Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
File:                     jBhqVuqEwTxidoqdF7rhM87fEEU.mft (raw, json)
Hash identifier:          SAWbFW+7sUrcnPHgrOT740PdrbrXYwd2PDNnsLKj554=
Subject key identifier:   07:30:08:04:B9:F8:D7:71:65:9A:79:AF:A9:4C:C0:5C:99:C8:0E:AE
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Certificate issuer:       /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial:       01962E9873E7C15E845A4CF78DBF75547B40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft
Manifest number:          14FF
Signing time:             Sun 13 Apr 2025 10:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:05 +0000
Files and hashes:         1: REfYg6zs4mzXkznv8BZKawAeEPY.roa (hash: fxWL8SMng2Jg9LEtF9apPtdYuyEYzVdto0OqCyAqJew=)
                          2: S2Oderrp7lYRIScX-QAUHtFKgP0.roa (hash: CJ1oiM/HycEGfncA5aOP1zkSKBg0JuVq13Asp3X8j2w=)
                          3: Us5fsFK1rDmbmMuRZc376JRXA1A.roa (hash: uMRE+27TjtGt0OGORHpHmlRoFrYZQRl3Whf6j5Y0xFM=)
                          4: YEfco2c9_b6VDtGwlUBszWvCvI0.roa (hash: 0dy3l8v/4sRsGHHGtOtE/Z/gbG5L+kAxLfCYcCqk4xc=)
                          5: jBhqVuqEwTxidoqdF7rhM87fEEU.crl (hash: 6SWCnZXv4K91QOt9bcz4STVQj8xcciwIODSU57zXGeI=)
                          6: qNE1Oc5YdEXAaCXUki-27-49n4M.roa (hash: kONF3c4X+eIS37hIjtumNoVHLNO/2aceAl9uEWgk568=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:73:e7:c1:5e:84:5a:4c:f7:8d:bf:75:54:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
        Validity
            Not Before: Apr 13 10:01:05 2025 GMT
            Not After : Apr 14 10:01:05 2025 GMT
        Subject: CN=07300804b9f8d771659a79afa94cc05c99c80eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:f3:e2:17:6a:bc:99:09:50:c6:3c:7b:8c:
                    d1:6e:94:9d:45:0c:e6:70:aa:d8:ae:fc:d1:10:c3:
                    27:ff:04:e1:2f:0f:19:c8:96:d9:25:8a:fb:b5:b8:
                    34:f8:46:cf:40:a8:08:05:69:74:05:04:04:0d:6c:
                    1e:90:b2:da:4f:1b:c6:9b:90:6e:ec:f9:06:4c:c5:
                    32:d7:49:56:71:2f:47:4f:44:89:c6:e8:d7:0d:a6:
                    1c:6c:bc:03:c1:c0:e3:e4:a5:04:2d:61:0e:6e:94:
                    f2:9a:1f:8a:cd:a5:14:b2:28:11:d2:9f:65:9f:4f:
                    dd:36:c7:03:4c:d7:60:a4:55:16:8f:35:f1:50:0d:
                    ca:e6:6e:67:a5:07:3b:c3:9c:2f:93:f4:cd:89:3d:
                    fb:c6:65:e6:6e:49:96:4d:04:31:c7:3f:1a:03:f4:
                    44:9d:d7:ed:c2:7b:fc:30:0a:69:d3:ff:b1:5d:6c:
                    1e:35:d3:ba:d7:48:27:44:aa:d8:70:b7:2d:30:bc:
                    3b:33:a5:fa:d8:21:8b:07:40:91:a4:cf:a0:de:b0:
                    ec:ea:9e:85:53:89:9f:fd:ad:26:22:95:0c:d5:0c:
