Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
File:                     p8dUTotILSMRkDcG7tckBJ_jhb8.mft (raw, json)
Hash identifier:          g+Iq8x2hwLlYzaiox+jyBTqWzWfRaFd1trI/QBhvZ7M=
Subject key identifier:   9C:0C:77:EA:4D:68:8D:B9:C4:4A:B9:53:4E:FC:9D:2A:E5:8D:1D:C9
Authority key identifier: A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF
Certificate issuer:       /CN=a7c7544e8b482d2311903706eed724049fe385bf
Certificate serial:       01962E61A9D9D4FC2063E2A9F13D043FDD4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft
Manifest number:          0F6C
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 7mKsLxZ1YUursivxbDFLaTJwj3E.roa (hash: FPzsPJGqWdwrFvseNY78lYszDWnEn2Sc/ADORiyM6K8=)
                          2: F6GbEsOwyyG8o8bV63EAhvgPv20.roa (hash: EM9ccbF4wbMzML21gfy8G7ZsIEgbEwrm+BJcQvLh9SE=)
                          3: p8dUTotILSMRkDcG7tckBJ_jhb8.crl (hash: xZHIXsIMvSprg+gl/THBXv9U3ysIiEc8EMfocvteQlU=)
                          4: zTYC0rihbvQfm9oWRaiGAXMBQqs.roa (hash: 6o0tQLujWnAnKLQhjlOk4ynnEvtZuILHNK+l2Zgw0QA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a9:d9:d4:fc:20:63:e2:a9:f1:3d:04:3f:dd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7544e8b482d2311903706eed724049fe385bf
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=9c0c77ea4d688db9c44ab9534efc9d2ae58d1dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d3:70:8f:bb:6f:bd:56:b6:3a:b8:2a:61:cf:
                    56:79:60:4a:0b:d2:44:d0:8b:c0:92:0e:d0:2e:59:
                    b5:0b:01:28:42:ab:5a:2f:45:38:87:ca:ee:59:d7:
                    97:1f:ed:f0:f4:f3:42:2f:ad:09:2c:b5:99:70:c0:
                    ed:b0:d6:97:cc:fc:c6:31:e6:5d:de:5b:06:d5:2b:
                    d6:48:3b:71:0d:03:5e:43:eb:be:08:46:28:af:ab:
                    28:66:6a:5d:f6:5e:fa:8b:51:27:42:e7:9b:18:2e:
                    2a:a9:37:14:15:bf:fa:4b:2c:27:a1:af:7e:18:8f:
                    ab:0f:8d:e3:d1:15:92:05:1e:9f:01:25:97:32:d4:
                    ce:56:f5:13:ac:a5:ad:48:17:61:59:4c:01:6a:63:
                    8f:35:13:0a:f9:08:3b:b5:33:2b:92:9e:69:d9:d6:
                    39:54:1e:1a:fa:82:b7:68:3b:d5:3e:b7:ff:ef:62:
                    3c:dd:f5:3a:80:eb:19:03:65:e3:ee:3f:eb:29:4d:
                    66:49:1c:17:4f:06:2f:b9:22:9f:40:dc:84:3c:52:
                    52:28:9a:a1:7c:46:06:5a:d2:a7:2a:90:c4:c1:bc:
                    27:dd:80:cd:19:08:7f:b4:83:75:fb:d2:f2:5c:44:
                    9a:c2:70:29:ff:21:d8:7e:c7:8d:38:f0:99:90:e1:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0C:77:EA:4D:68:8D:B9:C4:4A:B9:53:4E:FC:9D:2A:E5:8D:1D:C9
            X509v3 Authority Key Identifier:
