Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
File:                     d_jn-9SraVB_sf41ea80OlZjkIY.mft (raw, json)
Hash identifier:          2Gt2xSsr6BBi3Pdwu/m6h7f4DojcYZVquO/i/DGyKoQ=
Subject key identifier:   BA:4A:64:A5:19:5C:D8:7B:08:9E:C2:A7:E3:B1:E3:6C:2A:98:74:F8
Authority key identifier: 77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86
Certificate issuer:       /CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
Certificate serial:       01962ECFC558AC4A86B25CFF53AB409B194A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft
Manifest number:          0DA6
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: 07kw2MzDV5dpbfYC0MA4AILk1XE.roa (hash: tg8LJDbeLYQBkgtHitpgNGT/W91ZoJCC9459dV5/7ek=)
                          2: 0OhTHF6DxE3cyZK5YOwOI2V2BAI.roa (hash: xOeumj9MpchTNffEKnQPdj1nuV0b4wbm3GvMqDVnZVU=)
                          3: Z4kN8nDsrb7sFEsQvwC-1YneLds.roa (hash: RYq7W3ftzHW7v8PnyhRA0Yz8QSctQ/uuBL07f/0XUZc=)
                          4: d_jn-9SraVB_sf41ea80OlZjkIY.crl (hash: vA9RYeBnu+XFoWfId9oc3Cb2fUEd0IwBHa1Js3F+q90=)
                          5: hu_H7qNyqX0M9nrnuuS3ppV4Mqg.roa (hash: iUNoFw6w4VaZe+xv8tLLmkJfKNEUjAxo8NvVhIUNSuo=)
                          6: wJVCqkJKW7wdukijJarB4SSlNh0.roa (hash: OCvKaQOoRbSfLx6VPEZE2vLiOcjFXPz8efWK0J/I8to=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c5:58:ac:4a:86:b2:5c:ff:53:ab:40:9b:19:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f8e7fbd4ab69507fb1fe3579af343a56639086
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=ba4a64a5195cd87b089ec2a7e3b1e36c2a9874f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:bc:2d:07:15:1e:dc:9a:48:34:6e:03:00:
                    ec:70:6c:28:6e:1f:09:a3:95:7e:24:7b:57:c3:40:
                    58:1c:71:3a:66:88:3d:d1:a9:bc:71:b8:61:70:22:
                    e1:4a:77:0f:b1:9e:66:84:b2:fb:f5:65:fd:e2:7b:
                    2b:a4:4f:0f:da:56:54:0b:a1:a9:af:8d:32:ce:1c:
                    ab:f0:bb:f4:1c:8b:71:1b:ad:1c:d0:54:b2:66:4b:
                    c0:c9:1f:16:22:29:55:1d:ae:2f:1a:0a:9b:c4:a2:
                    db:10:fb:c6:df:23:f9:ac:b9:d9:c6:a6:9f:bc:c9:
                    f0:a6:4b:d3:7c:95:1b:e6:d1:ef:04:15:26:7c:0a:
                    b3:f3:7e:03:6b:b4:82:2e:1f:af:a5:f4:20:44:55:
                    60:a5:94:d8:80:10:61:bb:24:f7:8c:a9:b4:35:55:
                    07:30:5f:58:a3:ec:a0:36:4e:d4:06:62:1f:e6:88:
                    70:4a:61:36:4f:12:39:f3:a4:1d:2e:a2:0c:0d:a8:
                    48:5c:5c:34:17:2c:5f:8c:9e:af:5f:cc:af:eb:f0:
                    f4:ec:e8:cc:f8:f0:26:43:78:78:67:ca:48:02:87:
                    1e:1a:e3:d8:31:c9:46:8e:4a:2d:79:28:93:d7:1d:
                    0b:6d:3f:31:06:ad:25:4d:38:ea:5f:a7:82:3f:36:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4A:64:A5:19:5C:D8:7B:08:9E:C2:A7:E3:B1:E3:6C:2A:98:74:F8
