Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
File:                     jGrD-sRfBdkCaII3X-ArFX1LdRg.mft (raw, json)
Hash identifier:          cp0P0wCklzD44RnPhnyaQ58xa1j6ahjCnuaGhJy/yIU=
Subject key identifier:   FE:B6:0D:DE:9E:07:BD:BE:00:60:8E:35:D6:AC:D7:1C:39:F8:A6:BD
Authority key identifier: 8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
Certificate issuer:       /CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Certificate serial:       01962E99452A7116B52EE3FDB5FBFD7E4F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
Manifest number:          0C8C
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: jGrD-sRfBdkCaII3X-ArFX1LdRg.crl (hash: eXswtDCEjMlxZAqrZmxhth6wVDLFtfdAjx2EMnICap0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:45:2a:71:16:b5:2e:e3:fd:b5:fb:fd:7e:4f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=feb60dde9e07bdbe00608e35d6acd71c39f8a6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:2c:a1:a9:b6:9a:97:25:e7:fe:f3:0e:be:
                    fe:22:9a:3f:07:18:2d:4d:e4:b3:dc:75:ca:4d:86:
                    ff:28:77:b4:12:00:b5:5b:37:5e:23:ce:52:79:02:
                    59:23:13:9d:b9:d5:55:c0:f1:19:75:20:43:e2:2c:
                    a8:40:47:4b:ab:0f:9e:13:f5:0f:79:58:53:ca:12:
                    1e:c7:19:eb:f8:f6:08:59:97:47:79:b3:b0:61:7d:
                    c7:a3:3d:80:30:a1:f1:b6:c3:21:23:43:58:8c:04:
                    66:3e:bd:93:be:eb:a3:4b:9d:b5:56:95:df:a3:c8:
                    59:e3:07:29:c7:af:63:24:b3:9b:91:4b:0f:0e:94:
                    2a:5e:d9:bb:84:bb:d1:fd:78:f3:ea:c7:42:2c:a7:
                    5c:de:7d:9e:ed:ab:47:72:f3:e2:4e:b7:a2:24:84:
                    b4:35:fc:46:c9:a1:3e:0c:58:6b:63:7a:40:f9:2d:
                    a9:7f:f8:8e:f5:a3:9d:a2:f8:a6:f1:7d:de:3b:2f:
                    e9:53:64:f4:46:bc:de:ab:d5:a7:e4:24:0a:fe:12:
                    82:1f:8a:17:e9:d5:46:0e:af:c6:fc:ed:54:cd:f8:
                    d3:ea:fa:b4:3e:52:71:43:c5:ec:c7:d8:eb:93:23:
                    73:34:60:e0:27:71:ff:56:df:9e:92:d7:18:47:27:
                    68:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B6:0D:DE:9E:07:BD:BE:00:60:8E:35:D6:AC:D7:1C:39:F8:A6:BD
            X509v3 Authority Key Identifier:
                keyid:8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9f:fb:8d:f7:32:44:cd:6d:5f:bc:74:ff:b9:90:97:85:77:
         21:59:95:12:9f:10:17:4b:3d:47:d0:49:98:32:68:5c:1c:75:
         37:03:5e:47:d3:32:0b:66:86:90:4b:3d:8c:60:ac:a1:68:12:
         7a:9d:ea:85:28:74:1c:d5:db:ae:15:a8:c4:61:5a:cd:4f:f0:
         be:a1:11:8e:09:9e:ed:c3:c6:79:fa:6f:d5:d5:c1:9c:c2:32:
         b9:bc:bd:1c:97:b1:40:28:30:dc:71:4a:8e:13:24:2a:d2:4b:
         73:1f:bb:49:c6:a6:64:73:79:46:91:7a:f1:dc:14:ca:fb:f0:
         15:f9:f5:5d:e4:57:f0:cc:d9:ca:97:5e:77:e4:e7:4d:ac:7d:
         38:05:2c:11:89:b4:db:01:23:a9:52:88:06:e8:d1:e3:05:ad:
         00:5c:56:04:a9:d5:85:b2:6b:c1:47:c4:34:92:2f:86:38:33:
         ce:0d:84:23:3d:6c:a8:63:6e:8a:2b:d9:ce:9e:a8:d0:14:b3:
         ac:e5:1a:5f:2d:e6:1e:d5:3e:88:e5:81:9f:c0:dc:80:23:f1:
         46:db:f9:5b:43:62:c3:d2:02:c1:c8:ce:1c:c4:b3:69:76:f8:
         fa:41:fb:d4:6f:29:83:e2:67:2f:dc:6f:68:e7:1e:b9:34:26:
         a1:33:93:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumUUqcRa1LuP9tfv9fk9iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNmFjM2ZhYzQ1ZjA1ZDkwMjY4ODIzNzVmZTAyYjE1N2Q0
Yjc1MTgwHhcNMjUwNDEzMTAwMTU4WhcNMjUwNDE0MTAwMTU4WjAzMTEwLwYDVQQD
EyhmZWI2MGRkZTllMDdiZGJlMDA2MDhlMzVkNmFjZDcxYzM5ZjhhNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtksoam2mpcl5/7zDr7+Ipo/Bxgt
TeSz3HXKTYb/KHe0EgC1WzdeI85SeQJZIxOdudVVwPEZdSBD4iyoQEdLqw+eE/UP
eVhTyhIexxnr+PYIWZdHebOwYX3Hoz2AMKHxtsMhI0NYjARmPr2TvuujS521VpXf
o8hZ4wcpx69jJLObkUsPDpQqXtm7hLvR/Xjz6sdCLKdc3n2e7atHcvPiTreiJIS0
NfxGyaE+DFhrY3pA+S2pf/iO9aOdovim8X3eOy/pU2T0Rrzeq9Wn5CQK/hKCH4oX
6dVGDq/G/O1UzfjT6vq0PlJxQ8Xsx9jrkyNzNGDgJ3H/Vt+ektcYRydoEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP62Dd6eB72+AGCONdas1xw5+Ka9MB8GA1UdIwQY
MBaAFIxqw/rEXwXZAmiCN1/gKxV9S3UYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9iNzFkZjMtNDIyNi00YTU2LWJlYjgt
ODIyMTBjYmY4NDQ4LzEvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9iNzFkZjMtNDIyNi00YTU2LWJlYjgtODIyMTBjYmY4NDQ4
LzEvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJ/7jfcy
RM1tX7x0/7mQl4V3IVmVEp8QF0s9R9BJmDJoXBx1NwNeR9MyC2aGkEs9jGCsoWgS
ep3qhSh0HNXbrhWoxGFazU/wvqERjgme7cPGefpv1dXBnMIyuby9HJexQCgw3HFK
jhMkKtJLcx+7ScamZHN5RpF68dwUyvvwFfn1XeRX8MzZypded+TnTax9OAUsEYm0
2wEjqVKIBujR4wWtAFxWBKnVhbJrwUfENJIvhjgzzg2EIz1sqGNuiivZzp6o0BSz
rOUaXy3mHtU+iOWBn8DcgCPxRtv5W0Niw9ICwcjOHMSzaXb4+kH71G8pg+JnL9xv
aOceuTQmoTOT/A==
-----END CERTIFICATE-----