Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
File:                     JXjmbXV_leptaTqn-E_LJ0l1yLs.mft (raw, json)
Hash identifier:          nUBShKz0Op83MQZJoYDeK3zOwNDbH79EYbMOEcdGsZo=
Subject key identifier:   15:9A:3B:BA:99:38:78:14:60:64:8C:3B:CA:06:F2:A8:C2:0D:40:C8
Authority key identifier: 25:78:E6:6D:75:7F:95:EA:6D:69:3A:A7:F8:4F:CB:27:49:75:C8:BB
Certificate issuer:       /CN=2578e66d757f95ea6d693aa7f84fcb274975c8bb
Certificate serial:       01962E9966C1959F4F4EADFE1FD477A8AC42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft
Manifest number:          0586
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: 9ArDJmOHTGy2Uvx62RIG28a5LGI.roa (hash: Et89QDvNcCQ2m2b4aktJLI1CigeR9TGu2ft9T2DrbR0=)
                          2: JXjmbXV_leptaTqn-E_LJ0l1yLs.crl (hash: Kjwe9y9lMc4n1yKjP3isCuzieXX6y05/fA7WAVJU3WY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:66:c1:95:9f:4f:4e:ad:fe:1f:d4:77:a8:ac:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2578e66d757f95ea6d693aa7f84fcb274975c8bb
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=159a3bba9938781460648c3bca06f2a8c20d40c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9f:42:e6:f4:27:d4:1c:d7:42:3e:3a:4c:8e:
                    36:ed:c4:1b:e6:5c:4c:98:9b:98:9e:bf:89:df:83:
                    d4:18:bb:7f:26:dd:b1:62:99:2c:52:e6:5e:77:96:
                    26:9d:53:cf:f3:fd:77:43:85:42:8a:59:94:fc:97:
                    f8:3a:00:dc:88:61:f8:99:e2:03:17:83:1f:9d:ed:
                    75:04:57:7e:de:98:04:2f:5c:5f:64:25:3f:40:1a:
                    f0:71:9e:15:42:b7:18:2f:5d:e2:02:ab:00:0a:16:
                    9e:85:53:45:75:ca:2c:a5:be:8d:fd:27:6c:4e:ae:
                    06:b2:94:ae:27:fb:fc:ff:ba:67:c7:7d:da:07:09:
                    d1:ab:bd:b8:c5:7f:b4:de:f2:63:6a:b8:a6:20:2b:
                    a9:ba:8e:f4:b6:6e:10:98:69:a1:3a:80:59:c3:42:
                    ad:79:d9:91:88:68:03:f9:66:7e:4c:ab:0a:62:f1:
                    28:de:44:8e:ed:e2:f9:a9:d8:be:67:9b:85:e5:64:
                    15:cb:cd:f9:26:29:1e:62:0b:c3:d1:ee:dc:1e:f3:
                    26:8e:0a:9a:38:82:e2:a8:f1:6a:ec:8a:4f:76:8b:
                    9a:6d:54:a4:bb:af:5a:21:a0:71:2a:4a:23:5b:a1:
                    b9:02:0a:3c:0a:c1:c6:bb:08:5c:e4:f1:a0:77:3c:
                    79:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9A:3B:BA:99:38:78:14:60:64:8C:3B:CA:06:F2:A8:C2:0D:40:C8
            X509v3 Authority Key Identifier:
