Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
File:                     jzdbxsgRDxrXM993rPux1uxGXLg.mft (raw, json)
Hash identifier:          OSlBVaQwKJI9slh7fnQoHmyGzIUasGeZJJ0/Ko3iGQo=
Subject key identifier:   86:0A:84:8F:9A:50:0B:11:08:55:35:57:AE:33:51:7B:22:24:D7:37
Authority key identifier: 8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8
Certificate issuer:       /CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
Certificate serial:       01962F3D9CA10785C8CD36222D474E94539D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: WZtsrjQ6_4AAza3W0_Zf2Kriboc.roa (hash: IEF1jYRY7l8CDobzZH1+RG1BE/hQtGdqASizDfn8LB8=)
                          2: jzdbxsgRDxrXM993rPux1uxGXLg.crl (hash: txBbyDWErnKpJ4MiMflPRoypmXaxItxIuIP98nB0C8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9c:a1:07:85:c8:cd:36:22:2d:47:4e:94:53:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f375bc6c8110f1ad733df77acfbb1d6ec465cb8
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=860a848f9a500b1108553557ae33517b2224d737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ee:bc:42:f5:46:cd:50:39:e4:d4:ad:28:71:
                    9f:51:1d:e4:ad:0e:59:2e:cd:df:fd:42:0b:39:a0:
                    00:29:36:8c:ce:86:f8:a9:ac:65:da:a3:94:67:8d:
                    2b:6f:4e:58:5a:65:4e:e8:f2:85:15:16:a0:9e:10:
                    f0:43:23:70:af:04:13:c7:6c:f4:75:34:7f:0a:41:
                    89:0e:02:97:8c:61:35:6a:03:9e:70:ee:73:2c:44:
                    b5:05:1b:a8:42:8c:8f:06:ee:80:4b:ab:8c:81:13:
                    5d:5a:39:f3:e9:bf:9e:a4:c2:8a:45:70:e6:dc:15:
                    fc:0d:29:55:16:87:c0:16:93:72:c2:62:e9:57:34:
                    76:1a:a3:9e:79:a0:49:78:3b:9a:ad:54:9d:75:4a:
                    ee:11:ad:a3:aa:3d:98:89:5e:ae:53:16:8c:7a:f1:
                    24:db:6a:0e:db:a4:99:8c:56:1c:b1:93:13:85:74:
                    fe:b0:4c:95:d5:3b:5a:40:35:32:4b:35:97:20:1e:
                    c3:9c:b8:78:5e:bf:41:08:c7:7e:42:33:34:6a:fb:
                    c5:da:ee:11:72:c9:81:f6:9d:58:6c:59:2b:e3:d7:
                    80:fe:49:c2:0d:b6:2c:d9:d5:bb:59:2a:ac:c8:c7:
                    fc:a7:0e:5a:f6:f2:ac:6f:d7:97:e3:e1:f2:25:6a:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0A:84:8F:9A:50:0B:11:08:55:35:57:AE:33:51:7B:22:24:D7:37
            X509v3 Authority Key Identifier:
                keyid:8F:37:5B:C6:C8:11:0F:1A:D7:33:DF:77:AC:FB:B1:D6:EC:46:5C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzdbxsgRDxrXM993rPux1uxGXLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/7868a5-d500-4ae1-b3b7-809851a06b6a/1/jzdbxsgRDxrXM993rPux1uxGXLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9e:06:68:55:7c:9b:0b:4c:10:38:67:ca:51:6f:06:0c:83:
         fa:9b:52:ca:73:59:ed:fd:43:b3:d4:11:9b:eb:6a:27:3d:0c:
         3d:78:e0:fb:dd:1e:5e:f6:2f:9f:17:75:60:14:dd:ba:af:25:
         ee:29:fe:ed:bc:ac:f7:a0:58:ee:f5:d9:21:89:b4:6a:27:ac:
         6c:64:4a:b1:61:22:b4:b4:95:5b:d6:6a:7e:4f:b4:7e:cb:53:
         80:40:07:18:30:6a:fa:c9:c2:70:91:1c:0b:e3:b7:23:01:b5:
         d2:8e:97:92:fd:18:31:6f:83:23:8b:b7:4c:34:a1:f2:f3:e2:
         8b:3b:7c:26:c1:60:b2:37:48:8d:c1:67:fc:fb:17:a3:32:9d:
         a4:a8:3f:45:f2:83:59:80:f6:a4:c3:19:90:57:16:7b:9a:0f:
         d9:a6:b1:5f:5c:d9:80:42:13:fe:41:fd:a5:3e:e9:86:eb:7f:
         9e:0d:f5:e6:75:94:76:fc:0c:e1:a1:9c:02:bd:ba:5b:f3:5e:
         06:02:1a:fb:0b:8f:0d:47:44:1d:ce:54:1b:dc:90:bd:a1:3c:
         f1:2f:9c:17:7d:43:5c:ef:e3:70:05:f2:65:f1:87:ee:40:b8:
         bd:33:dd:3d:88:5f:f5:97:75:96:77:df:b3:2f:54:7a:0f:39:
         f9:ab:bf:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZyhB4XIzTYiLUdOlFOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzc1YmM2YzgxMTBmMWFkNzMzZGY3N2FjZmJiMWQ2ZWM0
NjVjYjgwHhcNMjUwNDEzMTMwMTI5WhcNMjUwNDE0MTMwMTI5WjAzMTEwLwYDVQQD
Eyg4NjBhODQ4ZjlhNTAwYjExMDg1NTM1NTdhZTMzNTE3YjIyMjRkNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u68QvVGzVA55NStKHGfUR3krQ5Z
Ls3f/UILOaAAKTaMzob4qaxl2qOUZ40rb05YWmVO6PKFFRagnhDwQyNwrwQTx2z0
dTR/CkGJDgKXjGE1agOecO5zLES1BRuoQoyPBu6AS6uMgRNdWjnz6b+epMKKRXDm
3BX8DSlVFofAFpNywmLpVzR2GqOeeaBJeDuarVSddUruEa2jqj2YiV6uUxaMevEk
22oO26SZjFYcsZMThXT+sEyV1TtaQDUySzWXIB7DnLh4Xr9BCMd+QjM0avvF2u4R
csmB9p1YbFkr49eA/knCDbYs2dW7WSqsyMf8pw5a9vKsb9eX4+HyJWpsowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYKhI+aUAsRCFU1V64zUXsiJNc3MB8GA1UdIwQY
MBaAFI83W8bIEQ8a1zPfd6z7sdbsRly4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjct
ODA5ODUxYTA2YjZhLzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My83ODY4YTUtZDUwMC00YWUxLWIzYjctODA5ODUxYTA2YjZh
LzEvanpkYnhzZ1JEeHJYTTk5M3JQdXgxdXhHWExnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJ4GaFV8
mwtMEDhnylFvBgyD+ptSynNZ7f1Ds9QRm+tqJz0MPXjg+90eXvYvnxd1YBTduq8l
7in+7bys96BY7vXZIYm0aiesbGRKsWEitLSVW9Zqfk+0fstTgEAHGDBq+snCcJEc
C+O3IwG10o6Xkv0YMW+DI4u3TDSh8vPiizt8JsFgsjdIjcFn/PsXozKdpKg/RfKD
WYD2pMMZkFcWe5oP2aaxX1zZgEIT/kH9pT7phut/ng315nWUdvwM4aGcAr26W/Ne
BgIa+wuPDUdEHc5UG9yQvaE88S+cF31DXO/jcAXyZfGH7kC4vTPdPYhf9Zd1lnff
sy9Ueg85+au/5g==
-----END CERTIFICATE-----