Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
File:                     JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft (raw, json)
Hash identifier:          1zsJxpbte0CLttqL2g/58SyjFPCbKe8JDJQONIIlOZE=
Subject key identifier:   26:55:0A:88:29:86:D4:8B:82:1A:EF:EC:BF:F8:83:7E:DE:73:B9:D3
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Certificate issuer:       /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial:       01962ECFCE3CA4B7C7E9172BFF1ADA6E2538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
Manifest number:          0AD8
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: C03oYsQeKmNqstjprcrpWU_C_FA.roa (hash: XjHgFgaeV7edOP+rVRUhxH/PoL1vk7vdaF1YjoWE+DE=)
                          2: JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl (hash: 9m7T75gqyBmLDkn3cYAoZwjUfTJthrvCg8ZWEmVdjTU=)
                          3: _5zMdOWOnuF29ViyjTYdqmiabT0.roa (hash: bOHD6ebnTlGjO2kqvQSoKN6+pQ2e9dKaoGGov9ljW5w=)
                          4: iz1oLphOz4C0RKqGaCjwgWp4k-4.roa (hash: Spyiz27gUIj8vniKoNjV++85gF3fncVYgrGF+1dIJog=)
                          5: j4xQMv8fOD6vNafgvqaj-sinhSA.roa (hash: g/n7i1hhBBo3Q/tKawsn3d1mvtP+3frbkbuj6wZhZkE=)
                          6: uXwQWRGTbp4iQG2hqxNhBERgVfM.roa (hash: ZMVua8ZiPI5nY6upqsZo7sTjSdm1cARPTecfc5Wvr3E=)
                          7: zhL3mw3tfGz22FNWwzYf3uLwlM0.roa (hash: zAOff2Kw1dbM05MiGj7aU4wK2pL5mdV5s1R3xN1PATI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ce:3c:a4:b7:c7:e9:17:2b:ff:1a:da:6e:25:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=26550a882986d48b821aefecbff8837ede73b9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:97:73:29:f4:ed:08:13:f6:ce:0f:7e:4c:02:
                    48:78:65:3b:df:9b:e7:31:04:74:8b:42:73:e2:95:
                    26:d4:7d:20:88:35:ba:17:a3:9f:83:9b:65:64:17:
                    b3:8e:2a:a6:24:a3:f3:b3:03:22:40:5e:51:a2:45:
                    f8:05:36:46:da:90:ed:01:b6:d6:6b:ba:a2:59:41:
                    47:4d:04:3b:91:9e:a5:26:72:dd:f9:06:45:f7:e3:
                    3f:11:2f:a7:95:d9:bc:40:d3:a7:57:77:e6:33:d3:
                    aa:4c:a1:3b:8c:a5:a9:a3:90:a3:76:8a:9c:82:f4:
                    15:f6:ec:e2:9a:5c:f5:b8:a5:e3:e5:62:61:56:6a:
                    0b:21:7b:e5:e8:44:9e:03:bc:88:a6:25:78:a9:61:
                    fc:d3:7f:12:e5:99:b7:b5:00:2a:94:98:55:c7:9a:
                    5a:ad:3c:df:f5:ba:f9:9d:ef:8e:c2:46:9b:1b:e1:
                    63:59:5c:25:16:21:b2:05:35:a6:19:3a:9b:01:b9:
                    e9:65:15:4c:5c:31:99:8b:cd:45:98:b1:97:56:6d:
                    45:bb:a2:8f:f0:b9:b7:fd:45:d9:74:28:53:a0:6a:
                    17:6d:0d:88:72:06:ce:97:fd:1b:65:22:31:88:33:
