Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File:                     JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier:          yp00Pfz/7zLgXmUBMKDxdI2PlWVSK97gexce+SeFVVw=
Subject key identifier:   61:8A:85:24:C4:2F:7A:E8:D5:F6:F0:2C:1F:78:3E:31:CE:35:34:95
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer:       /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial:       01962E98E0496FE40F1211C2952BCA0DA230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number:          FE
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
                          2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: NVKmp8F56UWkPb6hgptPWdJJJR+9B/g8nGbvJdDuPKU=)
                          3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e0:49:6f:e4:0f:12:11:c2:95:2b:ca:0d:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=618a8524c42f7ae8d5f6f02c1f783e31ce353495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:1f:fc:66:77:b8:e3:1b:ec:a0:f2:2e:ac:
                    13:a6:56:8d:6c:a0:6f:27:ab:f4:5a:68:1f:b3:84:
                    01:bf:ec:1c:94:0a:7c:8a:c6:94:0b:e0:55:13:f3:
                    bf:13:e4:6b:e2:33:ba:a5:11:f7:51:91:fd:97:ea:
                    41:75:fe:3e:e7:c9:ca:ad:af:28:94:e8:0e:7a:36:
                    31:9d:d0:0a:be:fd:b1:01:a3:d9:c5:21:89:f9:3a:
                    04:cc:a9:0b:2a:56:29:7a:68:70:ad:6a:e8:08:05:
                    22:3c:64:a8:bf:3d:58:36:34:f6:1a:0a:5f:49:c0:
                    0d:8c:8a:19:d0:e0:c6:00:46:b5:24:18:7c:74:88:
                    62:bc:1b:97:9c:b4:4c:c5:02:d6:6f:e8:c6:2b:bf:
                    2f:b5:92:96:11:b4:81:d6:84:df:7c:07:47:da:87:
                    19:d6:ce:d0:ff:7a:4e:8c:b5:a4:23:5d:7b:d9:47:
                    f1:b5:45:dc:ab:fb:da:ce:65:b8:50:f2:53:6f:cc:
                    8d:d1:7d:7d:56:3f:e6:aa:f5:98:93:04:2c:fb:11:
                    c6:00:90:d5:b4:dc:72:4f:12:4c:cf:de:66:8f:a6:
                    2c:d7:00:ad:e3:d6:ac:a3:d1:e3:d5:84:98:bc:47:
                    76:96:00:65:d0:c2:9a:20:f7:50:a7:a9:fa:a0:41:
                    e4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8A:85:24:C4:2F:7A:E8:D5:F6:F0:2C:1F:78:3E:31:CE:35:34:95
            X509v3 Authority Key Identifier:
                keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:9e:2b:4b:66:60:4e:4a:73:96:f7:5f:2d:e9:3a:aa:88:e4:
         00:ee:b7:23:8f:4f:99:51:98:f8:8e:87:95:fd:f2:7c:23:21:
         e4:a7:20:a4:fd:9d:03:1b:d8:95:95:15:91:13:37:e3:42:f7:
         05:41:24:ae:c9:02:c1:93:bf:eb:44:71:a4:6f:26:40:91:e6:
         23:bc:7c:2c:f3:1b:5a:4f:5a:ca:28:f5:ce:5a:07:47:02:c7:
         7d:c8:f9:b2:2c:4c:62:99:6a:05:95:fa:d5:b0:94:8a:ae:ef:
         97:0d:37:6b:20:0f:81:6f:a7:30:5c:b3:74:0e:5a:52:95:a4:
         c6:91:4f:e5:4a:aa:a5:0b:28:3a:a8:83:07:bd:31:fb:be:ba:
         73:85:11:d6:59:87:dc:fa:c1:6c:57:6c:36:b9:ca:b0:5d:6d:
         d7:c9:7a:d3:51:4f:cb:c6:cc:ce:bd:8a:ed:2d:94:f8:1c:26:
         71:6b:8a:a5:9d:9c:a1:af:fb:9b:c5:a8:34:e0:92:03:8f:5e:
         ec:2d:3a:a7:48:34:19:02:5e:12:b1:ac:6e:80:ee:c8:31:8c:
         a7:a5:68:c8:3e:f8:6c:6f:65:34:ec:2a:fb:54:0a:3f:d1:3a:
         66:86:d6:c3:9e:e1:0a:a0:34:7b:cc:cc:08:68:ea:c9:5a:2d:
         e4:08:0d:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOBJb+QPEhHClSvKDaIwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDBhNWNhMmNmMWJkOTEyZjQyY2M4Y2Y2NTFmNmZlODhl
NzI2YTQwHhcNMjUwNDEzMTAwMTMyWhcNMjUwNDE0MTAwMTMyWjAzMTEwLwYDVQQD
Eyg2MThhODUyNGM0MmY3YWU4ZDVmNmYwMmMxZjc4M2UzMWNlMzUzNDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaQf/GZ3uOMb7KDyLqwTplaNbKBv
J6v0Wmgfs4QBv+wclAp8isaUC+BVE/O/E+Rr4jO6pRH3UZH9l+pBdf4+58nKra8o
lOgOejYxndAKvv2xAaPZxSGJ+ToEzKkLKlYpemhwrWroCAUiPGSovz1YNjT2Ggpf
ScANjIoZ0ODGAEa1JBh8dIhivBuXnLRMxQLWb+jGK78vtZKWEbSB1oTffAdH2ocZ
1s7Q/3pOjLWkI1172UfxtUXcq/vazmW4UPJTb8yN0X19Vj/mqvWYkwQs+xHGAJDV
tNxyTxJMz95mj6Ys1wCt49aso9Hj1YSYvEd2lgBl0MKaIPdQp6n6oEHkSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGKhSTEL3ro1fbwLB94PjHONTSVMB8GA1UdIwQY
MBaAFCTQpcos8b2RL0LMjPZR9v6I5yakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQt
ZGIxM2NjM2YxZGI2LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQtZGIxM2NjM2YxZGI2
LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZ4rS2Zg
TkpzlvdfLek6qojkAO63I49PmVGY+I6Hlf3yfCMh5KcgpP2dAxvYlZUVkRM340L3
BUEkrskCwZO/60RxpG8mQJHmI7x8LPMbWk9ayij1zloHRwLHfcj5sixMYplqBZX6
1bCUiq7vlw03ayAPgW+nMFyzdA5aUpWkxpFP5UqqpQsoOqiDB70x+766c4UR1lmH
3PrBbFdsNrnKsF1t18l601FPy8bMzr2K7S2U+BwmcWuKpZ2coa/7m8WoNOCSA49e
7C06p0g0GQJeErGsboDuyDGMp6VoyD74bG9lNOwq+1QKP9E6ZobWw57hCqA0e8zM
CGjqyVot5AgNlg==
-----END CERTIFICATE-----