Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File:                     CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier:          qHxOH0lEddOSntjo5Rfsg9stxp4oZiNz7lk8wtq+u64=
Subject key identifier:   BB:D1:B6:A9:D1:69:5C:1D:2F:11:BA:CB:2E:8E:DA:04:89:36:40:CC
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer:       /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial:       01962F06E0C3473BDDDA465AF46333CBFBA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number:          0849
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: 4bMtkdss6ipZLuaULzydMUpyiaQ.roa (hash: ftsUwXeTU/zCajSXbJ3x6QJLG4thVRnSbA76L16HZhs=)
                          2: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: r9RnBAkHZf0BiqGOLj6V0OJsSAEnnu3omALutxiEHzQ=)
                          3: k6IT53wky2OyxFkQBPrbNFj6TNQ.roa (hash: brdxpAD59FYZoJp1BAGf2U6f2BoN13pBWQRPGF1mMCg=)
                          4: wTQDqjXgoUhzhSugRLMIDWXZVNA.roa (hash: sP07Xq5SBcl1K6LagQUnTqXSUPfJF0A6TBK/LGuxJ5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e0:c3:47:3b:dd:da:46:5a:f4:63:33:cb:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=bbd1b6a9d1695c1d2f11bacb2e8eda04893640cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:84:fa:c6:3c:58:68:52:9c:c9:ca:da:30:
                    e4:26:63:11:60:26:b7:ff:0d:04:de:02:d2:29:53:
                    7e:a8:b6:19:1a:6f:29:f5:70:c2:57:10:ea:3a:70:
                    c3:81:e1:77:b0:9b:35:cc:98:11:c5:55:73:70:8b:
                    39:4b:61:83:05:b7:47:3a:06:ea:df:a8:b8:3c:af:
                    9a:b3:aa:e2:63:db:c5:39:56:fb:e8:00:0b:7d:1e:
                    1a:56:de:ae:17:69:e9:85:38:a5:59:d1:6c:0e:9b:
                    a0:4b:0b:8f:63:b2:f1:ca:0e:fa:ae:df:32:47:1d:
                    02:10:b1:8e:d0:8d:2b:77:b4:df:70:3b:5e:79:c7:
                    67:fb:5a:e8:fd:20:f4:50:27:7a:41:20:86:15:f6:
                    6e:85:74:d3:e4:80:b9:1b:46:45:a1:9b:c5:fa:07:
                    a1:c2:88:41:21:1e:46:68:31:c0:12:32:21:91:2c:
                    9e:17:77:1f:f9:39:61:02:d7:b9:62:b7:2f:4e:c7:
                    f2:42:16:23:05:0b:43:ca:c5:a4:e3:2d:6f:c5:46:
                    dc:fa:ab:a0:fb:d5:a6:05:57:48:46:12:c7:e3:73:
                    d1:c4:40:ad:0e:e5:1e:aa:1a:a0:7f:88:be:fb:86:
                    5f:5f:10:3b:eb:e0:43:95:dc:1e:c7:b0:07:f0:8e:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D1:B6:A9:D1:69:5C:1D:2F:11:BA:CB:2E:8E:DA:04:89:36:40:CC
            X509v3 Authority Key Identifier:
                keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:72:49:7e:20:9e:71:1b:58:22:95:7e:51:5f:42:73:bf:29:
         09:37:47:a4:13:24:1a:c0:c7:87:73:f9:4d:fa:64:b4:22:08:
         89:cc:0c:b5:da:53:96:73:d1:e3:62:3b:22:dd:f3:0d:40:3a:
         53:7b:e2:5c:e9:71:ae:3b:51:5a:37:30:f4:ee:47:01:f9:ff:
         d7:ec:45:c2:ce:ec:f5:65:a9:86:0b:39:83:a5:33:c3:7b:16:
         64:24:0d:da:44:98:92:52:8f:2d:1d:9c:88:82:5d:91:82:f9:
         72:af:b5:d1:01:00:aa:10:58:b6:49:17:0d:ea:93:88:44:51:
         91:6c:ba:91:50:71:22:61:86:5d:b6:70:fb:a5:3d:8b:a4:bf:
         77:0f:bf:20:7c:96:53:6f:61:ef:3c:25:f3:a8:91:98:85:c9:
         79:b6:08:90:5d:5b:29:07:42:fb:0b:e3:e5:a5:4b:ee:0e:bc:
         6a:8f:8c:6a:05:9b:d2:ea:17:17:fe:1f:28:a8:1c:d2:e9:af:
         6a:f7:3b:b2:19:e2:43:91:1a:84:0b:eb:73:a3:c2:80:b7:93:
         7f:1d:b4:5b:98:88:24:f5:7e:71:2a:0a:88:48:c5:b7:53:42:
         49:ca:8b:5c:9c:6c:f4:05:17:bf:24:a9:a1:c9:ea:bf:4d:40:
         8d:a0:a0:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuDDRzvd2kZa9GMzy/ugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWM4YzdmMzM0MDUzYzhhOTBhMzQwODAwOWVmM2QzYjdh
ODJlM2QwHhcNMjUwNDEzMTIwMTQyWhcNMjUwNDE0MTIwMTQyWjAzMTEwLwYDVQQD
EyhiYmQxYjZhOWQxNjk1YzFkMmYxMWJhY2IyZThlZGEwNDg5MzY0MGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXuE+sY8WGhSnMnK2jDkJmMRYCa3
/w0E3gLSKVN+qLYZGm8p9XDCVxDqOnDDgeF3sJs1zJgRxVVzcIs5S2GDBbdHOgbq
36i4PK+as6riY9vFOVb76AALfR4aVt6uF2nphTilWdFsDpugSwuPY7Lxyg76rt8y
Rx0CELGO0I0rd7TfcDteecdn+1ro/SD0UCd6QSCGFfZuhXTT5IC5G0ZFoZvF+geh
wohBIR5GaDHAEjIhkSyeF3cf+TlhAte5YrcvTsfyQhYjBQtDysWk4y1vxUbc+qug
+9WmBVdIRhLH43PRxECtDuUeqhqgf4i++4ZfXxA76+BDldwex7AH8I46KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvRtqnRaVwdLxG6yy6O2gSJNkDMMB8GA1UdIwQY
MBaAFAicjH8zQFPIqQo0CACe89O3qC49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNGUwM2UtMjdiMi00OTRiLThjMGYt
NmY3MDA5YmVlOTE1LzEvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNGUwM2UtMjdiMi00OTRiLThjMGYtNmY3MDA5YmVlOTE1
LzEvQ0p5TWZ6TkFVOGlwQ2pRSUFKN3owN2VvTGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcnJJfiCe
cRtYIpV+UV9Cc78pCTdHpBMkGsDHh3P5TfpktCIIicwMtdpTlnPR42I7It3zDUA6
U3viXOlxrjtRWjcw9O5HAfn/1+xFws7s9WWphgs5g6Uzw3sWZCQN2kSYklKPLR2c
iIJdkYL5cq+10QEAqhBYtkkXDeqTiERRkWy6kVBxImGGXbZw+6U9i6S/dw+/IHyW
U29h7zwl86iRmIXJebYIkF1bKQdC+wvj5aVL7g68ao+MagWb0uoXF/4fKKgc0umv
avc7shniQ5EahAvrc6PCgLeTfx20W5iIJPV+cSoKiEjFt1NCScqLXJxs9AUXvySp
ocnqv01AjaCgTw==
-----END CERTIFICATE-----