Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File:                     jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier:          E9xTmCVZ1pKa8Gip4ZOei9OiL2w6t4V6L5eAk3+cieg=
Subject key identifier:   69:99:1C:67:2E:79:9E:5C:F6:85:DB:E7:78:0A:EA:6D:B1:17:CF:73
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer:       /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial:       01962E9879C906DDCC5FF0FD866A3ACB78CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number:          0407
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: 9Ikrgii6aWEfsxAWAi789vrE9wg.roa (hash: iLnyK1Sj4Jg60yb2gV/nuNI+npfH3YvqxRf21D1k0LY=)
                          2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: RMYxXG63C6eDF4xQ8ApETqUkfv/vzXI4FaiYwpYJyLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:79:c9:06:dd:cc:5f:f0:fd:86:6a:3a:cb:78:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=69991c672e799e5cf685dbe7780aea6db117cf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:bc:93:e8:4b:30:98:bd:c7:8f:bd:08:4d:
                    f7:4d:05:ee:91:32:dc:84:54:9d:86:5b:bc:37:07:
                    b6:96:c3:8d:cf:8c:dd:29:e6:1f:00:7b:60:98:b3:
                    db:c1:5c:37:b3:cb:d3:13:ef:2e:49:c1:3e:9c:0b:
                    6a:0c:85:24:e2:d6:bb:01:00:9e:0e:18:01:1e:7b:
                    98:c2:5a:26:65:5e:d8:b9:5b:b2:52:cc:4f:1e:73:
                    0f:3a:0b:56:12:d0:71:33:c5:c0:e2:ed:5a:6a:a5:
                    bc:80:2b:f6:01:84:4e:34:bf:77:a6:e2:b8:45:34:
                    54:00:7f:8d:d8:78:be:aa:89:60:bc:d8:76:c7:47:
                    31:30:75:53:21:8b:47:77:c1:5f:cb:7e:84:b8:5c:
                    e2:be:d6:82:d8:da:f1:64:e1:a0:aa:b0:e7:45:08:
                    25:f8:d8:de:41:69:2b:48:82:6f:a3:e0:44:4f:33:
                    8f:dd:dc:e4:ef:72:41:9f:41:33:7e:0f:fa:22:d5:
                    a0:88:8c:b7:ad:c8:07:c3:8d:0a:2a:d1:41:b0:91:
                    3d:02:e9:7c:a6:40:3e:5e:9a:a6:59:33:11:d9:f7:
                    d7:93:85:bf:0d:a3:1b:b3:fc:7b:bf:8c:9b:73:05:
                    68:bd:99:b0:de:6e:77:4c:ce:9a:91:4d:38:32:09:
                    54:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:99:1C:67:2E:79:9E:5C:F6:85:DB:E7:78:0A:EA:6D:B1:17:CF:73
            X509v3 Authority Key Identifier:
                keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1a:3e:e8:6a:16:91:b3:28:71:24:ef:47:44:26:26:7c:5f:
         24:8f:e1:38:ad:4a:1e:73:62:08:03:63:76:14:d9:3a:f3:3e:
         53:fe:bb:fc:30:56:f8:71:fa:f1:8f:44:12:2c:e6:95:ab:cb:
         7d:66:97:d4:e6:06:36:dd:b3:d9:25:f1:d3:bf:4e:b8:e9:b5:
         ea:80:18:62:9e:f9:a4:6d:39:23:5f:bd:eb:1b:cb:4f:d2:51:
         93:01:fc:0d:e9:db:bd:f8:24:24:b6:70:46:51:db:d3:f5:20:
         d7:a4:61:5f:1b:f2:f9:98:4b:d3:17:9e:1e:fe:e6:a6:bc:2d:
         d5:66:97:54:83:43:6c:15:bc:7f:62:cb:e3:cf:c1:c0:38:1f:
         4e:94:29:9d:18:04:3e:78:17:72:8c:1c:c1:27:64:96:e4:a8:
         e4:47:e4:aa:30:a6:d4:6c:0a:55:12:4e:89:e5:84:a4:f4:b8:
         2b:6d:eb:3a:59:fd:68:e7:91:a9:f7:67:a8:d4:86:b6:a5:40:
         53:f4:bb:c9:62:21:d0:24:9b:aa:19:ae:00:4f:cf:d1:53:70:
         80:c2:49:67:99:e1:8c:a2:5e:85:98:7b:8b:fc:01:dc:ff:6b:
         02:04:63:ad:7e:fd:45:37:1a:3f:d2:24:0a:4b:32:88:f8:bb:
         21:44:3b:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHnJBt3MX/D9hmo6y3jOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNDhkY2VjYmJjYzA1MmM2NTlmOTcxNjA5MjI5ZTM2NTZh
M2Q5NTYwHhcNMjUwNDEzMTAwMTA2WhcNMjUwNDE0MTAwMTA2WjAzMTEwLwYDVQQD
Eyg2OTk5MWM2NzJlNzk5ZTVjZjY4NWRiZTc3ODBhZWE2ZGIxMTdjZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0m8k+hLMJi9x4+9CE33TQXukTLc
hFSdhlu8Nwe2lsONz4zdKeYfAHtgmLPbwVw3s8vTE+8uScE+nAtqDIUk4ta7AQCe
DhgBHnuYwlomZV7YuVuyUsxPHnMPOgtWEtBxM8XA4u1aaqW8gCv2AYRONL93puK4
RTRUAH+N2Hi+qolgvNh2x0cxMHVTIYtHd8Ffy36EuFzivtaC2NrxZOGgqrDnRQgl
+NjeQWkrSIJvo+BETzOP3dzk73JBn0Ezfg/6ItWgiIy3rcgHw40KKtFBsJE9Aul8
pkA+XpqmWTMR2ffXk4W/DaMbs/x7v4ybcwVovZmw3m53TM6akU04MglU4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmZHGcueZ5c9oXb53gK6m2xF89zMB8GA1UdIwQY
MBaAFIxI3Oy7zAUsZZ+XFgkinjZWo9lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYt
MTViMDE4NWU3YTc5LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYtMTViMDE4NWU3YTc5
LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRo+6GoW
kbMocSTvR0QmJnxfJI/hOK1KHnNiCANjdhTZOvM+U/67/DBW+HH68Y9EEizmlavL
fWaX1OYGNt2z2SXx079OuOm16oAYYp75pG05I1+96xvLT9JRkwH8DenbvfgkJLZw
RlHb0/Ug16RhXxvy+ZhL0xeeHv7mprwt1WaXVINDbBW8f2LL48/BwDgfTpQpnRgE
PngXcowcwSdkluSo5EfkqjCm1GwKVRJOieWEpPS4K23rOln9aOeRqfdnqNSGtqVA
U/S7yWIh0CSbqhmuAE/P0VNwgMJJZ5nhjKJehZh7i/wB3P9rAgRjrX79RTcaP9Ik
CksyiPi7IUQ7Iw==
-----END CERTIFICATE-----