Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
File:                     JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json)
Hash identifier:          jcDsZ9JC1mvHObc6s8uETbo3eYm9oiBwE7JG1l2xqBM=
Subject key identifier:   36:26:28:F8:5B:6D:EB:9C:0F:4F:AF:21:26:F8:38:8D:99:6B:A6:B8
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Certificate issuer:       /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial:       01962FAB5DD954F2D5FF3798EB5B206CFDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
Manifest number:          0BA3
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: 8XbxoTZlujrXpH+QSSwThpQbDXE5yDzefiuVexzQF+0=)
                          2: onIKXkQooL-gKM4FNa_iPOCUh28.roa (hash: p9VhepPylQixNxjdmUg1Yw/ZjccT3GaAzNYioyvMSo0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5d:d9:54:f2:d5:ff:37:98:eb:5b:20:6c:fd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=362628f85b6deb9c0f4faf2126f8388d996ba6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:a5:81:be:74:e3:41:b9:39:05:b7:30:48:
                    52:f3:d1:b4:cf:59:4a:dc:30:91:40:e2:38:37:cd:
                    34:39:cf:e0:c5:84:ea:b1:32:db:6d:e5:c6:a6:a2:
                    6d:06:25:f1:23:ff:d8:22:7b:6a:c8:cf:3e:ab:bb:
                    55:32:74:6f:89:b5:55:b7:bd:b9:11:a9:dd:7c:d3:
                    7e:30:e5:c7:3e:0d:30:23:07:30:62:14:90:92:94:
                    3f:35:b3:b9:83:cf:56:c0:f6:28:b8:cc:67:5f:7f:
                    e7:f3:8b:ea:3a:7b:19:41:62:a2:d1:32:38:09:df:
                    57:34:fd:e2:e0:0b:ba:01:80:71:e6:14:e9:05:98:
                    7e:17:e0:b3:62:be:5c:1c:74:a8:3f:a4:5a:06:22:
                    b5:4b:d1:d5:7a:b0:5b:f2:7b:c1:c4:cd:86:48:33:
                    34:f5:9d:cb:4a:ae:67:e6:1f:2b:ae:6d:06:16:a6:
                    88:e8:b8:92:a6:b1:a5:71:da:6d:6e:9f:6d:63:95:
                    33:3d:a1:03:06:5f:7d:e5:ab:a2:64:b3:2b:35:76:
                    0f:28:f4:25:43:6b:25:74:ed:74:2e:db:86:6d:66:
                    5d:d1:91:e4:37:88:c8:99:69:9e:82:ae:a4:d6:d5:
                    9c:28:3e:bb:7b:1d:ca:38:b9:2b:80:0f:13:5d:25:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:26:28:F8:5B:6D:EB:9C:0F:4F:AF:21:26:F8:38:8D:99:6B:A6:B8
            X509v3 Authority Key Identifier:
                keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:72:ce:0e:e4:b7:45:c7:a2:b7:d8:ee:30:01:ed:59:cb:3a:
         12:d6:9c:ae:79:7f:81:a2:ec:70:8b:f6:1d:df:d4:22:05:8b:
         72:10:78:3b:f9:b6:73:ff:95:a7:dd:71:0f:d5:8b:c2:f9:ee:
         9e:5a:e1:eb:13:b0:fb:9b:ed:a1:a2:58:00:f7:2e:46:54:aa:
         d6:59:3f:8b:7f:fe:f7:37:ee:da:db:8d:b1:dd:2f:f9:15:b4:
         40:52:87:48:93:eb:f8:d0:9e:62:27:dd:86:c8:eb:ca:4a:3e:
         00:ea:91:ae:49:f4:cc:22:b1:07:53:29:54:65:a7:6d:db:d4:
         0e:ce:8c:17:c2:5b:a6:a1:1d:97:1e:5a:c5:9e:90:23:8f:69:
         42:0c:18:1f:45:dc:62:45:42:d1:f5:c3:58:93:7b:e6:e6:22:
         21:b8:ff:ec:e7:01:fc:e5:df:5c:b5:fe:6b:f4:22:4a:09:3f:
         f1:75:65:09:be:e8:37:28:09:c9:e1:4a:e1:b8:f6:11:cb:96:
         2c:63:0e:de:1f:5d:89:5f:a3:97:09:7a:a8:a7:c7:f0:9f:75:
         d7:0a:db:81:29:f0:8a:18:87:4b:f6:70:86:04:b3:40:e7:91:
         da:2f:a9:4e:c8:72:67:1b:1e:97:f4:e9:44:ad:5f:64:f6:8c:
         5a:f3:c7:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq13ZVPLV/zeY61sgbP21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzY3NGFiMTgwNmRkNmFmZTIxM2JlMzhlOTJhMzVmYmM2
NGNlMzQwHhcNMjUwNDEzMTUwMTIxWhcNMjUwNDE0MTUwMTIxWjAzMTEwLwYDVQQD
EygzNjI2MjhmODViNmRlYjljMGY0ZmFmMjEyNmY4Mzg4ZDk5NmJhNmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL+lgb5040G5OQW3MEhS89G0z1lK
3DCRQOI4N800Oc/gxYTqsTLbbeXGpqJtBiXxI//YIntqyM8+q7tVMnRvibVVt725
EandfNN+MOXHPg0wIwcwYhSQkpQ/NbO5g89WwPYouMxnX3/n84vqOnsZQWKi0TI4
Cd9XNP3i4Au6AYBx5hTpBZh+F+CzYr5cHHSoP6RaBiK1S9HVerBb8nvBxM2GSDM0
9Z3LSq5n5h8rrm0GFqaI6LiSprGlcdptbp9tY5UzPaEDBl995auiZLMrNXYPKPQl
Q2sldO10LtuGbWZd0ZHkN4jImWmegq6k1tWcKD67ex3KOLkrgA8TXSXSLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYmKPhbbeucD0+vISb4OI2Za6a4MB8GA1UdIwQY
MBaAFCXGdKsYBt1q/iE7446So1+8ZM40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNaMHF4Z0czV3ItSVR2ampwS2pYN3hrempRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS81NmJlOGEtYzhiZS00OGY5LWE2N2Mt
ZjVjZDBkNzExNmViLzEvSmNaMHF4Z0czV3ItSVR2ampwS2pYN3hrempRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS81NmJlOGEtYzhiZS00OGY5LWE2N2MtZjVjZDBkNzExNmVi
LzEvSmNaMHF4Z0czV3ItSVR2ampwS2pYN3hrempRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHLODuS3
Rceit9juMAHtWcs6Etacrnl/gaLscIv2Hd/UIgWLchB4O/m2c/+Vp91xD9WLwvnu
nlrh6xOw+5vtoaJYAPcuRlSq1lk/i3/+9zfu2tuNsd0v+RW0QFKHSJPr+NCeYifd
hsjryko+AOqRrkn0zCKxB1MpVGWnbdvUDs6MF8JbpqEdlx5axZ6QI49pQgwYH0Xc
YkVC0fXDWJN75uYiIbj/7OcB/OXfXLX+a/QiSgk/8XVlCb7oNygJyeFK4bj2EcuW
LGMO3h9diV+jlwl6qKfH8J911wrbgSnwihiHS/ZwhgSzQOeR2i+pTshyZxsel/Tp
RK1fZPaMWvPHCg==
-----END CERTIFICATE-----