                keyid:A7:C7:54:4E:8B:48:2D:23:11:90:37:06:EE:D7:24:04:9F:E3:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dUTotILSMRkDcG7tckBJ_jhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/2d5960-c66d-42df-95d2-4052450c90a9/1/p8dUTotILSMRkDcG7tckBJ_jhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:e8:67:1d:ee:d9:02:8b:e5:92:63:11:f4:d4:34:da:00:8c:
         09:d2:c3:af:b0:a8:c6:f8:64:0a:de:0d:3c:8c:be:41:39:2a:
         4c:7f:fc:d0:b9:91:b7:b5:fa:59:95:52:46:35:5d:e8:e5:bf:
         c6:27:52:6d:97:bf:a1:3a:bf:24:be:89:fc:b4:9e:0a:31:e4:
         09:d5:78:96:63:70:6d:2f:cc:34:e5:e8:6e:4c:06:d5:4d:20:
         36:4f:e6:cb:7a:37:ab:a2:ef:e4:7b:3a:42:7a:9d:02:1a:d9:
         6d:4b:1d:dd:a7:c5:88:65:66:2a:a5:00:c8:ca:6d:09:93:18:
         c9:7b:18:38:33:66:ed:dc:2c:13:e9:49:99:f1:79:a6:47:5d:
         40:b1:61:03:e2:2d:e0:5c:6d:75:28:53:76:db:13:63:f6:81:
         06:d2:5d:36:fe:05:80:bc:6e:c3:79:f7:e4:95:55:13:67:39:
         99:26:f1:0b:a3:aa:cb:2d:d4:39:04:08:58:e7:aa:73:b9:ef:
         50:6e:6d:2f:98:bc:10:c4:67:ea:0e:8f:0e:00:2f:af:00:f7:
         92:99:1a:ea:96:08:0c:9c:7e:44:9e:e2:85:7d:c2:78:ae:57:
         ee:06:57:77:55:0d:6c:1e:25:2f:ae:b0:38:63:87:7b:84:cd:
         23:13:7e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYanZ1PwgY+Kp8T0EP91PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Yzc1NDRlOGI0ODJkMjMxMTkwMzcwNmVlZDcyNDA0OWZl
Mzg1YmYwHhcNMjUwNDEzMDkwMTE0WhcNMjUwNDE0MDkwMTE0WjAzMTEwLwYDVQQD
Eyg5YzBjNzdlYTRkNjg4ZGI5YzQ0YWI5NTM0ZWZjOWQyYWU1OGQxZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNNwj7tvvVa2OrgqYc9WeWBKC9JE
0IvAkg7QLlm1CwEoQqtaL0U4h8ruWdeXH+3w9PNCL60JLLWZcMDtsNaXzPzGMeZd
3lsG1SvWSDtxDQNeQ+u+CEYor6soZmpd9l76i1EnQuebGC4qqTcUFb/6Sywnoa9+
GI+rD43j0RWSBR6fASWXMtTOVvUTrKWtSBdhWUwBamOPNRMK+Qg7tTMrkp5p2dY5
VB4a+oK3aDvVPrf/72I83fU6gOsZA2Xj7j/rKU1mSRwXTwYvuSKfQNyEPFJSKJqh
fEYGWtKnKpDEwbwn3YDNGQh/tIN1+9LyXESawnAp/yHYfseNOPCZkOG/aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwMd+pNaI25xEq5U078nSrljR3JMB8GA1UdIwQY
MBaAFKfHVE6LSC0jEZA3Bu7XJASf44W/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yZDU5NjAtYzY2ZC00MmRmLTk1ZDIt
NDA1MjQ1MGM5MGE5LzEvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yZDU5NjAtYzY2ZC00MmRmLTk1ZDItNDA1MjQ1MGM5MGE5
LzEvcDhkVVRvdElMU01Sa0RjRzd0Y2tCSl9qaGI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJehnHe7Z
AovlkmMR9NQ02gCMCdLDr7CoxvhkCt4NPIy+QTkqTH/80LmRt7X6WZVSRjVd6OW/
xidSbZe/oTq/JL6J/LSeCjHkCdV4lmNwbS/MNOXobkwG1U0gNk/my3o3q6Lv5Hs6
QnqdAhrZbUsd3afFiGVmKqUAyMptCZMYyXsYODNm7dwsE+lJmfF5pkddQLFhA+It
4FxtdShTdtsTY/aBBtJdNv4FgLxuw3n35JVVE2c5mSbxC6Oqyy3UOQQIWOeqc7nv
UG5tL5i8EMRn6g6PDgAvrwD3kpka6pYIDJx+RJ7ihX3CeK5X7gZXd1UNbB4lL66w
OGOHe4TNIxN+aA==
-----END CERTIFICATE-----