Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File:                     jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier:          R23y+zBp8HcJsknM+zoRp7ePzpW6LepjfrPBXtPBmWg=
Subject key identifier:   50:6A:22:58:A7:EE:FC:F8:27:86:DB:4D:C7:1F:17:B1:E1:1C:83:0B
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer:       /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial:       01962F06A0EF9A24113C133BDA1FB674E7F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number:          029B
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: TelciHh83ohMZLEiglr17mKx9tQ.roa (hash: WRRAn8x5n/KXtMausaPQfYREHYj3cbcPK0dMlkeLq38=)
                          2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: xoDpsv+DLtXfSpzu54X8N9GB0H8OvyQbbPsXWxB1QbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a0:ef:9a:24:11:3c:13:3b:da:1f:b6:74:e7:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=506a2258a7eefcf82786db4dc71f17b1e11c830b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:87:ac:3c:55:1f:a0:8e:d9:91:52:09:4b:53:
                    2f:4e:77:6b:2a:04:e8:8d:1d:bc:26:5b:ac:7f:74:
                    bc:44:08:cf:eb:ff:c0:3d:9d:66:7e:ee:b7:1b:5b:
                    b6:87:56:9d:65:fb:43:18:e8:6b:2b:1a:bb:4f:eb:
                    42:d6:95:63:f0:c9:46:0a:0f:1e:b7:e3:49:38:53:
                    29:11:21:c0:83:91:53:e7:de:89:5d:0c:c5:eb:85:
                    3e:ad:83:1e:a5:3d:3d:e0:61:ef:0d:6f:e7:f1:fc:
                    bd:75:98:7d:56:4a:5f:fe:a2:b9:74:30:94:2b:1d:
                    0a:3c:7c:9c:f4:0f:98:70:88:15:d0:82:c0:41:3b:
                    07:a4:f5:cc:29:70:b9:49:34:48:07:e6:15:3e:e6:
                    a8:7b:39:2b:49:cd:0d:db:8c:bf:cf:a1:d9:7e:6a:
                    61:fc:60:d7:85:61:e4:e3:f4:78:08:b3:c3:21:21:
                    20:d5:2b:2b:fc:94:7c:c5:cf:70:31:48:1d:44:2e:
                    7b:0c:d1:7f:f2:2f:4c:c0:33:16:3a:f4:b1:ca:8c:
                    94:42:88:c9:ee:46:81:e8:3d:65:1e:2d:fd:22:3f:
                    19:f4:6e:da:13:a6:f2:36:3c:c8:45:c1:51:df:12:
                    14:8f:11:8c:a6:c6:80:50:a1:83:79:4f:04:8e:67:
                    de:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6A:22:58:A7:EE:FC:F8:27:86:DB:4D:C7:1F:17:B1:E1:1C:83:0B
            X509v3 Authority Key Identifier:
                keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:b5:e9:99:9a:34:f4:9e:be:25:13:b7:94:5c:ab:fa:12:
         3f:a1:22:dc:e0:ff:1d:52:2c:9a:6c:1a:46:bd:68:ce:52:35:
         ac:c7:9d:7b:ab:a0:b5:a7:e0:1b:37:ab:7f:0d:6d:8b:d9:7d:
         61:71:6a:54:79:c5:62:97:03:02:98:43:4e:3f:89:15:7c:27:
         4b:43:fb:73:f0:09:20:af:f2:ca:09:a4:19:c8:4e:8e:95:54:
         f2:bb:70:5d:c9:cd:25:d5:0c:d7:06:a4:82:f1:0c:0a:1f:5c:
         b9:6b:00:89:5d:16:d1:52:e7:9f:a9:0c:93:42:7d:9c:0d:1a:
         d6:a7:18:68:88:13:7f:d1:ba:2c:2c:fc:ef:c8:a4:01:c9:2e:
         0c:12:c8:52:0c:e5:29:fd:c0:4c:0d:1b:78:47:e2:dc:ea:2a:
         6f:76:91:00:3f:28:74:d7:95:72:48:44:30:2c:88:9f:ee:e8:
         e8:1a:25:41:1c:9f:0c:e7:f7:3d:f5:ff:8d:be:dc:28:1a:9b:
         6e:87:04:5b:29:45:3e:6e:04:4c:d6:a5:b7:76:26:07:d7:2e:
         56:68:55:d4:b3:90:d9:8b:86:c8:56:8b:68:81:4e:b6:50:45:
         4b:30:d2:e7:8b:d6:c7:6a:af:8f:28:ad:86:6b:2d:11:1b:22:
         28:33:e4:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBqDvmiQRPBM72h+2dOfxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDU2ZmIxZDY3OTQ3M2IxYWUxYzU3YjBmYzJhMzIzY2Fm
MTcwOWEwHhcNMjUwNDEzMTIwMTI1WhcNMjUwNDE0MTIwMTI1WjAzMTEwLwYDVQQD
Eyg1MDZhMjI1OGE3ZWVmY2Y4Mjc4NmRiNGRjNzFmMTdiMWUxMWM4MzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YesPFUfoI7ZkVIJS1MvTndrKgTo
jR28Jlusf3S8RAjP6//APZ1mfu63G1u2h1adZftDGOhrKxq7T+tC1pVj8MlGCg8e
t+NJOFMpESHAg5FT596JXQzF64U+rYMepT094GHvDW/n8fy9dZh9Vkpf/qK5dDCU
Kx0KPHyc9A+YcIgV0ILAQTsHpPXMKXC5STRIB+YVPuaoezkrSc0N24y/z6HZfmph
/GDXhWHk4/R4CLPDISEg1Ssr/JR8xc9wMUgdRC57DNF/8i9MwDMWOvSxyoyUQojJ
7kaB6D1lHi39Ij8Z9G7aE6byNjzIRcFR3xIUjxGMpsaAUKGDeU8EjmfexQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBqIlin7vz4J4bbTccfF7HhHIMLMB8GA1UdIwQY
MBaAFIzVb7HWeUc7GuHFew/CoyPK8XCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTct
YTc5MmE4OGJhZjEwLzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTctYTc5MmE4OGJhZjEw
LzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlu16Zma
NPSeviUTt5Rcq/oSP6Ei3OD/HVIsmmwaRr1ozlI1rMede6ugtafgGzerfw1ti9l9
YXFqVHnFYpcDAphDTj+JFXwnS0P7c/AJIK/yygmkGchOjpVU8rtwXcnNJdUM1wak
gvEMCh9cuWsAiV0W0VLnn6kMk0J9nA0a1qcYaIgTf9G6LCz878ikAckuDBLIUgzl
Kf3ATA0beEfi3Ooqb3aRAD8odNeVckhEMCyIn+7o6BolQRyfDOf3PfX/jb7cKBqb
bocEWylFPm4ETNalt3YmB9cuVmhV1LOQ2YuGyFaLaIFOtlBFSzDS54vWx2qvjyit
hmstERsiKDPk2Q==
-----END CERTIFICATE-----