Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
File:                     J1qrffuxUqZGrfMnOzGqXd5kod8.mft (raw, json)
Hash identifier:          +4VBpIgjz81oUy1QHQ4z7jGyJ77jAse8lAHxaicGbio=
Subject key identifier:   BD:43:9D:F2:CD:4B:3F:EF:0C:B4:6E:B3:0E:29:3D:30:FA:FD:8A:F2
Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
Certificate issuer:       /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Certificate serial:       01962F3D7FB6F118C64B5659FA200F09F70B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
Manifest number:          0B19
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: J1qrffuxUqZGrfMnOzGqXd5kod8.crl (hash: phRoNT7+t/Ht9cPUulOA0bof48Lt19gzzS8CabHZGZs=)
                          2: _BsLA-Yq0byQhwlqjwrfokOt_ao.roa (hash: nUVtATfYPG2WeBzHlW5fiB+hmlpSz5V9uTVR1MUQR8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:7f:b6:f1:18:c6:4b:56:59:fa:20:0f:09:f7:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=bd439df2cd4b3fef0cb46eb30e293d30fafd8af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:82:56:f2:1c:70:e8:c7:c0:36:33:85:b1:44:
                    33:9b:8e:c0:8e:81:18:93:0e:b8:a3:96:ae:c8:ef:
                    6e:ed:6b:1b:4f:85:db:95:43:18:18:e8:0e:41:1b:
                    41:c6:65:8b:a8:31:bf:9c:8d:9d:8a:68:1e:78:6d:
                    d1:1c:1e:d9:33:7e:53:6e:90:82:a0:6a:1d:f3:20:
                    fe:88:72:5d:fb:8f:0e:3e:5a:dd:07:90:cd:ea:60:
                    cb:9e:35:0d:e9:16:68:3f:8c:e5:af:1b:c3:35:da:
                    b3:34:88:8b:df:a9:2f:a8:c7:42:fc:ee:8a:ea:0d:
                    6d:8f:9d:72:54:e0:81:62:6a:fa:24:e4:dc:12:6e:
                    93:6e:22:26:5f:d1:a7:ba:2f:02:19:75:45:ab:cc:
                    34:d8:4c:04:a9:ed:05:67:1c:bb:5c:46:66:16:0f:
                    5a:57:17:0e:c4:53:ff:a6:2f:00:2e:b3:b0:8a:17:
                    6b:10:30:fa:a7:a0:e2:d0:2d:02:75:b7:12:04:c2:
                    60:80:d6:45:e5:fd:1f:9a:04:0d:1e:85:f5:6e:79:
                    d8:4e:b1:53:36:62:2d:3f:c4:f4:51:7b:59:07:e9:
                    75:ba:70:00:97:f9:3a:bb:b7:b9:26:9d:5e:a0:aa:
                    f6:c8:2d:f9:29:68:ae:9e:73:46:a0:f3:33:f5:3c:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:9D:F2:CD:4B:3F:EF:0C:B4:6E:B3:0E:29:3D:30:FA:FD:8A:F2
            X509v3 Authority Key Identifier:
                keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a5:d7:0f:18:5d:3f:2f:51:9b:8d:0f:17:10:7d:e6:3d:e4:
         14:2a:e0:a7:d1:c1:af:1a:6f:6b:1f:a4:b0:96:7b:cc:8c:c2:
         98:d3:fc:58:02:a5:4e:72:78:b2:ec:0a:51:9e:a9:02:1e:da:
         0a:16:7e:44:f7:80:3d:2a:3f:4a:bf:a5:39:0b:73:5c:04:7e:
         27:3a:3e:95:9d:dc:fc:e6:98:92:1f:39:f9:37:0f:11:7b:fe:
         c3:fc:c8:cb:bf:65:ad:db:41:d7:eb:cc:c4:17:2f:b7:99:9f:
         87:fb:e4:01:23:b9:d6:44:1a:89:bc:b8:2b:46:42:f0:e6:46:
         b4:39:a1:11:08:56:ec:0d:1a:c3:ba:47:f3:da:52:35:eb:84:
         a1:93:fa:b9:e2:63:a7:d4:6c:d6:61:88:23:f0:74:ed:f6:af:
         1f:be:0c:9b:29:54:91:54:f2:cf:d1:54:6b:30:66:d2:28:00:
         2d:9b:ff:02:0f:ad:c5:d5:0d:f9:c2:65:a7:f9:41:5f:26:d4:
         5e:f1:e0:bf:03:c2:17:07:3c:05:8b:6e:9a:48:23:a0:1d:20:
         91:fd:34:6e:4d:9b:e9:03:2e:7f:4f:fb:c4:87:78:a0:78:fb:
         2d:5d:b7:b9:fa:55:9a:3d:c7:3a:c9:aa:6b:af:5c:27:ab:f2:
         a3:f3:d0:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPX+28RjGS1ZZ+iAPCfcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NWFhYjdkZmJiMTUyYTY0NmFkZjMyNzNiMzFhYTVkZGU2
NGExZGYwHhcNMjUwNDEzMTMwMTIxWhcNMjUwNDE0MTMwMTIxWjAzMTEwLwYDVQQD
EyhiZDQzOWRmMmNkNGIzZmVmMGNiNDZlYjMwZTI5M2QzMGZhZmQ4YWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oJW8hxw6MfANjOFsUQzm47AjoEY
kw64o5auyO9u7WsbT4XblUMYGOgOQRtBxmWLqDG/nI2dimgeeG3RHB7ZM35TbpCC
oGod8yD+iHJd+48OPlrdB5DN6mDLnjUN6RZoP4zlrxvDNdqzNIiL36kvqMdC/O6K
6g1tj51yVOCBYmr6JOTcEm6TbiImX9Gnui8CGXVFq8w02EwEqe0FZxy7XEZmFg9a
VxcOxFP/pi8ALrOwihdrEDD6p6Di0C0CdbcSBMJggNZF5f0fmgQNHoX1bnnYTrFT
NmItP8T0UXtZB+l1unAAl/k6u7e5Jp1eoKr2yC35KWiunnNGoPMz9TyVEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1DnfLNSz/vDLRusw4pPTD6/YryMB8GA1UdIwQY
MBaAFCdaq337sVKmRq3zJzsxql3eZKHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUt
MGQwZDdjMDE4OWFkLzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC82ZTI3Y2EtN2ZmNy00ZTA5LWJhZTUtMGQwZDdjMDE4OWFk
LzEvSjFxcmZmdXhVcVpHcmZNbk96R3FYZDVrb2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqXXDxhd
Py9Rm40PFxB95j3kFCrgp9HBrxpvax+ksJZ7zIzCmNP8WAKlTnJ4suwKUZ6pAh7a
ChZ+RPeAPSo/Sr+lOQtzXAR+Jzo+lZ3c/OaYkh85+TcPEXv+w/zIy79lrdtB1+vM
xBcvt5mfh/vkASO51kQaiby4K0ZC8OZGtDmhEQhW7A0aw7pH89pSNeuEoZP6ueJj
p9Rs1mGII/B07favH74MmylUkVTyz9FUazBm0igALZv/Ag+txdUN+cJlp/lBXybU
XvHgvwPCFwc8BYtumkgjoB0gkf00bk2b6QMuf0/7xId4oHj7LV23ufpVmj3HOsmq
a69cJ6vyo/PQ3Q==
-----END CERTIFICATE-----