Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File:                     Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier:          tz6rIDhpvngRGv/ciOSeNpRywxYeHUA397TFyARFdz4=
Subject key identifier:   6B:5C:E6:23:BE:A8:F6:EB:78:FA:D7:6A:9B:5C:F1:2A:76:CF:F1:E2
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer:       /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial:       01962E61D4F776DBA806571CB4C0538FFC72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number:          0D6C
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=)
                          2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: JIyNHQTJ1aSnFDxaWLL8kfBDGs01Q8quy72ADrvVKX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:f7:76:db:a8:06:57:1c:b4:c0:53:8f:fc:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=6b5ce623bea8f6eb78fad76a9b5cf12a76cff1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4a:33:14:62:6e:94:1e:6c:a3:36:fe:8c:ae:
                    a6:36:e2:4a:3e:af:87:22:28:3f:a1:23:62:74:04:
                    fd:4c:4a:c8:15:29:b8:a0:f9:e0:2f:74:95:c0:b6:
                    38:a5:e3:1a:d7:39:11:a4:12:16:5c:80:a3:14:1d:
                    c9:b6:15:e1:e5:2b:59:08:e9:14:20:e6:81:a9:01:
                    4c:12:49:4e:c2:79:ae:4d:7f:8e:e5:d6:08:5f:28:
                    3d:16:1a:11:51:b4:ac:78:35:8c:fe:eb:f6:a9:10:
                    da:63:df:a6:0c:f4:c4:74:f2:26:6d:5b:71:b9:1f:
                    24:66:ed:6e:e4:90:df:80:b9:08:24:b5:05:5f:a8:
                    72:9d:92:84:ef:09:53:6a:f6:b3:ac:92:61:8d:c5:
                    5c:1d:21:d3:d0:5d:11:52:70:a7:e4:c3:9a:62:b8:
                    ff:f3:49:29:78:d3:bb:90:31:35:85:07:4b:e2:e3:
                    a6:bd:fa:ac:3a:ef:90:bb:1a:be:04:f6:0f:86:3f:
                    05:1c:e4:b1:43:6b:30:e1:f3:cc:a3:ba:fa:ae:64:
                    7b:91:23:53:13:a1:36:49:c4:2c:51:ce:2e:54:f1:
                    52:09:f2:33:9a:be:98:65:f9:bb:de:b3:bf:44:bd:
                    f0:16:af:84:28:b7:79:5b:4e:da:05:4c:99:88:32:
                    26:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5C:E6:23:BE:A8:F6:EB:78:FA:D7:6A:9B:5C:F1:2A:76:CF:F1:E2
            X509v3 Authority Key Identifier:
                keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c7:d7:95:bb:ae:21:18:34:7f:94:e5:dd:95:4d:c3:b5:d7:
         1d:2a:dc:e5:54:d8:87:3d:70:51:3c:fc:ba:00:77:4d:4d:d7:
         cb:0f:1d:59:7e:bd:8b:24:53:b3:f4:27:c5:e8:32:d8:6c:71:
         78:e0:5c:1f:ba:38:a2:fa:b2:68:5f:6e:eb:7c:4c:89:7a:30:
         ca:6e:03:e6:cd:52:7f:66:64:d3:db:3b:62:8c:28:c6:de:80:
         da:e3:00:62:95:73:09:90:6f:bc:24:f5:1c:f0:16:ff:46:c9:
         2c:11:d7:f0:8d:40:1b:49:f6:a0:f9:3a:cc:aa:de:08:a2:f0:
         a7:a3:64:4d:ae:f9:28:57:d5:32:6e:2f:13:97:14:c5:9a:8f:
         c7:62:4b:d5:ba:2c:49:79:cc:ca:96:5e:1a:b5:b1:9d:57:78:
         f9:c7:4a:23:20:25:b6:22:56:88:00:0f:4e:28:a9:8c:af:b7:
         39:e6:49:29:53:29:35:4f:71:06:14:4b:66:a3:1c:68:ec:b8:
         23:56:ab:76:4f:2c:78:19:b4:56:b4:f0:1c:24:ac:70:f1:93:
         9d:ab:62:a2:be:b4:cf:fa:7a:1d:5a:ab:21:1f:bf:7b:2f:c5:
         8b:0f:f7:1a:e3:03:a3:da:36:71:cd:ca:07:2a:cb:e5:81:b4:
         b6:b3:f5:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdT3dtuoBlcctMBTj/xyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NGQwNGMzOTY0MWI4MmI1ZGMzODQ0Y2Y1ZmY1NTBmNTQw
NDQ2ODkwHhcNMjUwNDEzMDkwMTI1WhcNMjUwNDE0MDkwMTI1WjAzMTEwLwYDVQQD
Eyg2YjVjZTYyM2JlYThmNmViNzhmYWQ3NmE5YjVjZjEyYTc2Y2ZmMWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEozFGJulB5sozb+jK6mNuJKPq+H
Iig/oSNidAT9TErIFSm4oPngL3SVwLY4peMa1zkRpBIWXICjFB3JthXh5StZCOkU
IOaBqQFMEklOwnmuTX+O5dYIXyg9FhoRUbSseDWM/uv2qRDaY9+mDPTEdPImbVtx
uR8kZu1u5JDfgLkIJLUFX6hynZKE7wlTavazrJJhjcVcHSHT0F0RUnCn5MOaYrj/
80kpeNO7kDE1hQdL4uOmvfqsOu+Quxq+BPYPhj8FHOSxQ2sw4fPMo7r6rmR7kSNT
E6E2ScQsUc4uVPFSCfIzmr6YZfm73rO/RL3wFq+EKLd5W07aBUyZiDImjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtc5iO+qPbrePrXaptc8Sp2z/HiMB8GA1UdIwQY
MBaAFCZNBMOWQbgrXcOETPX/VQ9UBEaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTkt
M2QwMDM2NjAzZWEwLzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hMDA5OWMtZDg2MC00OWE1LWI0NTktM2QwMDM2NjAzZWEw
LzEvSmswRXc1WkJ1Q3RkdzRSTTlmOVZEMVFFUm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8fXlbuu
IRg0f5Tl3ZVNw7XXHSrc5VTYhz1wUTz8ugB3TU3Xyw8dWX69iyRTs/Qnxegy2Gxx
eOBcH7o4ovqyaF9u63xMiXowym4D5s1Sf2Zk09s7Yowoxt6A2uMAYpVzCZBvvCT1
HPAW/0bJLBHX8I1AG0n2oPk6zKreCKLwp6NkTa75KFfVMm4vE5cUxZqPx2JL1bos
SXnMypZeGrWxnVd4+cdKIyAltiJWiAAPTiipjK+3OeZJKVMpNU9xBhRLZqMcaOy4
I1ardk8seBm0VrTwHCSscPGTnatior60z/p6HVqrIR+/ey/Fiw/3GuMDo9o2cc3K
ByrL5YG0trP1vw==
-----END CERTIFICATE-----