Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File:                     jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier:          lw2Nf850YdoBhAty2GZbSjmb2/zrO8vOmSYrVhuP2f0=
Subject key identifier:   97:7D:3F:75:EA:C0:69:62:F4:A1:3B:E5:A9:3F:9F:06:C7:69:60:92
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer:       /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial:       01962E61AC5210D1E82EB06AE8202E00CE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: grXRQpT1aZeaC-n0N849AfZZ_V4.roa (hash: x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=)
                          2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: 77jvXSmjVU7Lvioas1kfVM+ela2eAFNtpY56QnZpomE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ac:52:10:d1:e8:2e:b0:6a:e8:20:2e:00:ce:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=977d3f75eac06962f4a13be5a93f9f06c7696092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:4a:5d:79:c0:2b:0a:a3:61:cd:cd:3b:f3:
                    cf:b2:ec:62:02:22:6e:32:3a:8a:b1:e3:17:71:fb:
                    77:44:60:8a:65:3f:e6:6b:43:1c:8a:6c:69:3e:c3:
                    bc:9e:d8:3e:4c:5c:de:5d:33:03:3f:39:97:d6:c0:
                    20:cf:1a:a3:7c:c3:74:61:d2:28:95:e2:e9:bc:f2:
                    d9:39:b3:d9:11:f4:38:4e:43:3f:65:b1:28:97:19:
                    7f:af:63:50:79:55:ec:46:ab:0f:6e:b4:48:20:63:
                    ef:44:ba:db:c3:a7:58:fd:04:09:40:c0:07:e2:7b:
                    fe:2e:6d:35:b0:ff:b8:7f:c4:32:cb:87:6c:0a:8e:
                    3b:b0:20:01:27:a4:18:25:30:9f:05:bd:0b:f3:c3:
                    a9:c9:55:64:6e:6a:65:cc:65:dd:2a:ff:30:3f:39:
                    1e:d2:0f:03:12:df:c8:e4:5b:f7:5e:5a:0a:83:76:
                    b6:3c:1a:ef:76:fe:54:39:e8:d2:6d:64:86:8f:13:
                    7c:5d:1d:b1:1c:9d:f6:4b:17:3c:02:bf:e6:8e:b1:
                    9d:b6:51:dd:fc:31:2b:ca:25:dd:02:44:a3:b5:ec:
                    83:02:9d:a3:77:49:8d:67:f2:d0:15:d9:ca:ed:d6:
                    0f:a6:6c:05:38:88:92:ce:cb:a3:52:99:3c:30:02:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7D:3F:75:EA:C0:69:62:F4:A1:3B:E5:A9:3F:9F:06:C7:69:60:92
            X509v3 Authority Key Identifier:
                keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:69:67:ba:07:30:bc:36:0c:f0:41:2c:7c:db:9a:1d:2a:14:
         2a:77:8b:d9:95:18:7d:50:1c:58:8a:a0:71:50:fb:a5:55:4d:
         3f:1b:73:c1:a2:4e:9f:21:fe:16:61:3a:a7:a0:b3:ba:00:5f:
         ab:76:0b:1f:9e:3e:9d:5c:97:bd:ba:d6:61:ad:ec:58:3d:e5:
         6e:30:a6:58:6d:0b:df:f1:63:c0:18:b7:9d:d2:07:a5:46:fd:
         da:19:d2:d8:30:09:5c:75:c5:da:87:21:6b:1f:89:17:d1:08:
         f0:7e:b9:ab:d0:28:d1:17:48:cb:ff:6e:5f:1f:e8:22:95:54:
         dc:4f:18:aa:9a:35:64:a0:56:d4:d2:3e:cb:a8:89:3e:ce:09:
         fa:bb:a0:1a:be:e7:65:e2:08:9f:0c:d1:52:ce:a9:fe:38:bf:
         9b:8d:8d:76:e6:2a:08:71:5f:05:b7:fc:9e:11:60:44:28:01:
         ad:c5:b3:cd:0f:1b:cd:3e:7c:c0:4a:d5:28:0a:b5:bf:b8:5f:
         6d:80:7e:5b:2e:39:81:fd:e9:31:37:27:07:2a:fc:3f:bf:26:
         4a:63:a6:35:0a:2f:96:67:ad:3d:9f:68:d9:7c:41:93:88:f8:
         65:e3:8d:25:42:c0:6e:69:9b:08:41:f3:98:09:c2:bc:a4:99:
         fb:0a:5d:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaxSENHoLrBq6CAuAM4RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDQxZDY2OWVhNmM0MTE3MGQ2ZjgxNDA5YzBmZmRjMjhl
NTY5MDcwHhcNMjUwNDEzMDkwMTE1WhcNMjUwNDE0MDkwMTE1WjAzMTEwLwYDVQQD
Eyg5NzdkM2Y3NWVhYzA2OTYyZjRhMTNiZTVhOTNmOWYwNmM3Njk2MDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbxKXXnAKwqjYc3NO/PPsuxiAiJu
MjqKseMXcft3RGCKZT/ma0McimxpPsO8ntg+TFzeXTMDPzmX1sAgzxqjfMN0YdIo
leLpvPLZObPZEfQ4TkM/ZbEolxl/r2NQeVXsRqsPbrRIIGPvRLrbw6dY/QQJQMAH
4nv+Lm01sP+4f8Qyy4dsCo47sCABJ6QYJTCfBb0L88OpyVVkbmplzGXdKv8wPzke
0g8DEt/I5Fv3XloKg3a2PBrvdv5UOejSbWSGjxN8XR2xHJ32Sxc8Ar/mjrGdtlHd
/DEryiXdAkSjteyDAp2jd0mNZ/LQFdnK7dYPpmwFOIiSzsujUpk8MAKGMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJd9P3XqwGli9KE75ak/nwbHaWCSMB8GA1UdIwQY
MBaAFI8EHWaepsQRcNb4FAnA/9wo5WkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8xYThjYmQtNzJjZi00YTFjLTgzZDIt
YzIzZWFlZDRkMTI1LzEvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8xYThjYmQtNzJjZi00YTFjLTgzZDItYzIzZWFlZDRkMTI1
LzEvandRZFpwNm14QkZ3MXZnVUNjRF8zQ2psYVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGlnugcw
vDYM8EEsfNuaHSoUKneL2ZUYfVAcWIqgcVD7pVVNPxtzwaJOnyH+FmE6p6CzugBf
q3YLH54+nVyXvbrWYa3sWD3lbjCmWG0L3/FjwBi3ndIHpUb92hnS2DAJXHXF2och
ax+JF9EI8H65q9Ao0RdIy/9uXx/oIpVU3E8Yqpo1ZKBW1NI+y6iJPs4J+rugGr7n
ZeIInwzRUs6p/ji/m42NduYqCHFfBbf8nhFgRCgBrcWzzQ8bzT58wErVKAq1v7hf
bYB+Wy45gf3pMTcnByr8P78mSmOmNQovlmetPZ9o2XxBk4j4ZeONJULAbmmbCEHz
mAnCvKSZ+wpdvw==
-----END CERTIFICATE-----