                    d9:bb:80:0f:74:61:b0:d7:43:b0:8f:a5:dc:69:d9:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:55:0A:88:29:86:D4:8B:82:1A:EF:EC:BF:F8:83:7E:DE:73:B9:D3
            X509v3 Authority Key Identifier:
                keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:08:05:71:44:c6:27:6d:e3:45:06:6b:1a:51:af:72:97:58:
         6f:46:c7:c6:df:22:31:7a:ae:d9:91:d8:e4:18:e8:77:20:de:
         bd:64:23:09:64:8f:83:c9:6e:a5:0b:88:9d:47:c3:3e:d4:92:
         4f:99:32:f5:f7:1d:22:a6:ac:ad:66:57:0b:bb:f3:8d:46:61:
         c4:c6:b3:5d:60:2d:6c:9b:83:33:dd:29:14:c3:83:46:2b:13:
         1d:24:90:65:89:c2:e4:e9:25:52:98:c9:0e:55:70:f1:3a:f4:
         3a:58:b9:ba:6c:57:5b:03:14:fd:a5:e0:a2:fb:16:3f:6d:ab:
         ef:29:5f:c6:86:2f:c2:35:e2:b0:dc:0c:6e:26:6d:e4:53:0d:
         77:57:03:b5:06:5a:fd:1e:f9:d7:ea:1e:bb:39:98:d8:04:30:
         0b:3c:3d:70:26:44:fd:ff:d7:d6:76:9c:f8:aa:b1:0d:fb:1a:
         5d:af:56:e0:0a:80:8b:b0:3a:58:6f:9a:43:34:83:44:03:d7:
         44:be:24:98:a8:22:4b:5a:fa:e4:69:dc:b6:aa:42:60:fd:14:
         49:df:1d:49:26:ef:4e:c6:fa:c9:56:89:bc:9c:fc:da:a3:ea:
         b1:f0:19:6b:61:9a:61:b7:75:29:d7:b7:01:cf:e9:bd:23:bc:
         be:10:45:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz848pLfH6Rcr/xrabiU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MWI5NDFkYmU1OTY1MWZhZmJiYTk3MjRhMTI3NzVlMDdl
ZGI2MzUwHhcNMjUwNDEzMTEwMTMyWhcNMjUwNDE0MTEwMTMyWjAzMTEwLwYDVQQD
EygyNjU1MGE4ODI5ODZkNDhiODIxYWVmZWNiZmY4ODM3ZWRlNzNiOWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JdzKfTtCBP2zg9+TAJIeGU735vn
MQR0i0Jz4pUm1H0giDW6F6Ofg5tlZBezjiqmJKPzswMiQF5RokX4BTZG2pDtAbbW
a7qiWUFHTQQ7kZ6lJnLd+QZF9+M/ES+nldm8QNOnV3fmM9OqTKE7jKWpo5Cjdoqc
gvQV9uzimlz1uKXj5WJhVmoLIXvl6ESeA7yIpiV4qWH8038S5Zm3tQAqlJhVx5pa
rTzf9br5ne+OwkabG+FjWVwlFiGyBTWmGTqbAbnpZRVMXDGZi81FmLGXVm1Fu6KP
8Lm3/UXZdChToGoXbQ2IcgbOl/0bZSIxiDPZu4APdGGw10Owj6XcadmxPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZVCogphtSLghrv7L/4g37ec7nTMB8GA1UdIwQY
MBaAFCYblB2+WWUfr7upckoSd14H7bY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAt
Yjk4ZGY1NDRiYzIwLzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yZjgzMGYtYWY0ZC00ZDMzLWEzMDAtYjk4ZGY1NDRiYzIw
LzEvSmh1VUhiNVpaUi12dTZseVNoSjNYZ2Z0dGpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXggFcUTG
J23jRQZrGlGvcpdYb0bHxt8iMXqu2ZHY5BjodyDevWQjCWSPg8lupQuInUfDPtSS
T5ky9fcdIqasrWZXC7vzjUZhxMazXWAtbJuDM90pFMODRisTHSSQZYnC5OklUpjJ
DlVw8Tr0Oli5umxXWwMU/aXgovsWP22r7ylfxoYvwjXisNwMbiZt5FMNd1cDtQZa
/R751+oeuzmY2AQwCzw9cCZE/f/X1nac+KqxDfsaXa9W4AqAi7A6WG+aQzSDRAPX
RL4kmKgiS1r65GnctqpCYP0USd8dSSbvTsb6yVaJvJz82qPqsfAZa2GaYbd1Kde3
Ac/pvSO8vhBFxA==
-----END CERTIFICATE-----