Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File:                     JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier:          hLClwIWr8iR3SxdQ7grHfCRrN2TWePdHLlBWzPcDmmg=
Subject key identifier:   25:9E:9D:61:E7:44:3A:F7:A7:13:A9:15:A6:B6:80:E9:07:36:27:FB
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer:       /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial:       01962F3DB5CE59890185B4B76EC3DBCF1A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number:          0127
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: ndteYTQJvtFeRhvnxgasS4S0eNGXXYrj+UguSkKIzRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b5:ce:59:89:01:85:b4:b7:6e:c3:db:cf:1a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=259e9d61e7443af7a713a915a6b680e9073627fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:38:7f:6d:35:ef:1b:a1:4a:9c:b9:aa:14:
                    b9:fe:1e:ad:c7:76:3a:d3:66:a9:ce:2e:9b:ee:95:
                    ae:17:e1:92:11:55:6d:80:0f:f1:6d:eb:9b:1a:33:
                    6b:fc:c2:b5:d5:4d:59:97:44:4b:b1:25:69:06:5a:
                    bb:00:d6:4a:83:83:54:9c:68:92:df:4c:0e:15:bf:
                    e0:7e:a0:a5:2f:88:1d:d6:09:e8:09:cb:4a:9f:b4:
                    03:9e:bd:d8:f5:de:2d:98:b7:bf:f9:b2:99:ed:92:
                    d6:e7:a8:a1:a9:0b:a6:a3:5c:42:0d:9c:3c:27:d5:
                    6e:8c:cb:ae:ad:be:03:8a:8d:b7:ff:3a:bd:e3:da:
                    c5:0b:ea:8e:91:db:82:ae:0e:89:06:56:57:3f:a2:
                    17:aa:fc:e4:17:8a:8f:bd:23:de:85:36:3e:ef:87:
                    0a:b4:dc:f5:fd:90:fa:83:79:a8:37:3c:60:c3:7e:
                    f8:38:e8:44:3e:d9:d1:a4:15:2f:2e:3f:23:fa:87:
                    70:04:61:af:09:b4:c7:3f:cf:89:b4:35:73:57:18:
                    69:4e:77:61:c1:14:16:ad:22:5e:4c:2a:48:70:f1:
                    f0:85:eb:65:d3:b5:1c:27:28:6d:54:9c:27:1b:26:
                    04:28:4b:c9:d0:38:48:81:00:2b:67:39:f7:c1:35:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9E:9D:61:E7:44:3A:F7:A7:13:A9:15:A6:B6:80:E9:07:36:27:FB
            X509v3 Authority Key Identifier:
                keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:de:7b:4d:27:a0:28:3a:77:d1:6d:80:de:98:83:20:1c:ad:
         2f:4e:3b:db:03:3a:4c:aa:aa:ab:85:1b:84:cb:5c:68:0b:06:
         d9:f1:bc:e8:2f:ee:86:3c:49:11:5c:4c:ef:cc:c9:27:6e:5f:
         3f:f3:44:80:e8:09:98:9a:33:81:ef:3d:95:a2:e1:d6:a9:f7:
         38:f0:73:fb:ff:f0:91:55:0b:a0:c9:98:bc:3f:4f:53:a0:ce:
         54:f8:8f:0e:dc:7f:af:77:ee:47:e2:39:36:f3:77:4f:8d:0b:
         f4:66:29:f2:37:c3:47:d8:82:d9:0f:35:55:92:fc:10:25:6d:
         66:a6:0c:db:74:6c:d9:f5:ae:13:24:90:bd:42:c7:d4:7a:a6:
         79:2e:2e:7a:e3:08:1f:a9:18:8c:a9:68:07:6a:a1:91:e8:f8:
         54:5f:5c:65:aa:ab:84:cf:0b:8b:37:b8:ad:2f:48:57:d3:46:
         4c:d1:bf:30:e1:30:e3:e7:0f:b3:39:e7:99:93:34:db:21:06:
         fb:41:6a:af:16:21:cf:07:49:b6:d5:25:f0:d2:70:71:14:ea:
         aa:cb:2a:93:c9:8b:a9:ba:87:25:b8:90:8b:6f:51:98:74:28:
         ed:cd:67:ac:fc:d6:a2:b5:f9:8c:33:87:e4:e7:6a:a0:aa:0c:
         59:77:bf:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbXOWYkBhbS3bsPbzxoyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MjQ4MDRhMDI3NzcwMzljNGNmZDhjMDBkYzI5ZmE5MWQ4
YTM5MGMwHhcNMjUwNDEzMTMwMTM1WhcNMjUwNDE0MTMwMTM1WjAzMTEwLwYDVQQD
EygyNTllOWQ2MWU3NDQzYWY3YTcxM2E5MTVhNmI2ODBlOTA3MzYyN2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHA4f2017xuhSpy5qhS5/h6tx3Y6
02apzi6b7pWuF+GSEVVtgA/xbeubGjNr/MK11U1Zl0RLsSVpBlq7ANZKg4NUnGiS
30wOFb/gfqClL4gd1gnoCctKn7QDnr3Y9d4tmLe/+bKZ7ZLW56ihqQumo1xCDZw8
J9VujMuurb4Dio23/zq949rFC+qOkduCrg6JBlZXP6IXqvzkF4qPvSPehTY+74cK
tNz1/ZD6g3moNzxgw374OOhEPtnRpBUvLj8j+odwBGGvCbTHP8+JtDVzVxhpTndh
wRQWrSJeTCpIcPHwhetl07UcJyhtVJwnGyYEKEvJ0DhIgQArZzn3wTV91QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWenWHnRDr3pxOpFaa2gOkHNif7MB8GA1UdIwQY
MBaAFCQkgEoCd3A5xM/YwA3Cn6kdijkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQt
ZDAwYjU4MjJjY2VmLzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQtZDAwYjU4MjJjY2Vm
LzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvt57TSeg
KDp30W2A3piDIBytL0472wM6TKqqq4UbhMtcaAsG2fG86C/uhjxJEVxM78zJJ25f
P/NEgOgJmJozge89laLh1qn3OPBz+//wkVULoMmYvD9PU6DOVPiPDtx/r3fuR+I5
NvN3T40L9GYp8jfDR9iC2Q81VZL8ECVtZqYM23Rs2fWuEySQvULH1HqmeS4ueuMI
H6kYjKloB2qhkej4VF9cZaqrhM8Lize4rS9IV9NGTNG/MOEw4+cPsznnmZM02yEG
+0FqrxYhzwdJttUl8NJwcRTqqssqk8mLqbqHJbiQi29RmHQo7c1nrPzWorX5jDOH
5OdqoKoMWXe/aA==
-----END CERTIFICATE-----