Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
File:                     jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft (raw, json)
Hash identifier:          7UwsxD/V8YpMRAecEyfPVn3Kh4jA03TsG2d0t8kYguc=
Subject key identifier:   B5:31:64:64:90:FA:14:D3:54:7B:56:D2:FD:CE:40:46:1A:9D:EE:AE
Authority key identifier: 8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04
Certificate issuer:       /CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
Certificate serial:       01962E61C100440F63D0A2096476E217DC94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft
Manifest number:          0361
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl (hash: N6YO35YTB2k+SQJSYRSVT3hc4zeDUf7k9iXDsyDoTGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c1:00:44:0f:63:d0:a2:09:64:76:e2:17:dc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e5cd1778277e61963f9f6f21e22250acdceeb04
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=b531646490fa14d3547b56d2fdce40461a9deeae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:5b:be:29:40:8a:65:57:81:87:56:02:6a:
                    48:62:10:24:74:f4:cd:99:1a:48:b4:8a:53:9f:b6:
                    81:6a:aa:e0:87:e1:db:15:c8:fc:5d:8d:db:e4:f2:
                    c6:84:b6:05:a3:bd:69:64:4f:81:f0:c4:6e:22:0b:
                    43:00:76:9a:c7:e3:95:47:0a:25:28:64:e6:af:49:
                    10:06:06:0b:24:8e:ee:e3:cb:f2:13:8b:20:1d:34:
                    69:85:7c:79:78:0a:12:9a:89:4b:12:fd:da:e6:54:
                    cc:b4:1a:75:ff:7a:98:cd:f5:a0:47:5b:ab:d6:28:
                    6f:88:a7:62:67:98:da:02:55:10:fa:83:cc:28:4a:
                    03:7f:ca:94:e9:a7:b5:d3:39:4f:98:09:f3:7d:be:
                    de:1a:41:71:2a:78:b3:59:fd:1a:e6:e2:51:1f:03:
                    9e:d9:80:62:83:63:f7:b1:c9:25:da:a4:f8:6f:de:
                    da:8b:38:f0:9c:cf:05:26:47:5b:09:39:a3:83:8b:
                    b5:13:4a:02:9e:d9:e8:74:56:51:97:11:02:61:82:
                    68:d0:41:69:9e:1a:c2:ca:b8:9e:35:e7:b0:fe:c2:
                    6b:c4:2c:e5:98:6c:e8:cf:f5:eb:39:e8:bd:3e:a7:
                    73:dd:6f:55:89:4e:68:00:8f:62:4e:90:70:ac:c0:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:31:64:64:90:FA:14:D3:54:7B:56:D2:FD:CE:40:46:1A:9D:EE:AE
            X509v3 Authority Key Identifier:
                keyid:8E:5C:D1:77:82:77:E6:19:63:F9:F6:F2:1E:22:25:0A:CD:CE:EB:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlzRd4J35hlj-fbyHiIlCs3O6wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/acbc3f-8028-4c59-952f-de607a0d6771/1/jlzRd4J35hlj-fbyHiIlCs3O6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d5:eb:58:5f:7e:71:ce:7c:3a:f3:13:c2:8b:67:b1:19:5b:
         0a:3c:41:bc:75:cf:18:81:c6:9a:6a:38:ed:e3:4b:17:69:04:
         9d:6a:f2:bf:bf:de:ac:f5:45:08:06:c8:15:65:c7:24:99:12:
         7d:88:c7:3d:5b:ba:bc:dd:8b:cf:51:ce:33:3d:53:fc:30:35:
         5e:c7:2e:33:a5:60:18:92:01:bc:ca:fe:96:1e:4d:42:a4:da:
         03:15:81:0c:64:41:21:b5:83:ef:f1:2e:7d:32:26:b3:ac:c3:
         da:31:88:43:43:f6:83:97:e5:7f:b1:bc:11:3c:82:b9:74:c6:
         15:e6:2a:9b:bf:30:00:61:92:32:84:51:f9:30:dd:ed:7f:e6:
         db:23:5b:38:53:78:0c:b6:0b:94:96:b4:c9:c2:03:e5:e2:20:
         5b:bc:1b:11:7f:84:3a:2f:a2:9d:5d:a9:8d:28:96:4d:b5:bd:
         b4:5d:68:2a:6d:fe:d9:fd:69:c6:87:07:13:32:db:24:0e:9a:
         6a:1b:54:81:40:9e:db:90:ab:73:9e:fa:c0:1a:ef:c6:f8:5e:
         39:43:20:51:2d:99:c8:dd:60:3d:00:1e:05:2c:68:11:cc:0b:
         e9:67:37:e5:68:6f:da:69:b2:87:d9:d8:f2:23:87:d4:5f:45:
         66:6a:76:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcEARA9j0KIJZHbiF9yUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNWNkMTc3ODI3N2U2MTk2M2Y5ZjZmMjFlMjIyNTBhY2Rj
ZWViMDQwHhcNMjUwNDEzMDkwMTIwWhcNMjUwNDE0MDkwMTIwWjAzMTEwLwYDVQQD
EyhiNTMxNjQ2NDkwZmExNGQzNTQ3YjU2ZDJmZGNlNDA0NjFhOWRlZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugxbvilAimVXgYdWAmpIYhAkdPTN
mRpItIpTn7aBaqrgh+HbFcj8XY3b5PLGhLYFo71pZE+B8MRuIgtDAHaax+OVRwol
KGTmr0kQBgYLJI7u48vyE4sgHTRphXx5eAoSmolLEv3a5lTMtBp1/3qYzfWgR1ur
1ihviKdiZ5jaAlUQ+oPMKEoDf8qU6ae10zlPmAnzfb7eGkFxKnizWf0a5uJRHwOe
2YBig2P3sckl2qT4b97aizjwnM8FJkdbCTmjg4u1E0oCntnodFZRlxECYYJo0EFp
nhrCyrieNeew/sJrxCzlmGzoz/XrOei9Pqdz3W9ViU5oAI9iTpBwrMAk9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUxZGSQ+hTTVHtW0v3OQEYane6uMB8GA1UdIwQY
MBaAFI5c0XeCd+YZY/n28h4iJQrNzusEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYt
ZGU2MDdhMGQ2NzcxLzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9hY2JjM2YtODAyOC00YzU5LTk1MmYtZGU2MDdhMGQ2Nzcx
LzEvamx6UmQ0SjM1aGxqLWZieUhpSWxDczNPNndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdXrWF9+
cc58OvMTwotnsRlbCjxBvHXPGIHGmmo47eNLF2kEnWryv7/erPVFCAbIFWXHJJkS
fYjHPVu6vN2Lz1HOMz1T/DA1XscuM6VgGJIBvMr+lh5NQqTaAxWBDGRBIbWD7/Eu
fTIms6zD2jGIQ0P2g5flf7G8ETyCuXTGFeYqm78wAGGSMoRR+TDd7X/m2yNbOFN4
DLYLlJa0ycID5eIgW7wbEX+EOi+inV2pjSiWTbW9tF1oKm3+2f1pxocHEzLbJA6a
ahtUgUCe25Crc576wBrvxvheOUMgUS2ZyN1gPQAeBSxoEcwL6Wc35Whv2mmyh9nY
8iOH1F9FZmp2fg==
-----END CERTIFICATE-----