Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
File:                     uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft (raw, json)
Hash identifier:          kl5MFTeGwUhtB11Phju2OWJX6EQmCwBiLLZTmz2+2cQ=
Subject key identifier:   8C:B1:29:BD:67:5D:2D:A4:85:46:78:B2:AA:07:89:C8:C7:80:F2:34
Authority key identifier: B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F
Certificate issuer:       /CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
Certificate serial:       01962F74B400DCA2CBD984DE731C99140423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft
Manifest number:          119B
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: 65Z91RtgEwjU2KLES_hAyj1MASE.roa (hash: 2gFZ2u3yjyG8HV67uy1q1utBS/LzjR+Y0ZIVib1xl14=)
                          2: uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl (hash: Bgsb4wVncpzXZK+EkpJ3hjUtevpvRMiV6t+w2JxGSjg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b4:00:dc:a2:cb:d9:84:de:73:1c:99:14:04:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c8f23d0c48c62e18e28f560cc9159893d4e42f
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=8cb129bd675d2da4854678b2aa0789c8c780f234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:12:33:26:90:ea:16:5b:ca:a1:99:cc:93:
                    f8:85:3f:00:e6:f9:aa:a2:45:f9:e3:7e:53:ce:02:
                    76:9f:a2:e4:f6:6f:c9:b3:98:53:13:62:92:48:5d:
                    c2:d1:36:b7:e5:82:22:f6:28:a4:ac:1c:4f:6d:cb:
                    b8:31:7c:73:b5:56:08:ff:75:84:11:ed:59:48:2f:
                    79:7e:9d:36:e1:60:4b:dd:54:f5:2d:3e:e4:40:da:
                    47:e9:07:40:1a:85:0c:df:0a:66:6b:6a:3d:ff:27:
                    b2:b9:cd:7b:cf:34:0b:33:1f:cd:15:ab:6a:58:9d:
                    d3:a4:ce:73:7c:ec:66:86:9e:24:49:ee:73:39:a1:
                    b4:ca:34:56:c6:70:9f:08:49:a6:c7:18:57:39:26:
                    90:7b:e8:64:5a:9d:ee:25:60:83:83:05:c8:86:ae:
                    ea:c2:d8:54:32:ad:7e:3e:f2:eb:72:aa:23:0a:49:
                    e3:00:41:ad:b9:8d:fb:8c:3a:b8:2f:b8:7b:96:7d:
                    a5:9f:3d:4f:08:28:29:64:55:a7:bc:ab:b7:36:62:
                    d5:b9:29:c0:83:44:88:f4:78:cd:25:be:80:6b:b1:
                    91:ff:47:33:51:76:b1:83:9b:2f:20:bf:0c:64:20:
                    29:95:7e:72:4c:88:49:38:ac:fe:b0:86:a3:0b:8e:
                    8d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B1:29:BD:67:5D:2D:A4:85:46:78:B2:AA:07:89:C8:C7:80:F2:34
            X509v3 Authority Key Identifier:
                keyid:B8:C8:F2:3D:0C:48:C6:2E:18:E2:8F:56:0C:C9:15:98:93:D4:E4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e425de-236e-4a34-b41a-42481a62123c/1/uMjyPQxIxi4Y4o9WDMkVmJPU5C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:9a:5f:76:a0:11:ec:bc:5f:b0:be:a9:27:86:1b:f1:ab:bc:
         c5:17:a3:13:2d:d1:cb:ba:d4:21:d2:75:80:5c:09:5f:56:2b:
         4d:86:00:67:92:47:ef:a7:5b:29:4f:29:7c:49:a4:04:e1:4e:
         5a:60:a7:9f:59:5e:c0:2e:29:bf:ad:4e:11:f9:b5:0f:0c:f7:
         eb:50:78:dc:96:07:71:da:41:90:e0:73:a3:70:47:b6:de:07:
         08:3b:35:ec:23:8e:9a:58:01:01:84:10:c2:a4:9f:5a:2f:87:
         fc:bb:49:6c:a5:c5:3a:e1:bf:f4:c0:24:95:e7:19:c9:0a:5d:
         01:ce:87:65:be:df:cf:d5:a0:b7:1b:8d:64:d5:08:b7:ab:12:
         ea:13:8a:52:97:f4:89:39:88:4e:f8:8d:12:a1:7c:dd:c2:36:
         d5:9b:26:d3:b7:c7:02:19:85:9c:db:51:6e:47:6b:76:5a:6e:
         9f:eb:cd:ec:61:c3:53:cb:71:dc:0e:87:8f:f0:7b:af:a6:61:
         9e:39:fd:5d:37:a6:a2:de:5f:dd:8f:b0:b7:1d:94:72:3a:a2:
         c4:36:c2:b7:ae:64:3d:5a:7b:eb:2f:dc:1b:6a:bd:59:0a:c6:
         c4:d2:4e:a8:59:8f:b2:d6:48:ff:d0:07:1b:c4:88:25:b9:ec:
         30:13:8b:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLQA3KLL2YTecxyZFAQjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YzhmMjNkMGM0OGM2MmUxOGUyOGY1NjBjYzkxNTk4OTNk
NGU0MmYwHhcNMjUwNDEzMTQwMTM5WhcNMjUwNDE0MTQwMTM5WjAzMTEwLwYDVQQD
Eyg4Y2IxMjliZDY3NWQyZGE0ODU0Njc4YjJhYTA3ODljOGM3ODBmMjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxsSMyaQ6hZbyqGZzJP4hT8A5vmq
okX5435TzgJ2n6Lk9m/Js5hTE2KSSF3C0Ta35YIi9iikrBxPbcu4MXxztVYI/3WE
Ee1ZSC95fp024WBL3VT1LT7kQNpH6QdAGoUM3wpma2o9/yeyuc17zzQLMx/NFatq
WJ3TpM5zfOxmhp4kSe5zOaG0yjRWxnCfCEmmxxhXOSaQe+hkWp3uJWCDgwXIhq7q
wthUMq1+PvLrcqojCknjAEGtuY37jDq4L7h7ln2lnz1PCCgpZFWnvKu3NmLVuSnA
g0SI9HjNJb6Aa7GR/0czUXaxg5svIL8MZCAplX5yTIhJOKz+sIajC46NHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyxKb1nXS2khUZ4sqoHicjHgPI0MB8GA1UdIwQY
MBaAFLjI8j0MSMYuGOKPVgzJFZiT1OQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9lNDI1ZGUtMjM2ZS00YTM0LWI0MWEt
NDI0ODFhNjIxMjNjLzEvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9lNDI1ZGUtMjM2ZS00YTM0LWI0MWEtNDI0ODFhNjIxMjNj
LzEvdU1qeVBReEl4aTRZNG85V0RNa1ZtSlBVNUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuJpfdqAR
7LxfsL6pJ4Yb8au8xRejEy3Ry7rUIdJ1gFwJX1YrTYYAZ5JH76dbKU8pfEmkBOFO
WmCnn1lewC4pv61OEfm1Dwz361B43JYHcdpBkOBzo3BHtt4HCDs17COOmlgBAYQQ
wqSfWi+H/LtJbKXFOuG/9MAklecZyQpdAc6HZb7fz9WgtxuNZNUIt6sS6hOKUpf0
iTmITviNEqF83cI21Zsm07fHAhmFnNtRbkdrdlpun+vN7GHDU8tx3A6Hj/B7r6Zh
njn9XTemot5f3Y+wtx2UcjqixDbCt65kPVp76y/cG2q9WQrGxNJOqFmPstZI/9AH
G8SIJbnsMBOLyg==
-----END CERTIFICATE-----