Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File:                     JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier:          n8jPngdKiNzRqsdKak0PKolr7GJ4tdoKqDgL7VxKCvA=
Subject key identifier:   7A:A1:3C:DE:4F:36:8B:D3:B2:DE:35:C9:B0:D6:C5:D2:E3:49:86:DF
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer:       /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial:       01962E9952AB37713018EA088C2875B42658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
                          2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
                          3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: sflvcBMDn1jj/vlWIvhGuVvDiEgiaM4gc1WcPO5hXXI=)
                          4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:52:ab:37:71:30:18:ea:08:8c:28:75:b4:26:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=7aa13cde4f368bd3b2de35c9b0d6c5d2e34986df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:27:16:1d:98:14:71:4d:0c:7e:a2:34:f3:
                    72:ed:86:ff:cc:ca:7e:a7:0a:b1:63:d6:a3:a1:1e:
                    e6:b4:3e:c8:1e:ae:2d:e7:88:0c:1a:cc:21:0c:6f:
                    2e:93:08:a2:8c:27:9b:f4:9e:22:60:f1:00:ba:6e:
                    60:2d:a1:e1:e8:3d:2a:a9:5b:68:d1:84:f8:f0:e7:
                    73:64:44:85:46:6e:15:4c:0b:19:6b:a4:a9:29:94:
                    fd:fe:2e:d1:11:0c:af:5a:f0:47:31:e7:08:75:fc:
                    90:77:cf:6a:f8:f8:f2:e8:3f:36:1a:70:99:0c:bf:
                    95:0f:f5:d7:47:d4:57:5a:53:8f:58:ac:18:63:bd:
                    ba:34:65:2b:80:2e:7b:32:99:67:e5:0e:da:74:cc:
                    41:f2:de:6c:21:82:cb:84:66:cf:c4:d1:fc:de:05:
                    9d:a3:2f:54:14:9b:1f:ae:96:ef:b6:f8:00:43:94:
                    d2:74:17:ee:50:5e:83:f8:ba:00:ea:3f:94:e6:41:
                    1e:04:3a:02:d8:6e:b4:d7:c3:da:16:83:42:87:4a:
                    2a:75:d6:37:4f:60:b9:54:36:52:eb:fb:3e:ab:c0:
                    27:42:23:66:0a:41:ca:2e:7e:3f:c1:b0:f9:04:54:
                    2a:9e:87:06:3e:25:a8:fa:59:70:e8:3c:e9:a1:f0:
                    20:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A1:3C:DE:4F:36:8B:D3:B2:DE:35:C9:B0:D6:C5:D2:E3:49:86:DF
            X509v3 Authority Key Identifier:
                keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:0b:68:ba:da:19:4e:bf:85:1a:e9:69:9b:b0:9f:b7:c7:63:
         57:7f:a1:62:25:84:db:c8:f7:42:4f:d4:a7:2c:73:17:2e:43:
         72:fe:14:d6:63:0f:dc:cf:60:47:e2:d7:07:a5:06:2e:8c:39:
         0d:7e:f1:e2:c7:c5:21:13:1f:88:cd:13:c2:fb:4e:5c:b4:e0:
         25:cc:25:c4:34:02:a6:b3:2a:62:7d:bf:36:29:bf:e6:ec:5a:
         9f:8a:fb:7a:b4:07:47:2e:cd:cb:77:8f:1c:3f:e4:c1:e1:7d:
         12:7a:72:ce:d3:6c:7a:14:4f:80:46:b5:f9:fa:ce:c9:89:dd:
         b6:e8:e3:36:bd:1d:c0:5c:d9:34:4b:c4:06:5a:a9:05:16:77:
         e6:40:b3:2a:b0:63:00:3a:ec:0c:7d:84:f2:59:be:2b:f5:cc:
         8c:54:39:4d:dd:13:b4:0b:b6:54:78:ea:98:f5:58:f6:c7:72:
         30:2a:cd:69:a2:c0:95:61:30:cc:c1:96:33:98:c9:18:ee:d5:
         85:e4:20:6a:39:01:4a:a8:dd:5d:fb:94:7a:ad:32:07:fa:1b:
         35:07:fd:3d:fc:7c:86:61:96:da:34:cc:94:dd:c6:bd:7b:d2:
         63:a9:85:39:81:d1:01:bd:c4:77:ce:71:d5:3f:d4:f4:db:29:
         0b:e9:66:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVKrN3EwGOoIjCh1tCZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MDBiMjA2MDYzMTQ4NThhN2IzZjJhOTc1ZThlOWQ5MTll
Yzc1M2EwHhcNMjUwNDEzMTAwMjAyWhcNMjUwNDE0MTAwMjAyWjAzMTEwLwYDVQQD
Eyg3YWExM2NkZTRmMzY4YmQzYjJkZTM1YzliMGQ2YzVkMmUzNDk4NmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI0nFh2YFHFNDH6iNPNy7Yb/zMp+
pwqxY9ajoR7mtD7IHq4t54gMGswhDG8ukwiijCeb9J4iYPEAum5gLaHh6D0qqVto
0YT48OdzZESFRm4VTAsZa6SpKZT9/i7REQyvWvBHMecIdfyQd89q+Pjy6D82GnCZ
DL+VD/XXR9RXWlOPWKwYY726NGUrgC57Mpln5Q7adMxB8t5sIYLLhGbPxNH83gWd
oy9UFJsfrpbvtvgAQ5TSdBfuUF6D+LoA6j+U5kEeBDoC2G6018PaFoNCh0oqddY3
T2C5VDZS6/s+q8AnQiNmCkHKLn4/wbD5BFQqnocGPiWo+llw6DzpofAgqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqhPN5PNovTst41ybDWxdLjSYbfMB8GA1UdIwQY
MBaAFCQAsgYGMUhYp7PyqXXo6dkZ7HU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTkt
OWM1ZTFkZWIyYzMzLzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTktOWM1ZTFkZWIyYzMz
LzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlAtoutoZ
Tr+FGulpm7Cft8djV3+hYiWE28j3Qk/UpyxzFy5Dcv4U1mMP3M9gR+LXB6UGLow5
DX7x4sfFIRMfiM0TwvtOXLTgJcwlxDQCprMqYn2/Nim/5uxan4r7erQHRy7Ny3eP
HD/kweF9EnpyztNsehRPgEa1+frOyYndtujjNr0dwFzZNEvEBlqpBRZ35kCzKrBj
ADrsDH2E8lm+K/XMjFQ5Td0TtAu2VHjqmPVY9sdyMCrNaaLAlWEwzMGWM5jJGO7V
heQgajkBSqjdXfuUeq0yB/obNQf9Pfx8hmGW2jTMlN3GvXvSY6mFOYHRAb3Ed85x
1T/U9NspC+lm9w==
-----END CERTIFICATE-----