Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File:                     jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier:          roY6cThS5hvokx1RVfsuCBIPXd7B1/Ie4X+xXvrHqNo=
Subject key identifier:   DF:67:41:36:4B:04:9E:44:3C:78:5E:F6:B6:43:21:BE:AC:EF:81:79
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer:       /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial:       01962ECF8EAE1C2E4ADCE86FC96BA97699C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number:          1258
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 9oNER91IB-H_6dQzFG4aTa1cjVM.roa (hash: oK/++MF9suyvds/jQSLAoISxJwhmMBspKaCD4mfLYUA=)
                          2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: CPwhXchbk1SMkBJhRPxrrXdfFZZ8EzOmB1i6hem6HcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8e:ae:1c:2e:4a:dc:e8:6f:c9:6b:a9:76:99:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=df6741364b049e443c785ef6b64321beacef8179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:eb:5d:1b:bd:d1:00:54:ae:ff:3a:94:7b:
                    9b:69:d6:ae:d2:c4:59:2c:d0:dc:d4:40:cc:eb:01:
                    40:45:ae:81:2f:0f:6c:ec:e5:06:e5:8e:4a:40:83:
                    d1:f9:1a:b9:99:05:ea:45:20:34:09:34:51:09:38:
                    22:eb:21:5e:1d:30:c8:b7:93:76:30:69:fb:bc:68:
                    43:c4:b2:fe:66:97:5a:7b:ad:58:5d:c2:ce:2e:20:
                    b7:9d:b6:ba:ea:d9:fd:d0:c5:b5:8d:72:8b:df:64:
                    91:0c:a3:93:77:bf:3b:36:0f:b5:61:b2:d6:28:9a:
                    b8:1e:4b:8e:39:ec:6e:18:bc:50:7d:12:9b:1d:f1:
                    91:fa:61:a1:0b:6b:b7:17:e8:18:0f:da:aa:ba:87:
                    f2:6f:21:80:f4:bd:e1:2d:67:98:f8:b1:d1:82:dc:
                    fe:8f:26:e4:3a:38:16:5b:42:1f:fa:91:07:82:81:
                    45:31:33:cb:49:d9:51:76:7f:19:02:21:68:86:40:
                    ae:ae:26:72:c0:89:6f:31:1a:63:73:36:88:92:d6:
                    91:1f:c7:79:33:9f:87:96:2e:e7:43:80:c2:0c:09:
                    a6:b8:a0:46:73:e7:d3:32:bc:a8:fe:4f:5c:83:e3:
                    34:42:82:62:6f:1f:20:bc:14:86:80:52:47:b0:45:
                    dc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:67:41:36:4B:04:9E:44:3C:78:5E:F6:B6:43:21:BE:AC:EF:81:79
            X509v3 Authority Key Identifier:
                keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:07:8b:d8:02:ec:e2:e4:38:37:52:67:72:b9:9a:6f:63:
         52:a1:f3:fd:1f:0a:f8:0f:d0:39:11:23:11:be:cf:e0:b1:1d:
         48:3c:ce:24:8c:1e:a7:23:b2:83:43:4a:44:a9:6a:51:33:f8:
         c9:7b:d9:f1:a3:36:48:fb:81:6e:bf:48:85:cf:d3:8b:e9:43:
         ec:81:42:34:35:a9:c1:a5:30:9c:96:a0:a3:de:7f:ed:27:40:
         78:d2:81:c8:80:cb:49:06:ce:9e:2a:44:59:c0:95:9d:64:60:
         8c:2c:90:2e:a6:48:f2:c6:b1:1c:16:40:21:94:6e:cc:f0:d2:
         6e:94:d0:a4:f5:24:4c:5a:69:c4:0f:44:4c:26:c5:3f:2e:ed:
         8e:a5:8c:d8:c4:3a:bd:64:80:67:ea:2c:41:8c:2d:18:6a:5a:
         01:1e:af:31:02:84:bb:91:24:34:ad:11:85:ca:43:c1:c5:64:
         a1:83:b0:ac:88:ee:b5:86:12:ab:f0:69:e4:4e:f5:db:cd:12:
         a7:61:3f:75:4d:25:0d:ef:ca:51:d1:3e:5d:ad:b4:bd:37:9b:
         21:99:f6:8e:ed:9a:ab:c7:7f:c9:62:b1:4a:34:f3:0d:c6:fc:
         05:f4:6d:5c:e2:65:b2:4f:f5:ef:30:34:25:c7:5a:85:db:b3:
         50:a8:20:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz46uHC5K3OhvyWupdpnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlN2I2OTkyN2RkMjFiYjllMTQ1NWZhODhlZDg4ZWQyNDdj
NzE4ZGEwHhcNMjUwNDEzMTEwMTE2WhcNMjUwNDE0MTEwMTE2WjAzMTEwLwYDVQQD
EyhkZjY3NDEzNjRiMDQ5ZTQ0M2M3ODVlZjZiNjQzMjFiZWFjZWY4MTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd7rXRu90QBUrv86lHubadau0sRZ
LNDc1EDM6wFARa6BLw9s7OUG5Y5KQIPR+Rq5mQXqRSA0CTRRCTgi6yFeHTDIt5N2
MGn7vGhDxLL+Zpdae61YXcLOLiC3nba66tn90MW1jXKL32SRDKOTd787Ng+1YbLW
KJq4HkuOOexuGLxQfRKbHfGR+mGhC2u3F+gYD9qquofybyGA9L3hLWeY+LHRgtz+
jybkOjgWW0If+pEHgoFFMTPLSdlRdn8ZAiFohkCuriZywIlvMRpjczaIktaRH8d5
M5+Hli7nQ4DCDAmmuKBGc+fTMryo/k9cg+M0QoJibx8gvBSGgFJHsEXc7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9nQTZLBJ5EPHhe9rZDIb6s74F5MB8GA1UdIwQY
MBaAFI57aZJ90hu54UVfqI7YjtJHxxjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam50cGtuM1NHN25oUlYtb2p0aU8wa2ZIR05vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80NmVkY2ItY2FhZi00ZDY1LTg1YzEt
YzAyOTJmNThiNzJmLzEvam50cGtuM1NHN25oUlYtb2p0aU8wa2ZIR05vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80NmVkY2ItY2FhZi00ZDY1LTg1YzEtYzAyOTJmNThiNzJm
LzEvam50cGtuM1NHN25oUlYtb2p0aU8wa2ZIR05vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcAHi9gC
7OLkODdSZ3K5mm9jUqHz/R8K+A/QOREjEb7P4LEdSDzOJIwepyOyg0NKRKlqUTP4
yXvZ8aM2SPuBbr9Ihc/Ti+lD7IFCNDWpwaUwnJago95/7SdAeNKByIDLSQbOnipE
WcCVnWRgjCyQLqZI8saxHBZAIZRuzPDSbpTQpPUkTFppxA9ETCbFPy7tjqWM2MQ6
vWSAZ+osQYwtGGpaAR6vMQKEu5EkNK0RhcpDwcVkoYOwrIjutYYSq/Bp5E71280S
p2E/dU0lDe/KUdE+Xa20vTebIZn2ju2aq8d/yWKxSjTzDcb8BfRtXOJlsk/17zA0
JcdahduzUKggzQ==
-----END CERTIFICATE-----