Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
File:                     j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json)
Hash identifier:          PAmxtvlePP9R5+vNlw8u6ajgJOrsap4AEwTK8FvvSdE=
Subject key identifier:   F4:36:0E:8B:17:A3:D4:C7:9B:D8:FD:40:21:BF:96:13:79:2B:15:BC
Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Certificate issuer:       /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Certificate serial:       01962E99A9C17ED6196C3B89291C9CF42B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
Manifest number:          0446
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: izDgJyT_jFs6Afm1vFmx3IUq128.roa (hash: +piNMelo8kmyTOhWUH5qriIcmuElNVknleJSz/MJ2T8=)
                          2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: 583G6TcjyzuAgQO35lzmc+OrwcBaeqocsZZZaNeX140=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a9:c1:7e:d6:19:6c:3b:89:29:1c:9c:f4:2b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=f4360e8b17a3d4c79bd8fd4021bf9613792b15bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:61:24:eb:e2:bd:69:0f:ad:71:80:bb:16:
                    92:9e:b0:5a:93:bc:b8:ee:0e:2a:d1:17:11:30:f4:
                    6a:23:0b:29:3a:a1:93:2b:59:86:6c:65:0b:63:ea:
                    24:90:8a:dc:24:2e:cd:d4:c1:0c:e4:a4:f0:26:f9:
                    1b:ac:9b:9b:75:4a:c4:d2:80:40:93:4b:98:7c:fc:
                    1a:b0:a2:ab:db:24:ea:9c:bb:9b:1e:f4:fd:f7:dd:
                    ec:93:9e:ab:eb:2e:d0:d0:e2:5e:0a:ea:b9:cc:21:
                    67:19:f2:66:dc:1e:13:a2:04:86:fb:a7:fa:12:9c:
                    7d:b1:b9:f1:f1:25:d3:3d:cc:77:76:5f:74:13:cb:
                    fc:03:a4:3c:70:c7:c8:2f:98:f4:79:1e:f5:d5:a2:
                    94:63:8f:94:88:06:11:78:34:e7:0c:5d:a7:01:ca:
                    4f:87:81:99:5b:1e:dc:00:fe:dc:82:49:fd:ba:f3:
                    ef:0a:9c:b9:0f:7f:b7:11:5d:9f:17:7f:cd:87:86:
                    f2:9a:3a:29:ad:e3:2e:e4:17:b9:08:3b:52:9d:50:
                    d2:b2:8e:8c:51:2c:05:f6:50:33:bd:cd:03:89:89:
                    a0:60:91:b6:ed:3b:a6:67:03:20:49:ea:a9:30:1e:
                    b9:ad:80:4c:a4:08:e4:14:1f:cd:03:99:1f:35:e4:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:36:0E:8B:17:A3:D4:C7:9B:D8:FD:40:21:BF:96:13:79:2B:15:BC
            X509v3 Authority Key Identifier:
                keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:ce:12:06:ff:6c:88:5b:1a:f8:70:49:04:17:96:01:27:
         a5:13:0f:0c:d2:65:48:e3:5d:6a:cb:89:9f:f9:82:f8:6e:31:
         bd:e6:e6:e2:07:cf:bb:49:f4:ed:94:41:e2:86:65:de:7c:8c:
         76:a1:61:42:86:80:d8:2b:3b:54:ef:4b:6d:7e:15:2f:b3:fa:
         90:e7:54:0e:90:2f:86:7a:57:99:61:2c:02:2c:5b:37:eb:77:
         54:2c:06:ed:9a:e2:69:b2:74:c4:2f:f2:72:d4:27:86:d8:05:
         f1:aa:09:c1:a4:f3:19:a5:62:6e:46:46:74:64:ec:76:8f:b9:
         3e:71:b3:4f:cb:7f:da:9a:ee:a7:6f:b7:cc:de:63:86:cb:c3:
         f9:ac:99:f8:0f:90:35:98:18:08:68:11:6a:b6:36:09:28:49:
         fc:17:5e:97:86:08:be:25:f8:34:75:a6:ae:51:d8:6c:9b:d0:
         c7:f1:cf:2b:ba:fc:97:0c:46:78:ea:25:4b:52:77:62:59:63:
         8d:70:fa:45:6a:28:0a:59:bc:e4:ae:36:1b:33:8a:be:1e:bd:
         9f:43:f7:23:d5:64:2f:ae:11:c3:9f:48:8b:53:6e:c5:94:ea:
         6b:fc:ce:d0:65:9f:0b:f4:68:b9:ec:2f:93:25:11:72:db:cb:
         47:6a:04:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumanBftYZbDuJKRyc9CsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZjg1ZWZmMjQ0OGM3MzY0NmUzNTRhZmVhNjQxYmNmNzll
N2M3ZjkwHhcNMjUwNDEzMTAwMjI0WhcNMjUwNDE0MTAwMjI0WjAzMTEwLwYDVQQD
EyhmNDM2MGU4YjE3YTNkNGM3OWJkOGZkNDAyMWJmOTYxMzc5MmIxNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+xhJOvivWkPrXGAuxaSnrBak7y4
7g4q0RcRMPRqIwspOqGTK1mGbGULY+okkIrcJC7N1MEM5KTwJvkbrJubdUrE0oBA
k0uYfPwasKKr2yTqnLubHvT9993sk56r6y7Q0OJeCuq5zCFnGfJm3B4TogSG+6f6
Epx9sbnx8SXTPcx3dl90E8v8A6Q8cMfIL5j0eR711aKUY4+UiAYReDTnDF2nAcpP
h4GZWx7cAP7cgkn9uvPvCpy5D3+3EV2fF3/Nh4bymjopreMu5Be5CDtSnVDSso6M
USwF9lAzvc0DiYmgYJG27TumZwMgSeqpMB65rYBMpAjkFB/NA5kfNeSStQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQ2DosXo9THm9j9QCG/lhN5KxW8MB8GA1UdIwQY
MBaAFI/4Xv8kSMc2RuNUr+pkG89558f5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQval9oZV95Ukl4elpHNDFTdjZtUWJ6M25ueF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85ZmU1M2QtZWI0ZS00ZTZiLTkwMjIt
ZTMyMjA4Nzg3MGQyLzEval9oZV95Ukl4elpHNDFTdjZtUWJ6M25ueF9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85ZmU1M2QtZWI0ZS00ZTZiLTkwMjItZTMyMjA4Nzg3MGQy
LzEval9oZV95Ukl4elpHNDFTdjZtUWJ6M25ueF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxrOEgb/
bIhbGvhwSQQXlgEnpRMPDNJlSONdasuJn/mC+G4xvebm4gfPu0n07ZRB4oZl3nyM
dqFhQoaA2Cs7VO9LbX4VL7P6kOdUDpAvhnpXmWEsAixbN+t3VCwG7ZriabJ0xC/y
ctQnhtgF8aoJwaTzGaVibkZGdGTsdo+5PnGzT8t/2prup2+3zN5jhsvD+ayZ+A+Q
NZgYCGgRarY2CShJ/Bdel4YIviX4NHWmrlHYbJvQx/HPK7r8lwxGeOolS1J3Yllj
jXD6RWooClm85K42GzOKvh69n0P3I9VkL64Rw59Ii1NuxZTqa/zO0GWfC/Rouewv
kyURctvLR2oEUA==
-----END CERTIFICATE-----