Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
File:                     JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft (raw, json)
Hash identifier:          GfThGz5aPt6aLQmbbCNrcRiy9TXEpJtXJlmLwKUtmpo=
Subject key identifier:   A1:40:39:FE:8F:A7:60:1A:25:1B:5B:19:99:44:35:55:7E:24:3D:BC
Authority key identifier: 24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27
Certificate issuer:       /CN=24db53647ad645a9420f60b86d6e9375fcf85a27
Certificate serial:       01962F069B9BB53FFAFADF6F02AC662F9A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:24 +0000
Files and hashes:         1: JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl (hash: NT+V5aIvpFHt30mp5nNIqXQQ58EPkanpEb9mNSEKA5U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9b:9b:b5:3f:fa:fa:df:6f:02:ac:66:2f:9a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24db53647ad645a9420f60b86d6e9375fcf85a27
        Validity
            Not Before: Apr 13 12:01:24 2025 GMT
            Not After : Apr 14 12:01:24 2025 GMT
        Subject: CN=a14039fe8fa7601a251b5b19994435557e243dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:d2:ed:62:9a:bc:dc:f9:93:d3:21:38:63:
                    90:4a:94:da:67:9d:3d:9f:e2:18:47:e6:84:50:12:
                    6b:cf:12:bd:f5:ff:b2:21:7b:4e:b9:a5:16:4f:14:
                    e5:de:58:12:ea:5a:d2:84:3f:2b:44:11:20:d3:ea:
                    39:6e:ee:e3:66:da:7b:d1:ac:d7:f7:fa:aa:21:f9:
                    07:30:72:f7:20:7d:00:49:9f:fa:f2:79:6b:c7:12:
                    64:ae:0d:9c:9f:ce:b2:0c:3e:d5:69:31:80:6e:81:
                    f6:2b:ec:2e:33:9e:30:50:2b:1a:f7:73:81:17:32:
                    fb:6e:23:96:51:f5:39:2c:e1:68:4a:15:eb:f7:38:
                    f3:2d:6d:1d:18:6f:a7:d8:ff:9b:d9:de:3d:c0:9a:
                    08:7c:30:54:e5:a9:c9:b1:09:92:fd:d2:d7:05:53:
                    d9:85:5f:60:b5:b6:62:85:e3:21:34:e9:8e:92:7c:
                    06:65:d2:87:93:37:60:ee:d6:8e:41:91:99:20:5c:
                    1e:0a:57:79:9d:6b:58:f4:1a:f7:ed:46:c2:0b:95:
                    a7:52:87:48:20:5c:d4:91:c2:8c:8d:83:b9:df:a6:
                    fc:61:1c:3e:86:09:bc:a2:a3:83:1b:98:1e:64:c5:
                    20:68:93:97:aa:af:10:a2:e9:95:f4:6e:45:b4:f5:
                    63:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:40:39:FE:8F:A7:60:1A:25:1B:5B:19:99:44:35:55:7E:24:3D:BC
            X509v3 Authority Key Identifier:
                keyid:24:DB:53:64:7A:D6:45:A9:42:0F:60:B8:6D:6E:93:75:FC:F8:5A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNtTZHrWRalCD2C4bW6Tdfz4Wic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb86f7-21ef-4278-bd81-461072bf8aef/1/JNtTZHrWRalCD2C4bW6Tdfz4Wic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c5:db:d2:48:e4:d6:55:76:0c:4d:11:df:ab:ee:74:5a:aa:
         9a:59:ed:e2:f9:61:71:17:92:8d:13:06:a6:4f:24:b2:9c:e2:
         51:c1:65:48:08:42:43:eb:a1:e3:63:88:f4:bd:77:67:5c:5f:
         0b:d5:fd:73:7a:38:cf:42:b3:f5:ba:89:55:b2:f9:2c:b6:6f:
         14:f8:fa:46:a9:38:ee:34:4c:2e:08:86:77:ba:10:a2:af:90:
         17:04:db:64:81:ed:e4:bf:36:ab:a9:80:02:0a:ea:6f:29:f4:
         ea:33:6b:92:64:45:db:09:ef:ae:c6:d6:f5:c5:ac:96:67:07:
         e0:1e:01:26:8f:ae:d2:7e:8d:97:0b:52:b3:ba:8d:67:3e:ce:
         bf:b6:e0:3d:8d:d6:d2:ee:88:7a:d9:48:c2:00:22:12:8e:a0:
         4b:8f:ce:81:db:c4:4a:08:14:90:35:2e:2d:e8:98:41:17:06:
         f2:25:b0:3b:88:8b:ba:bf:05:3e:23:fa:00:9b:d7:5c:77:f4:
         db:c2:f8:ba:0d:40:66:9c:bb:0b:ce:f7:eb:e7:b1:e5:27:e6:
         f9:63:ce:94:cc:ee:b2:d6:4b:ee:16:48:6e:56:cf:2a:54:18:
         e8:ea:66:f6:cb:0a:fa:0c:a8:52:22:67:22:d3:a0:24:d0:64:
         99:f8:23:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpubtT/6+t9vAqxmL5qKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZGI1MzY0N2FkNjQ1YTk0MjBmNjBiODZkNmU5Mzc1ZmNm
ODVhMjcwHhcNMjUwNDEzMTIwMTI0WhcNMjUwNDE0MTIwMTI0WjAzMTEwLwYDVQQD
EyhhMTQwMzlmZThmYTc2MDFhMjUxYjViMTk5OTQ0MzU1NTdlMjQzZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJzS7WKavNz5k9MhOGOQSpTaZ509
n+IYR+aEUBJrzxK99f+yIXtOuaUWTxTl3lgS6lrShD8rRBEg0+o5bu7jZtp70azX
9/qqIfkHMHL3IH0ASZ/68nlrxxJkrg2cn86yDD7VaTGAboH2K+wuM54wUCsa93OB
FzL7biOWUfU5LOFoShXr9zjzLW0dGG+n2P+b2d49wJoIfDBU5anJsQmS/dLXBVPZ
hV9gtbZiheMhNOmOknwGZdKHkzdg7taOQZGZIFweCld5nWtY9Br37UbCC5WnUodI
IFzUkcKMjYO536b8YRw+hgm8oqODG5geZMUgaJOXqq8QoumV9G5FtPVjUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFAOf6Pp2AaJRtbGZlENVV+JD28MB8GA1UdIwQY
MBaAFCTbU2R61kWpQg9guG1uk3X8+FonMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9lYjg2ZjctMjFlZi00Mjc4LWJkODEt
NDYxMDcyYmY4YWVmLzEvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9lYjg2ZjctMjFlZi00Mjc4LWJkODEtNDYxMDcyYmY4YWVm
LzEvSk50VFpIcldSYWxDRDJDNGJXNlRkZno0V2ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicXb0kjk
1lV2DE0R36vudFqqmlnt4vlhcReSjRMGpk8kspziUcFlSAhCQ+uh42OI9L13Z1xf
C9X9c3o4z0Kz9bqJVbL5LLZvFPj6Rqk47jRMLgiGd7oQoq+QFwTbZIHt5L82q6mA
Agrqbyn06jNrkmRF2wnvrsbW9cWslmcH4B4BJo+u0n6NlwtSs7qNZz7Ov7bgPY3W
0u6IetlIwgAiEo6gS4/OgdvESggUkDUuLeiYQRcG8iWwO4iLur8FPiP6AJvXXHf0
28L4ug1AZpy7C8736+ex5Sfm+WPOlMzustZL7hZIblbPKlQY6Opm9ssK+gyoUiJn
ItOgJNBkmfgjOg==
-----END CERTIFICATE-----