Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
File:                     JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json)
Hash identifier:          HPByYNhTOeV/EZUKZ8rYWnbhWsfh04m6tjGTuFEINjA=
Subject key identifier:   4F:8D:F8:64:E9:A2:44:47:C7:15:8D:A0:C0:21:3E:9B:52:C6:C6:96
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Certificate issuer:       /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial:       01962DF40C075BF763C78A1014AA13AC09BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
Manifest number:          0FF6
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: 0MRJhU0Qnhazf3uEIVGNielpVjo.roa (hash: QbTItXwb+MhiN+jNSFdFEHfTLMbgundvD0ftmWJwj5k=)
                          2: Ab1tskS4Q67Z2YctzJLxqj53W9g.roa (hash: AZCXpUJa1dgUBTX+Q3S9ZNI6U7aZKWGmwFCH40STagc=)
                          3: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: x4DKSaMl0VfS6sHqNQ5JOXPmhfIrruIFZlGetYuyQbM=)
                          4: ZwMecEU89iNwlEPNMqqdNK21CRk.roa (hash: FTqQ+R8RJ6dWUyPAN/1xgiMPp5vc51aB62sTFqdJ7bA=)
                          5: f_0cBwbRlTos3u7H8bwrPKcXUN8.roa (hash: xaHHsjfR8A17jN6pVVS9xdai2iZp05T7G1TibqlcLQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0c:07:5b:f7:63:c7:8a:10:14:aa:13:ac:09:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=4f8df864e9a24447c7158da0c0213e9b52c6c696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4d:4f:08:de:d4:44:8d:72:99:6f:70:5b:75:
                    77:86:56:5c:81:4c:10:be:f8:03:e8:77:7c:fc:76:
                    ae:13:83:d7:16:fa:77:65:f6:70:e1:5f:20:cd:ea:
                    09:04:62:50:8b:cb:37:ac:dd:02:d6:46:aa:42:0f:
                    27:77:40:d9:2b:67:7b:72:b3:e1:4e:89:95:f2:d2:
                    ad:75:12:1b:12:2c:4d:2e:1b:56:d9:95:0b:b7:ea:
                    d1:e0:5b:d1:d6:16:65:6a:3a:89:be:5a:a1:54:84:
                    23:1f:1f:96:59:7c:a8:33:0c:fa:d9:32:da:e8:80:
                    d2:bc:46:02:cf:68:6b:e5:c0:0f:45:ff:aa:ea:8e:
                    1b:5b:b4:31:c0:f9:f0:8f:c5:c5:3d:6d:81:c1:54:
                    f3:56:fd:f8:f6:8e:9d:e3:b6:02:66:a8:72:6a:3f:
                    1e:be:91:3c:77:56:af:9e:ed:df:74:3c:7a:4d:4b:
                    36:ec:46:0c:6e:c7:f3:b4:77:7b:8a:09:cc:a1:0e:
                    51:b2:61:9d:91:39:8b:25:fe:5e:50:55:60:8d:4e:
                    25:18:23:28:79:87:ee:1c:8d:1b:d6:3f:bb:18:8e:
                    65:11:6a:df:50:52:59:54:11:56:18:d2:b6:4a:d1:
                    af:05:d3:8c:74:43:b1:a7:d0:a3:b4:b2:da:37:a5:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8D:F8:64:E9:A2:44:47:C7:15:8D:A0:C0:21:3E:9B:52:C6:C6:96
