Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
File:                     jZg6B-bbi8SUyI370TF7qBDS0no.mft (raw, json)
Hash identifier:          QtE/cwoU/Fu9A4MRNjo/ce39Redj+X+WGceGGAZC6b0=
Subject key identifier:   82:9D:6C:85:B2:79:C3:13:B6:97:B1:70:7B:3A:69:F8:AA:65:AB:1F
Authority key identifier: 8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A
Certificate issuer:       /CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
Certificate serial:       01962DF3DCC4ECC84072AE91D8DC23E84DE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft
Manifest number:          112E
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: 4-WfO6vi57usPTB05BV5GJ31rGM.roa (hash: VA1gjhdShA/9i1dmr35uQ85UKyhc+8PsGP0Wp/sm8Mw=)
                          2: jZg6B-bbi8SUyI370TF7qBDS0no.crl (hash: do0kF+YeTmqghUKMSZCfuM+1y1Cj3DFE2rHuSwkWv1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:dc:c4:ec:c8:40:72:ae:91:d8:dc:23:e8:4d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d983a07e6db8bc494c88dfbd1317ba810d2d27a
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=829d6c85b279c313b697b1707b3a69f8aa65ab1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:89:ae:00:4a:05:d7:ed:49:e9:48:c0:fb:
                    61:8a:12:a5:70:10:f9:4f:a1:02:8d:1b:68:1e:03:
                    3d:ca:d0:7b:8d:81:31:78:fc:d9:53:7f:b6:26:57:
                    f9:e2:23:15:4f:df:79:7e:9e:6c:47:e7:51:fc:5e:
                    57:00:4f:28:0a:f9:5a:7f:5d:22:f9:e2:31:c9:58:
                    21:bf:10:61:59:5d:6d:ba:30:c4:ba:9a:e0:22:f7:
                    ef:dd:fb:b4:4e:39:6a:de:6b:db:a7:f0:ec:33:3e:
                    89:be:c2:87:13:92:ba:c3:dd:07:aa:68:ef:40:aa:
                    04:08:57:41:df:16:52:21:ee:42:fe:34:1f:43:26:
                    37:7b:1f:d0:05:26:29:55:ff:91:a9:47:9f:51:fc:
                    1a:e9:af:4d:f4:37:1e:66:84:2d:38:1f:56:e3:fb:
                    00:36:d7:9a:84:47:09:00:c2:85:05:73:87:79:91:
                    72:a1:e4:83:e4:ea:7b:9c:fa:1d:b4:c8:95:50:68:
                    2b:51:41:f5:44:21:06:f6:b7:50:3b:7b:d3:c7:64:
                    eb:a0:69:98:e7:01:7f:f7:56:f6:b0:00:ca:71:53:
                    b1:b4:45:15:ab:83:60:76:d3:92:fb:c5:d0:b1:8c:
                    60:ea:1e:de:b8:16:1d:e0:44:1a:d2:88:f3:93:4d:
                    7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9D:6C:85:B2:79:C3:13:B6:97:B1:70:7B:3A:69:F8:AA:65:AB:1F
            X509v3 Authority Key Identifier:
                keyid:8D:98:3A:07:E6:DB:8B:C4:94:C8:8D:FB:D1:31:7B:A8:10:D2:D2:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZg6B-bbi8SUyI370TF7qBDS0no.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3f5e8c-d377-4f43-8f24-de97e9141fed/1/jZg6B-bbi8SUyI370TF7qBDS0no.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:de:6a:de:17:62:90:63:28:a4:50:0d:68:c1:d5:c7:75:fc:
         c7:df:18:20:4a:92:26:d1:1b:2c:4d:39:e9:05:e0:6a:65:12:
         39:86:b6:82:d5:bb:d9:aa:67:f6:ca:1b:38:9e:a5:05:c3:d3:
         21:66:a9:15:13:88:73:f7:11:67:6f:78:57:10:d5:88:74:06:
         d9:f1:f9:9f:ed:73:70:db:04:ac:a8:03:c5:e8:99:e0:12:d6:
         e5:41:b2:33:66:52:87:b0:d3:f8:84:e7:e8:ab:8f:a0:9d:85:
         31:08:14:ad:20:93:48:0a:fd:f9:10:56:fe:02:da:9d:b2:85:
         8b:4a:c9:23:17:01:2f:36:cf:9e:0a:78:52:1f:c5:07:51:61:
         cb:c1:94:6d:00:fd:63:1f:e4:28:97:54:64:94:5a:21:d3:2c:
         bc:01:b1:46:7a:32:df:4d:d5:77:56:14:69:60:97:a2:05:72:
         ba:9a:7a:95:69:60:da:54:cb:28:77:33:10:3d:70:a7:11:48:
         d9:19:4c:47:18:59:2c:d7:55:2e:c9:fd:0d:28:7c:e4:3f:80:
         02:f6:b1:0c:bf:e6:bd:ad:84:6e:c2:48:14:a6:d5:c5:44:26:
         08:d0:99:3d:2c:e2:17:d6:6e:93:ae:58:82:ce:5e:c2:0e:6a:
         6c:63:0c:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89zE7MhAcq6R2Nwj6E3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOTgzYTA3ZTZkYjhiYzQ5NGM4OGRmYmQxMzE3YmE4MTBk
MmQyN2EwHhcNMjUwNDEzMDcwMTE4WhcNMjUwNDE0MDcwMTE4WjAzMTEwLwYDVQQD
Eyg4MjlkNmM4NWIyNzljMzEzYjY5N2IxNzA3YjNhNjlmOGFhNjVhYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrOJrgBKBdftSelIwPthihKlcBD5
T6ECjRtoHgM9ytB7jYExePzZU3+2Jlf54iMVT995fp5sR+dR/F5XAE8oCvlaf10i
+eIxyVghvxBhWV1tujDEuprgIvfv3fu0Tjlq3mvbp/DsMz6JvsKHE5K6w90Hqmjv
QKoECFdB3xZSIe5C/jQfQyY3ex/QBSYpVf+RqUefUfwa6a9N9DceZoQtOB9W4/sA
NteahEcJAMKFBXOHeZFyoeSD5Op7nPodtMiVUGgrUUH1RCEG9rdQO3vTx2TroGmY
5wF/91b2sADKcVOxtEUVq4NgdtOS+8XQsYxg6h7euBYd4EQa0ojzk0169wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKdbIWyecMTtpexcHs6afiqZasfMB8GA1UdIwQY
MBaAFI2YOgfm24vElMiN+9Exe6gQ0tJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQt
ZGU5N2U5MTQxZmVkLzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zZjVlOGMtZDM3Ny00ZjQzLThmMjQtZGU5N2U5MTQxZmVk
LzEvalpnNkItYmJpOFNVeUkzNzBURjdxQkRTMG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASt5q3hdi
kGMopFANaMHVx3X8x98YIEqSJtEbLE056QXgamUSOYa2gtW72apn9sobOJ6lBcPT
IWapFROIc/cRZ294VxDViHQG2fH5n+1zcNsErKgDxeiZ4BLW5UGyM2ZSh7DT+ITn
6KuPoJ2FMQgUrSCTSAr9+RBW/gLanbKFi0rJIxcBLzbPngp4Uh/FB1Fhy8GUbQD9
Yx/kKJdUZJRaIdMsvAGxRnoy303Vd1YUaWCXogVyupp6lWlg2lTLKHczED1wpxFI
2RlMRxhZLNdVLsn9DSh85D+AAvaxDL/mva2EbsJIFKbVxUQmCNCZPSziF9Zuk65Y
gs5ewg5qbGMMVg==
-----END CERTIFICATE-----