                    80:d6:41:c5:2e:1b:b3:71:86:18:04:40:b9:ea:87:
                    80:1d:d6:72:a8:3b:0a:34:98:88:2f:8a:dc:2b:f4:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:30:08:04:B9:F8:D7:71:65:9A:79:AF:A9:4C:C0:5C:99:C8:0E:AE
            X509v3 Authority Key Identifier:
                keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:56:05:fa:71:87:49:2c:52:bb:25:07:0b:c3:91:2b:23:64:
         ec:87:01:0b:2a:0a:6c:90:07:12:7d:74:52:24:87:9c:ae:40:
         c2:ee:35:52:88:3f:08:4c:a4:18:1e:b5:fe:6c:ed:67:6e:56:
         4d:1b:bc:ac:d9:42:ad:0e:79:3e:9c:0d:d0:f2:52:29:c1:1a:
         1d:5b:6d:2e:8d:a1:ac:a6:49:9d:39:bf:78:e0:77:29:fe:50:
         ed:85:9a:d4:09:cc:f9:ee:d1:24:28:fb:25:65:ff:47:8a:9d:
         03:98:96:f4:18:db:fc:4d:a6:0c:40:9e:ab:3e:90:3c:83:e1:
         86:b9:08:57:d1:5e:b9:64:6f:19:cb:7f:9a:77:89:b5:1f:50:
         1f:7d:51:42:be:0d:72:27:04:1c:2a:b7:f3:a4:57:b5:85:02:
         7b:da:4d:e4:3f:36:60:1a:3c:fa:07:96:79:0a:b6:4b:ea:f8:
         7d:d9:cb:c1:4d:1e:eb:b0:da:e3:48:b7:5e:2d:cd:c2:26:4a:
         9c:87:f8:7a:9a:84:55:f4:f0:a0:0d:42:5d:c6:fb:1c:01:26:
         3e:04:92:66:08:da:2c:9f:06:74:21:be:16:ad:13:b3:59:40:
         25:12:4f:e6:6f:eb:ac:49:37:b9:9d:c7:c5:a2:70:a7:7d:ca:
         47:f9:c5:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHPnwV6EWkz3jb91VHtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTg2YTU2ZWE4NGMxM2M2Mjc2OGE5ZDE3YmFlMTMzY2Vk
ZjEwNDUwHhcNMjUwNDEzMTAwMTA1WhcNMjUwNDE0MTAwMTA1WjAzMTEwLwYDVQQD
EygwNzMwMDgwNGI5ZjhkNzcxNjU5YTc5YWZhOTRjYzA1Yzk5YzgwZWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrHz4hdqvJkJUMY8e4zRbpSdRQzm
cKrYrvzREMMn/wThLw8ZyJbZJYr7tbg0+EbPQKgIBWl0BQQEDWwekLLaTxvGm5Bu
7PkGTMUy10lWcS9HT0SJxujXDaYcbLwDwcDj5KUELWEObpTymh+KzaUUsigR0p9l
n0/dNscDTNdgpFUWjzXxUA3K5m5npQc7w5wvk/TNiT37xmXmbkmWTQQxxz8aA/RE
ndftwnv8MApp0/+xXWweNdO610gnRKrYcLctMLw7M6X62CGLB0CRpM+g3rDs6p6F
U4mf/a0mIpUM1QyA1kHFLhuzcYYYBEC56oeAHdZyqDsKNJiIL4rcK/RJNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcwCAS5+NdxZZp5r6lMwFyZyA6uMB8GA1UdIwQY
MBaAFIwYalbqhME8YnaKnRe64TPO3xBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2Qt
MjA5MmFmNjQ3MDcwLzEvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2QtMjA5MmFmNjQ3MDcw
LzEvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFYF+nGH
SSxSuyUHC8ORKyNk7IcBCyoKbJAHEn10UiSHnK5Awu41Uog/CEykGB61/mztZ25W
TRu8rNlCrQ55PpwN0PJSKcEaHVttLo2hrKZJnTm/eOB3Kf5Q7YWa1AnM+e7RJCj7
JWX/R4qdA5iW9Bjb/E2mDECeqz6QPIPhhrkIV9FeuWRvGct/mneJtR9QH31RQr4N
cicEHCq386RXtYUCe9pN5D82YBo8+geWeQq2S+r4fdnLwU0e67Da40i3Xi3NwiZK
nIf4epqEVfTwoA1CXcb7HAEmPgSSZgjaLJ8GdCG+Fq0Ts1lAJRJP5m/rrEk3uZ3H
xaJwp33KR/nF8g==
-----END CERTIFICATE-----