            X509v3 Authority Key Identifier:
                keyid:77:F8:E7:FB:D4:AB:69:50:7F:B1:FE:35:79:AF:34:3A:56:63:90:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_jn-9SraVB_sf41ea80OlZjkIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6c2736-ab02-4897-9568-77f6e94e3dcc/1/d_jn-9SraVB_sf41ea80OlZjkIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f1:93:f2:0e:f5:99:c6:94:08:83:52:9b:2c:cf:03:e7:7f:
         df:db:d2:94:67:56:88:55:9e:74:f7:04:0c:9c:46:9f:4f:09:
         90:ce:4c:24:f1:62:db:51:8b:76:75:28:94:fa:42:8a:50:57:
         59:10:03:1b:ea:31:79:ad:7e:f2:f6:1c:e9:c8:32:9d:60:41:
         7e:8c:e8:48:01:86:86:45:79:0c:22:8d:8a:bc:77:5c:39:4e:
         79:6b:6c:b0:cc:1a:1b:e1:ea:21:95:7b:e4:47:3b:3e:d6:e4:
         30:3c:c5:3b:4b:d0:46:8f:70:84:01:34:6d:68:a2:3d:a3:40:
         a4:6f:29:0b:ea:61:9e:11:22:ad:e5:5b:05:0c:02:e5:04:b4:
         be:3d:b8:91:86:26:77:18:8c:ea:05:9b:c9:e7:81:01:e0:4b:
         80:05:5a:b8:02:37:20:bc:cd:3b:45:11:a2:15:30:16:f9:8a:
         c8:88:1d:05:be:e0:ef:d0:4a:63:00:4f:4f:c2:c1:76:57:6b:
         78:9d:f1:67:d7:7f:bb:57:ef:80:ad:41:c9:e5:f8:72:d0:0e:
         b4:0c:e6:b0:4b:41:9e:3f:da:e7:e2:a9:e7:ed:09:53:29:db:
         03:2b:59:27:f1:f9:77:fd:69:fd:24:58:8d:3c:5c:ce:55:9f:
         7c:03:05:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8VYrEqGslz/U6tAmxlKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjhlN2ZiZDRhYjY5NTA3ZmIxZmUzNTc5YWYzNDNhNTY2
MzkwODYwHhcNMjUwNDEzMTEwMTMwWhcNMjUwNDE0MTEwMTMwWjAzMTEwLwYDVQQD
EyhiYTRhNjRhNTE5NWNkODdiMDg5ZWMyYTdlM2IxZTM2YzJhOTg3NGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSu8LQcVHtyaSDRuAwDscGwobh8J
o5V+JHtXw0BYHHE6Zog90am8cbhhcCLhSncPsZ5mhLL79WX94nsrpE8P2lZUC6Gp
r40yzhyr8Lv0HItxG60c0FSyZkvAyR8WIilVHa4vGgqbxKLbEPvG3yP5rLnZxqaf
vMnwpkvTfJUb5tHvBBUmfAqz834Da7SCLh+vpfQgRFVgpZTYgBBhuyT3jKm0NVUH
MF9Yo+ygNk7UBmIf5ohwSmE2TxI586QdLqIMDahIXFw0FyxfjJ6vX8yv6/D07OjM
+PAmQ3h4Z8pIAoceGuPYMclGjkoteSiT1x0LbT8xBq0lTTjqX6eCPzap2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpKZKUZXNh7CJ7Cp+Ox42wqmHT4MB8GA1UdIwQY
MBaAFHf45/vUq2lQf7H+NXmvNDpWY5CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1Njgt
NzdmNmU5NGUzZGNjLzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YzI3MzYtYWIwMi00ODk3LTk1NjgtNzdmNmU5NGUzZGNj
LzEvZF9qbi05U3JhVkJfc2Y0MWVhODBPbFpqa0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfGT8g71
mcaUCINSmyzPA+d/39vSlGdWiFWedPcEDJxGn08JkM5MJPFi21GLdnUolPpCilBX
WRADG+oxea1+8vYc6cgynWBBfozoSAGGhkV5DCKNirx3XDlOeWtssMwaG+HqIZV7
5Ec7PtbkMDzFO0vQRo9whAE0bWiiPaNApG8pC+phnhEireVbBQwC5QS0vj24kYYm
dxiM6gWbyeeBAeBLgAVauAI3ILzNO0URohUwFvmKyIgdBb7g79BKYwBPT8LBdldr
eJ3xZ9d/u1fvgK1ByeX4ctAOtAzmsEtBnj/a5+Kp5+0JUynbAytZJ/H5d/1p/SRY
jTxczlWffAMFwg==
-----END CERTIFICATE-----