:95:a9:73:e3:93:5c:
         d8:44:c8:2a:a5:46:c3:45:7e:46:ae:df:73:cc:43:0e:35:2c:
         c1:c6:6a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBt6ZDI+JKAuTcItXz6JoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzY5YzZiYmU4OWU3YzA0NzliNjE3NzQ0YTQ0MjRmNjY2
NzQ5NDQwHhcNMjUwNDEzMTIwMTQxWhcNMjUwNDE0MTIwMTQxWjAzMTEwLwYDVQQD
EyhjMTM3MWE4YTA5MGRmMTA2ZmVkMzM2MzAwNzI5Njg5NTYzODBiZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnGqg9nFuiwECqOTADrwCsg2r0x6
3j4KlcoJsXkcRFDpueYbyNxFzWe3JSYi0caYdCSt9qbmDTMWl9PSjOqvPeCgJEaT
mrhBJVyQhfBhxB0xhvEp6wfj/jnbJvgGitBhRp59Yb6cVuJLW12Jyx8TfS+8XiYt
ldO5G+WKXF4WODYlHbLYMNnjgwS77dnoBbZnhEvXKCn6sU9ZpylZrA7GvO9Ryva3
n4O0ciLirEiGP/EYpZ8WYgjjEnjrz0DwaLVT9tk3XbjTksFi+1+Zhb1nMMhgZcdv
BYO8wYFR2zmunUYqWZLgAbt+iWQMTblRG34RUJxAHxey10BfWB71+p2BSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFME3GooJDfEG/tM2MAcpaJVjgL0NMB8GA1UdIwQY
MBaAFI3GnGu+iefAR5thd0SkQk9mZ0lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzct
YmI1Y2FhYzJlOTAzLzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yM2RiNWMtMWExMC00NGM2LTlkNzctYmI1Y2FhYzJlOTAz
LzEvamNhY2E3Nko1OEJIbTJGM1JLUkNUMlpuU1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQW9luKpj
Hp8LhBJ3Zc4H0IBXVLgwbb8lyi8A76IsmR5WGsCzQ9syr8RPZLp0KwuwIebhVNg/
8ENwzEdWB/becd9lmEBvD6+VDPhJwvp3cElSfVZm38tJm3DqeAkyyiumMzNE1x4V
RfU8Thhcg7w1yEAcaVP0bX8sasGpzWt2MeAbEtXLRLT2YXyUftWIPhN7x4Lu8oNQ
5Z7Nd1lNx3j6B6EE7/5W+OGViIvVDNrhSEeD58jwdWJHnkSGy1/ECM4TIqPn0hFX
VxEtk0MPjUA3PvezuVuVDjIH1nmAEv02tv1XlL3hlalz45Nc2ETIKqVGw0V+Rq7f
c8xDDjUswcZqaQ==
-----END CERTIFICATE-----