Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File:                     jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier:          ERqwsAZ1T/8w/NDCC06B/eGs3syaPfwZ+36lnHSyS7s=
Subject key identifier:   37:3C:10:12:04:30:7A:D0:2A:0D:DF:B4:BF:66:42:48:76:48:77:F3
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer:       /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial:       01962ECF6C1333CB5AE12FA2CF1FD2892584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number:          0894
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: gENnBMD7CFnpDe73cGovXB6cewg.roa (hash: rDcPDp/N1UMZLBWpv8SmAqXs5rg//NGw82tfNx9i/r0=)
                          2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: MpDVUjRYhK/nLCp/B6DisJepYi+iWto3R6XHcGtOT5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6c:13:33:cb:5a:e1:2f:a2:cf:1f:d2:89:25:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=373c101204307ad02a0ddfb4bf664248764877f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:60:b2:93:9f:45:1b:54:01:70:b2:c4:e9:b6:
                    cb:42:d5:19:b9:c8:ce:78:35:3d:92:6e:7e:fb:69:
                    c5:ee:27:b3:4e:1f:23:d9:a5:37:55:e0:0e:dd:c0:
                    e1:1c:24:a4:57:27:06:58:44:c9:47:09:0c:74:4c:
                    e8:ce:0d:48:e3:15:39:3e:fd:39:d6:fc:d4:00:ac:
                    97:36:4c:d9:29:f3:bf:27:be:08:a0:e2:8d:4e:d3:
                    02:b9:78:71:94:28:40:97:2c:58:99:7b:79:9e:4a:
                    db:89:f6:40:49:7f:ae:3e:c2:ac:ae:16:90:60:e3:
                    25:4f:46:87:dd:a8:1d:29:23:a1:96:18:14:19:4e:
                    08:48:7b:f7:ec:9a:f1:2d:2d:b7:69:5b:46:6f:b8:
                    63:b6:cd:e4:6a:38:2c:d1:d8:df:dd:0f:28:0f:84:
                    5f:a4:53:36:ac:17:48:77:5a:43:6c:7a:65:c3:44:
                    df:f4:74:ba:2f:8d:79:6b:31:eb:98:97:5c:25:71:
                    d0:8d:78:40:f9:74:27:4e:bd:f2:79:45:af:cf:75:
                    d2:88:0c:bb:60:a0:22:1f:c0:32:dc:5e:b2:4a:e2:
                    d7:83:26:44:dc:44:9a:53:ab:03:1b:7e:8f:1d:a3:
                    f9:cd:c0:78:1a:28:ac:c4:20:ee:57:7f:a5:fa:fe:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3C:10:12:04:30:7A:D0:2A:0D:DF:B4:BF:66:42:48:76:48:77:F3
            X509v3 Authority Key Identifier:
                keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:cc:60:4f:c5:e3:bd:67:65:21:06:d5:c3:49:40:d4:09:b6:
         d3:9b:a1:a7:3d:b2:3d:09:9b:35:90:ca:36:43:71:5b:23:54:
         75:71:04:9d:0b:14:ed:e0:b6:69:ee:4c:81:7c:7a:9f:67:6a:
         01:9d:2d:fb:0c:88:5f:34:6e:20:e9:5e:50:ef:12:99:c1:67:
         7d:44:13:72:fc:77:26:57:7b:53:c9:e1:a8:6c:13:69:78:11:
         48:91:a5:eb:48:a6:ec:9c:89:3f:6f:c9:1e:01:18:a6:f7:3c:
         68:6e:dc:ba:da:37:01:8f:f1:a4:c9:1b:f1:e9:8d:2c:a2:ca:
         d4:cb:ae:f0:19:ba:17:13:28:88:93:28:e8:5e:5d:2f:ea:bd:
         bb:d2:56:82:85:b8:d5:cd:52:9b:19:2e:4b:5c:aa:eb:18:f8:
         12:44:43:bc:fa:0c:99:2f:b0:25:e0:30:a3:d4:75:0d:64:48:
         67:5a:f1:7c:91:e7:1e:1d:8e:1a:fe:c2:25:66:0e:79:bb:06:
         be:7c:c0:2d:2b:72:40:bb:e0:2f:01:50:78:93:5d:df:57:4e:
         2d:2a:fd:67:bf:6b:83:48:dd:7a:f3:0f:cd:50:4a:43:a5:d9:
         d2:0a:5f:48:a7:12:64:88:6f:fd:42:62:b8:23:a5:9e:b4:5d:
         64:cf:cf:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2wTM8ta4S+izx/SiSWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTU2ZTY5Zjk0NDRjMmIwNjY4NzI1NjA4NWI2YTdhNGU5
ODg3ZjYwHhcNMjUwNDEzMTEwMTA3WhcNMjUwNDE0MTEwMTA3WjAzMTEwLwYDVQQD
EygzNzNjMTAxMjA0MzA3YWQwMmEwZGRmYjRiZjY2NDI0ODc2NDg3N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGCyk59FG1QBcLLE6bbLQtUZucjO
eDU9km5++2nF7iezTh8j2aU3VeAO3cDhHCSkVycGWETJRwkMdEzozg1I4xU5Pv05
1vzUAKyXNkzZKfO/J74IoOKNTtMCuXhxlChAlyxYmXt5nkrbifZASX+uPsKsrhaQ
YOMlT0aH3agdKSOhlhgUGU4ISHv37JrxLS23aVtGb7hjts3kajgs0djf3Q8oD4Rf
pFM2rBdId1pDbHplw0Tf9HS6L415azHrmJdcJXHQjXhA+XQnTr3yeUWvz3XSiAy7
YKAiH8Ay3F6ySuLXgyZE3ESaU6sDG36PHaP5zcB4GiisxCDuV3+l+v5KhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDc8EBIEMHrQKg3ftL9mQkh2SHfzMB8GA1UdIwQY
MBaAFI8Vbmn5REwrBmhyVghbanpOmIf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85YjgxZmUtNjdkMi00OTQ4LWI0YjEt
MmI3ODViNzJiNGY0LzEvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85YjgxZmUtNjdkMi00OTQ4LWI0YjEtMmI3ODViNzJiNGY0
LzEvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2cxgT8Xj
vWdlIQbVw0lA1Am205uhpz2yPQmbNZDKNkNxWyNUdXEEnQsU7eC2ae5MgXx6n2dq
AZ0t+wyIXzRuIOleUO8SmcFnfUQTcvx3Jld7U8nhqGwTaXgRSJGl60im7JyJP2/J
HgEYpvc8aG7cuto3AY/xpMkb8emNLKLK1Muu8Bm6FxMoiJMo6F5dL+q9u9JWgoW4
1c1SmxkuS1yq6xj4EkRDvPoMmS+wJeAwo9R1DWRIZ1rxfJHnHh2OGv7CJWYOebsG
vnzALStyQLvgLwFQeJNd31dOLSr9Z79rg0jdevMPzVBKQ6XZ0gpfSKcSZIhv/UJi
uCOlnrRdZM/PGw==
-----END CERTIFICATE-----