            X509v3 Authority Key Identifier:
                keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:16:c4:7d:56:20:45:06:1d:4f:30:68:7a:6d:84:96:9f:b5:
         18:0d:3c:82:8b:5e:55:92:82:39:aa:0e:41:86:3a:5e:1b:78:
         56:c1:d7:18:44:fd:25:18:be:aa:e5:db:a3:76:4f:58:a1:7c:
         47:46:8f:94:60:cb:16:54:13:ba:07:46:4a:17:7f:72:de:98:
         5c:a2:98:93:ec:5f:45:58:12:72:97:51:bc:75:51:50:45:12:
         8a:eb:12:ab:f7:14:14:ed:e2:76:e9:e7:e7:1f:b0:b9:8e:aa:
         1f:30:98:52:f5:63:50:9c:72:90:88:b2:0c:66:25:ee:7c:41:
         92:22:10:31:90:f6:72:f5:c1:a7:d1:85:30:ca:d7:f6:ae:58:
         55:b7:68:67:5c:e0:71:52:ed:e9:01:a2:0d:d9:4b:d5:37:10:
         84:c2:9b:5f:1d:47:4c:b1:04:0e:bf:02:df:43:d7:7f:fc:92:
         29:79:80:05:27:e8:5a:86:1c:ee:1d:97:c9:ba:1c:78:58:79:
         98:8e:b3:a4:92:cf:9a:26:bb:c5:28:6f:14:96:6c:09:c7:3c:
         48:79:1f:e3:9b:2b:32:9a:7b:b9:1b:61:06:19:69:50:5e:58:
         4c:41:36:45:83:ab:6d:6e:09:1e:cb:57:30:29:0b:9d:43:ed:
         f3:3b:57:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9AwHW/djx4oQFKoTrAm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NzQwNWU5Y2VlMzlkNzE5NDRkNWUzMTQ5ZWIwMWI2MWY5
YWRiMWUwHhcNMjUwNDEzMDcwMTMwWhcNMjUwNDE0MDcwMTMwWjAzMTEwLwYDVQQD
Eyg0ZjhkZjg2NGU5YTI0NDQ3YzcxNThkYTBjMDIxM2U5YjUyYzZjNjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA401PCN7URI1ymW9wW3V3hlZcgUwQ
vvgD6Hd8/HauE4PXFvp3ZfZw4V8gzeoJBGJQi8s3rN0C1kaqQg8nd0DZK2d7crPh
TomV8tKtdRIbEixNLhtW2ZULt+rR4FvR1hZlajqJvlqhVIQjHx+WWXyoMwz62TLa
6IDSvEYCz2hr5cAPRf+q6o4bW7QxwPnwj8XFPW2BwVTzVv349o6d47YCZqhyaj8e
vpE8d1avnu3fdDx6TUs27EYMbsfztHd7ignMoQ5RsmGdkTmLJf5eUFVgjU4lGCMo
eYfuHI0b1j+7GI5lEWrfUFJZVBFWGNK2StGvBdOMdEOxp9CjtLLaN6XM4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+N+GTpokRHxxWNoMAhPptSxsaWMB8GA1UdIwQY
MBaAFCR0BenO451xlE1eMUnrAbYfmtseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYt
NDdiYmFjYTA3OGZmLzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC85YTNhOTgtZDY3MC00MzQzLTkyMDYtNDdiYmFjYTA3OGZm
LzEvSkhRRjZjN2puWEdVVFY0eFNlc0J0aC1hMng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwxbEfVYg
RQYdTzBoem2Elp+1GA08goteVZKCOaoOQYY6Xht4VsHXGET9JRi+quXbo3ZPWKF8
R0aPlGDLFlQTugdGShd/ct6YXKKYk+xfRVgScpdRvHVRUEUSiusSq/cUFO3idunn
5x+wuY6qHzCYUvVjUJxykIiyDGYl7nxBkiIQMZD2cvXBp9GFMMrX9q5YVbdoZ1zg
cVLt6QGiDdlL1TcQhMKbXx1HTLEEDr8C30PXf/ySKXmABSfoWoYc7h2XyboceFh5
mI6zpJLPmia7xShvFJZsCcc8SHkf45srMpp7uRthBhlpUF5YTEE2RYOrbW4JHstX
MCkLnUPt8ztXuA==
-----END CERTIFICATE-----