                keyid:25:78:E6:6D:75:7F:95:EA:6D:69:3A:A7:F8:4F:CB:27:49:75:C8:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXjmbXV_leptaTqn-E_LJ0l1yLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5b5d9-0ae7-4629-a01b-fbad637c4142/1/JXjmbXV_leptaTqn-E_LJ0l1yLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:3a:7a:be:b9:8e:d9:03:3c:12:ed:81:79:cd:40:4f:19:
         71:6a:15:b9:b8:3a:e2:9a:9e:7c:b6:7c:a5:7d:a4:94:ff:89:
         14:47:cf:1c:57:ee:31:eb:57:da:ef:5f:d8:82:85:0a:cf:3b:
         69:b7:a4:52:07:bc:11:91:71:0a:f4:6b:40:6d:f9:7f:16:2c:
         fc:53:96:ec:06:82:0e:4d:d0:73:85:24:38:8e:44:5c:84:a1:
         14:2e:9e:fa:66:df:26:38:2c:e3:8e:9c:89:08:04:be:9e:30:
         2a:f5:11:d4:af:2c:06:7b:e5:dc:c1:0d:02:1c:8b:b6:a4:a8:
         7a:d7:d9:60:a8:ab:d7:fc:1a:9c:4d:97:0a:8b:30:4e:07:00:
         47:e0:93:dd:a3:c2:f5:54:fd:62:65:c6:e0:f7:42:7e:94:39:
         5e:05:42:c3:bc:9e:eb:75:c2:78:d1:20:25:f2:88:79:e9:aa:
         36:1a:a7:51:b6:5b:40:e7:f1:24:72:d1:3b:c3:d8:aa:3d:d4:
         af:16:2d:29:1d:19:67:f6:86:2a:bf:10:59:3f:79:c2:58:f3:
         bc:bd:db:cd:56:a3:0e:70:b9:45:73:96:02:3a:cb:85:b4:c0:
         d1:c0:c6:f0:24:22:59:be:3c:8c:af:20:be:22:9a:85:1e:09:
         98:ec:6d:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWbBlZ9PTq3+H9R3qKxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NzhlNjZkNzU3Zjk1ZWE2ZDY5M2FhN2Y4NGZjYjI3NDk3
NWM4YmIwHhcNMjUwNDEzMTAwMjA3WhcNMjUwNDE0MTAwMjA3WjAzMTEwLwYDVQQD
EygxNTlhM2JiYTk5Mzg3ODE0NjA2NDhjM2JjYTA2ZjJhOGMyMGQ0MGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p9C5vQn1BzXQj46TI427cQb5lxM
mJuYnr+J34PUGLt/Jt2xYpksUuZed5YmnVPP8/13Q4VCilmU/Jf4OgDciGH4meID
F4Mfne11BFd+3pgEL1xfZCU/QBrwcZ4VQrcYL13iAqsAChaehVNFdcospb6N/Sds
Tq4GspSuJ/v8/7pnx33aBwnRq724xX+03vJjarimICupuo70tm4QmGmhOoBZw0Kt
edmRiGgD+WZ+TKsKYvEo3kSO7eL5qdi+Z5uF5WQVy835JikeYgvD0e7cHvMmjgqa
OILiqPFq7IpPdouabVSku69aIaBxKkojW6G5Ago8CsHGuwhc5PGgdzx58wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWaO7qZOHgUYGSMO8oG8qjCDUDIMB8GA1UdIwQY
MBaAFCV45m11f5XqbWk6p/hPyydJdci7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jNWI1ZDktMGFlNy00NjI5LWEwMWIt
ZmJhZDYzN2M0MTQyLzEvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jNWI1ZDktMGFlNy00NjI5LWEwMWItZmJhZDYzN2M0MTQy
LzEvSlhqbWJYVl9sZXB0YVRxbi1FX0xKMGwxeUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZs6er65
jtkDPBLtgXnNQE8ZcWoVubg64pqefLZ8pX2klP+JFEfPHFfuMetX2u9f2IKFCs87
abekUge8EZFxCvRrQG35fxYs/FOW7AaCDk3Qc4UkOI5EXIShFC6e+mbfJjgs446c
iQgEvp4wKvUR1K8sBnvl3MENAhyLtqSoetfZYKir1/wanE2XCoswTgcAR+CT3aPC
9VT9YmXG4PdCfpQ5XgVCw7ye63XCeNEgJfKIeemqNhqnUbZbQOfxJHLRO8PYqj3U
rxYtKR0ZZ/aGKr8QWT95wljzvL3bzVajDnC5RXOWAjrLhbTA0cDG8CQiWb48jK8g
viKahR4JmOxt/Q==
-----END CERTIFICATE-----