Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File:                     JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier:          /+8y6NPTlsgWvz146BVX2swpgIueFNfppXE+bD/eRiI=
Subject key identifier:   3C:93:13:AC:2E:36:37:44:58:3E:95:FA:0A:B0:71:19:D5:1A:3F:47
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer:       /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial:       01962E9885FBE266F025E33FB91FCBC6FB0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number:          081D
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: Z72DnuY/FTVm6SaR+shKhsr7ClYhAYnN/iU7aItqn7Q=)
                          2: UsGWlIi-7uiN8zG8NI59NtV5c7I.roa (hash: 2oRhDUdkNy5+apDfmRqRD6+hJvX2S16eZftFWdMCk1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:85:fb:e2:66:f0:25:e3:3f:b9:1f:cb:c6:fb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=3c9313ac2e363744583e95fa0ab07119d51a3f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:05:b1:16:2c:df:63:c4:29:a6:fb:bc:33:
                    a5:bd:4c:8e:bb:5c:91:b2:2f:97:4c:56:2d:b1:e1:
                    30:a2:16:ed:32:a4:11:39:3f:27:46:3d:49:2d:0c:
                    1d:21:85:e6:f5:70:e1:6a:00:b0:47:32:91:eb:9a:
                    b3:42:63:e5:d7:14:e8:e0:05:30:42:81:9c:89:bc:
                    fb:58:45:b9:a9:f3:d8:f8:df:8b:4b:cd:78:40:c4:
                    95:59:42:d2:47:aa:e3:64:09:3e:62:e0:59:d3:4b:
                    26:1b:41:49:32:02:4a:49:19:32:22:de:45:03:55:
                    6d:7f:53:09:6b:42:31:44:38:f1:82:e9:91:52:13:
                    57:64:3e:3e:d8:97:6f:b2:e4:7c:0a:91:81:e9:da:
                    db:4e:93:f8:3b:f4:26:51:68:00:cf:1e:aa:00:75:
                    82:e4:a0:3e:3e:53:21:27:48:99:30:31:c5:62:47:
                    c8:ed:07:f3:44:50:a8:59:e9:fc:a3:b5:50:2a:7e:
                    fc:cd:e2:91:d3:61:9c:de:4e:4f:ec:48:3c:f0:bf:
                    1c:cd:92:ae:80:d8:d1:5a:bf:a9:5b:22:31:f0:bd:
                    40:20:0f:ae:40:69:f0:a5:9f:97:89:ea:57:21:27:
                    52:1d:25:1f:22:4b:a2:d1:3e:c8:ac:9a:0d:05:4a:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:93:13:AC:2E:36:37:44:58:3E:95:FA:0A:B0:71:19:D5:1A:3F:47
            X509v3 Authority Key Identifier:
                keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c8:57:9b:39:88:66:bc:88:70:4c:d1:9b:36:77:44:dc:c6:
         a1:d4:82:40:d4:3f:32:98:45:79:d5:db:ab:e0:03:4b:78:37:
         5c:63:39:1d:87:d7:e7:ab:7a:f5:90:f2:b2:45:aa:e6:4a:ba:
         2c:70:62:64:98:c3:c9:84:c3:1a:ec:d9:19:74:79:06:95:ed:
         8c:ff:9e:17:25:fa:4c:a0:d9:e9:d2:f9:98:6b:96:12:01:c3:
         2a:4e:04:62:be:a0:4d:5e:58:ae:5a:09:b4:50:01:fa:09:5f:
         40:c6:9c:1e:fd:41:93:89:51:4c:fc:4b:be:3e:95:b9:27:b8:
         c0:d0:a3:04:f5:1b:5d:b7:82:5d:6e:0c:69:30:b2:2f:b0:c8:
         9d:f3:31:1b:e4:8b:dd:a3:65:86:b1:21:24:d1:4f:32:37:56:
         e2:21:78:12:c5:67:33:58:26:0a:b9:a1:d0:78:cb:2f:6c:12:
         5a:57:e6:0a:c5:da:e5:d2:ba:b3:56:46:ca:66:0f:20:38:64:
         6c:2c:77:ad:d9:97:29:7e:ea:90:8a:69:5c:26:9d:df:05:50:
         c5:47:42:2c:4c:f4:4b:b7:2a:ba:b1:7e:31:f9:70:e9:09:90:
         98:52:34:d6:21:27:b6:43:31:af:20:42:5e:aa:53:77:da:f0:
         56:54:3c:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumIX74mbwJeM/uR/LxvsMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YWJlNjdiMjFkMzIzYjJiMmI0NDJjNmIwNmFlMzJjYzI4
MDM1OGQwHhcNMjUwNDEzMTAwMTA5WhcNMjUwNDE0MTAwMTA5WjAzMTEwLwYDVQQD
EygzYzkzMTNhYzJlMzYzNzQ0NTgzZTk1ZmEwYWIwNzExOWQ1MWEzZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfYFsRYs32PEKab7vDOlvUyOu1yR
si+XTFYtseEwohbtMqQROT8nRj1JLQwdIYXm9XDhagCwRzKR65qzQmPl1xTo4AUw
QoGcibz7WEW5qfPY+N+LS814QMSVWULSR6rjZAk+YuBZ00smG0FJMgJKSRkyIt5F
A1Vtf1MJa0IxRDjxgumRUhNXZD4+2JdvsuR8CpGB6drbTpP4O/QmUWgAzx6qAHWC
5KA+PlMhJ0iZMDHFYkfI7QfzRFCoWen8o7VQKn78zeKR02Gc3k5P7Eg88L8czZKu
gNjRWr+pWyIx8L1AIA+uQGnwpZ+XiepXISdSHSUfIkui0T7IrJoNBUoGiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyTE6wuNjdEWD6V+gqwcRnVGj9HMB8GA1UdIwQY
MBaAFCWr5nsh0yOysrRCxrBq4yzCgDWNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zN2I2NGEtY2M1ZS00NjMwLTk2ZjIt
NzIxOGEzMTc5MGYzLzEvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8zN2I2NGEtY2M1ZS00NjMwLTk2ZjItNzIxOGEzMTc5MGYz
LzEvSmF2bWV5SFRJN0t5dEVMR3NHcmpMTUtBTlkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8hXmzmI
ZryIcEzRmzZ3RNzGodSCQNQ/MphFedXbq+ADS3g3XGM5HYfX56t69ZDyskWq5kq6
LHBiZJjDyYTDGuzZGXR5BpXtjP+eFyX6TKDZ6dL5mGuWEgHDKk4EYr6gTV5YrloJ
tFAB+glfQMacHv1Bk4lRTPxLvj6VuSe4wNCjBPUbXbeCXW4MaTCyL7DInfMxG+SL
3aNlhrEhJNFPMjdW4iF4EsVnM1gmCrmh0HjLL2wSWlfmCsXa5dK6s1ZGymYPIDhk
bCx3rdmXKX7qkIppXCad3wVQxUdCLEz0S7cqurF+Mflw6QmQmFI01iEntkMxryBC
XqpTd9rwVlQ8zg==
-----END CERTIFICATE-----