Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File:                     rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier:          dLJUbz/P43zbVJroe/c5mWtw70eWyVBUgLUWHO379do=
Subject key identifier:   64:84:8B:6E:D6:F3:E5:FE:62:0F:AC:82:CD:FA:06:70:FD:56:55:42
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer:       /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial:       01962E2AD8D79A285FC70236596CD6A729F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number:          07B3
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=)
                          2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: fbuQPFhi3hNZjbZP/tLGAMAyDqgiblgTTU0Gto+D3bw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d8:d7:9a:28:5f:c7:02:36:59:6c:d6:a7:29:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=64848b6ed6f3e5fe620fac82cdfa0670fd565542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:28:93:73:f5:d1:91:5c:54:04:fb:87:2d:
                    19:1a:71:2e:62:ea:47:8f:ed:eb:c4:71:ae:4d:d5:
                    75:c8:6f:bb:30:9e:86:9d:18:6c:40:93:26:d7:af:
                    e6:66:95:cc:9d:18:75:79:fc:71:1f:77:b5:04:55:
                    ed:06:15:cd:f4:8d:ae:6a:01:db:c5:58:aa:72:d9:
                    99:b6:50:ce:0e:0a:fa:62:5f:ec:13:2b:ab:07:6e:
                    39:25:20:e6:ad:ca:9b:16:59:37:91:4e:da:b5:a2:
                    de:13:67:96:ca:c6:60:3b:96:65:99:e2:81:dc:41:
                    1a:3f:de:4b:19:ed:c1:94:b3:78:48:04:e2:04:0e:
                    8d:76:8a:14:f7:22:0d:8b:2a:8e:54:e5:f7:97:db:
                    74:37:a5:c4:5a:6d:81:2b:09:da:92:8b:0e:33:2f:
                    92:45:bf:1a:45:7a:fb:fc:4f:92:2f:73:31:14:f3:
                    f7:32:a9:c7:37:67:67:5d:0d:da:47:db:dd:fb:48:
                    e4:e8:e7:34:1c:62:22:bc:65:11:df:d2:96:37:d6:
                    4e:2a:34:fe:c1:15:13:57:1f:e0:01:02:6b:49:51:
                    8b:12:e8:67:88:2c:c9:26:c4:f5:a8:71:97:9a:c5:
                    68:31:cd:6b:ec:3e:1f:33:1f:ad:aa:65:00:53:10:
                    7e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:84:8B:6E:D6:F3:E5:FE:62:0F:AC:82:CD:FA:06:70:FD:56:55:42
            X509v3 Authority Key Identifier:
                keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7c:90:4f:87:23:8a:bb:f2:17:fa:87:79:0e:18:ec:92:63:
         9a:53:c5:09:53:4b:5d:c4:6a:51:14:61:6b:be:25:a4:40:72:
         c9:52:79:59:33:e1:58:0d:a6:e3:48:64:bc:fe:6e:71:bd:d4:
         c8:db:5e:57:46:91:24:4d:f5:1e:91:7c:e9:77:57:92:24:fa:
         4b:5a:8c:ca:dd:d0:b0:49:ca:06:a6:fb:c4:b9:76:6b:70:e1:
         1e:8a:e6:e3:96:9c:4e:6f:f1:27:b5:61:4a:3c:47:fa:9b:54:
         bd:1f:b0:d4:41:19:eb:05:f2:ca:08:14:dc:28:3f:80:6d:2d:
         16:9e:18:31:e0:4b:28:fa:7d:02:75:42:e8:6c:c5:ae:55:8c:
         96:f5:fa:22:90:b3:4d:fd:20:5e:5d:ad:0d:ed:10:3b:64:28:
         9d:dc:c4:5c:40:ec:39:ae:48:82:12:16:e2:06:f2:ee:75:34:
         de:8b:01:b3:87:5e:05:0a:bf:7c:57:cb:8e:1e:ea:2e:da:c9:
         4c:22:33:08:8d:68:0f:ca:2b:10:27:68:5d:9b:49:66:60:c8:
         65:eb:e4:27:16:fd:b7:da:96:70:94:ff:d0:a0:23:8d:4a:b8:
         73:a3:64:c0:8b:55:1e:8a:4a:ab:55:75:86:06:a6:87:6c:71:
         3b:60:94:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtjXmihfxwI2WWzWpynxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWJiZjlmNjIzMzEzZWIyYjE4MjczNTBiNDVhOWJhMWZk
OWRhNWYwHhcNMjUwNDEzMDgwMTIyWhcNMjUwNDE0MDgwMTIyWjAzMTEwLwYDVQQD
Eyg2NDg0OGI2ZWQ2ZjNlNWZlNjIwZmFjODJjZGZhMDY3MGZkNTY1NTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Mok3P10ZFcVAT7hy0ZGnEuYupH
j+3rxHGuTdV1yG+7MJ6GnRhsQJMm16/mZpXMnRh1efxxH3e1BFXtBhXN9I2uagHb
xViqctmZtlDODgr6Yl/sEyurB245JSDmrcqbFlk3kU7ataLeE2eWysZgO5ZlmeKB
3EEaP95LGe3BlLN4SATiBA6NdooU9yINiyqOVOX3l9t0N6XEWm2BKwnakosOMy+S
Rb8aRXr7/E+SL3MxFPP3MqnHN2dnXQ3aR9vd+0jk6Oc0HGIivGUR39KWN9ZOKjT+
wRUTVx/gAQJrSVGLEuhniCzJJsT1qHGXmsVoMc1r7D4fMx+tqmUAUxB+0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSEi27W8+X+Yg+sgs36BnD9VlVCMB8GA1UdIwQY
MBaAFKybv59iMxPrKxgnNQtFqbof2dpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQt
NTdlZjdmZWU3NTljLzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQtNTdlZjdmZWU3NTlj
LzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnyQT4cj
irvyF/qHeQ4Y7JJjmlPFCVNLXcRqURRha74lpEByyVJ5WTPhWA2m40hkvP5ucb3U
yNteV0aRJE31HpF86XdXkiT6S1qMyt3QsEnKBqb7xLl2a3DhHorm45acTm/xJ7Vh
SjxH+ptUvR+w1EEZ6wXyyggU3Cg/gG0tFp4YMeBLKPp9AnVC6GzFrlWMlvX6IpCz
Tf0gXl2tDe0QO2QondzEXEDsOa5IghIW4gby7nU03osBs4deBQq/fFfLjh7qLtrJ
TCIzCI1oD8orECdoXZtJZmDIZevkJxb9t9qWcJT/0KAjjUq4c6NkwItVHopKq1V1
hgamh2xxO2CUdQ==
-----END CERTIFICATE-----