Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File:                     jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier:          AmuLE2srWueOC61HDK6Mdk2cT93aYQ7vdx+jkZyOK2A=
Subject key identifier:   12:EF:88:49:84:9C:4B:B9:4C:E0:9B:12:AE:8E:96:42:F4:5F:BE:71
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer:       /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial:       01962E61CA1D6C42EBCC03153E095381260A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number:          08D6
Signing time:             Sun 13 Apr 2025 09:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:22 +0000
Files and hashes:         1: I6XJQzPuO4BQutj9l3SUjZVMBQs.roa (hash: SpNx9acwJnfAUoxlUrPZol91rF8aW3VEekG+fCM8uiI=)
                          2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: F6K/euHKiv6gthCsW/F/hqYFWmk9cTIl0aj1LO9V2Ho=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ca:1d:6c:42:eb:cc:03:15:3e:09:53:81:26:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
        Validity
            Not Before: Apr 13 09:01:22 2025 GMT
            Not After : Apr 14 09:01:22 2025 GMT
        Subject: CN=12ef8849849c4bb94ce09b12ae8e9642f45fbe71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:66:17:28:49:f3:cb:6d:16:6d:f1:79:a9:
                    9a:47:f2:53:2b:8a:92:ee:15:23:33:c0:f3:a0:6d:
                    04:a2:dd:f1:64:cd:ac:eb:c5:30:06:7a:42:b3:4c:
                    fb:20:1d:4a:a8:19:5a:18:b2:12:1d:56:d9:71:6b:
                    1c:32:e6:f8:40:e5:43:b2:22:ed:84:34:51:c3:ce:
                    2c:8d:95:21:72:c0:b2:95:2d:1b:d7:1a:74:bc:74:
                    f3:7d:a6:61:db:94:86:6c:6e:78:77:01:ec:10:8e:
                    fd:9a:3d:55:86:e1:6b:b5:fe:b8:87:1c:5e:7a:3a:
                    36:c2:97:f1:87:b1:42:1e:ec:8e:2e:a3:6b:90:4a:
                    01:a8:fa:f7:7a:af:c5:02:60:89:42:19:2a:39:66:
                    7a:b5:dc:6a:6b:c0:36:67:a5:d9:3e:7a:27:a8:c4:
                    02:17:20:d9:38:7b:9c:8e:cd:f4:7e:df:f4:30:cc:
                    34:57:3e:96:e3:80:6a:73:be:8c:71:bc:cd:23:b4:
                    d8:7b:21:5f:61:65:90:ca:94:6b:61:a3:21:b0:b6:
                    1d:37:3e:07:47:95:27:f7:8e:b2:1b:31:a2:5e:9d:
                    9a:30:62:fa:ff:27:61:80:e9:1a:3e:e2:bb:3c:53:
                    92:a1:c1:11:cf:04:c9:14:76:ea:b6:9b:ac:3f:51:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EF:88:49:84:9C:4B:B9:4C:E0:9B:12:AE:8E:96:42:F4:5F:BE:71
            X509v3 Authority Key Identifier:
                keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:f5:da:09:e1:84:9c:cd:7a:99:09:14:00:a9:09:26:4a:30:
         42:f8:33:0a:1b:94:94:8a:91:1c:7c:13:6b:15:c2:11:e3:b7:
         86:ce:dd:15:cd:75:59:b2:c3:c0:4b:64:35:be:38:e1:f3:1a:
         81:2d:5c:ad:1c:48:2f:ba:dc:e8:7b:17:fb:55:a8:56:07:b7:
         41:cc:e1:28:5b:95:2d:71:8b:f8:2f:ce:6b:b0:01:36:65:8e:
         1b:57:27:68:9c:09:7d:2a:01:f8:d2:8c:d9:e7:62:af:3f:4b:
         aa:61:15:9f:e8:3e:28:4f:b9:85:19:11:e6:01:50:f8:55:22:
         d8:0e:80:6b:ba:a7:95:49:66:c9:aa:70:aa:c4:4e:6a:37:9b:
         df:27:39:c7:f3:8e:24:77:67:c7:df:c0:8b:93:06:ca:e6:4c:
         07:92:c5:ef:c3:ba:9f:ab:4c:39:55:1e:5d:23:19:57:95:7d:
         25:71:09:c6:98:4b:b5:1e:25:08:8c:5e:a7:86:e9:a8:4c:29:
         68:7e:48:87:1e:e3:41:4e:7f:18:58:a6:b1:24:0a:14:bf:95:
         a7:61:21:b1:f1:f0:82:c7:f8:58:8f:08:91:08:98:eb:c9:e3:
         b2:9d:b2:8f:2e:5d:a5:39:ea:49:d2:96:e3:87:20:8f:69:76:
         f3:00:f2:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcodbELrzAMVPglTgSYKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjY0NTc3MGQyOTE0NDAyZDZjOTViOGRhZjUxZjdmZmUx
Mjc3MmIwHhcNMjUwNDEzMDkwMTIyWhcNMjUwNDE0MDkwMTIyWjAzMTEwLwYDVQQD
EygxMmVmODg0OTg0OWM0YmI5NGNlMDliMTJhZThlOTY0MmY0NWZiZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXlmFyhJ88ttFm3xeamaR/JTK4qS
7hUjM8DzoG0Eot3xZM2s68UwBnpCs0z7IB1KqBlaGLISHVbZcWscMub4QOVDsiLt
hDRRw84sjZUhcsCylS0b1xp0vHTzfaZh25SGbG54dwHsEI79mj1VhuFrtf64hxxe
ejo2wpfxh7FCHuyOLqNrkEoBqPr3eq/FAmCJQhkqOWZ6tdxqa8A2Z6XZPnonqMQC
FyDZOHucjs30ft/0MMw0Vz6W44Bqc76McbzNI7TYeyFfYWWQypRrYaMhsLYdNz4H
R5Un946yGzGiXp2aMGL6/ydhgOkaPuK7PFOSocERzwTJFHbqtpusP1GrvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLviEmEnEu5TOCbEq6OlkL0X75xMB8GA1UdIwQY
MBaAFI72RXcNKRRALWyVuNr1H3/+EncrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDkt
NjU2OTU3ZjM4NjdlLzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iMDk3NWMtMjU3My00ZDBhLWI4ZDktNjU2OTU3ZjM4Njdl
LzEvanZaRmR3MHBGRUF0YkpXNDJ2VWZmXzRTZHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/XaCeGE
nM16mQkUAKkJJkowQvgzChuUlIqRHHwTaxXCEeO3hs7dFc11WbLDwEtkNb444fMa
gS1crRxIL7rc6HsX+1WoVge3QczhKFuVLXGL+C/Oa7ABNmWOG1cnaJwJfSoB+NKM
2edirz9LqmEVn+g+KE+5hRkR5gFQ+FUi2A6Aa7qnlUlmyapwqsROajeb3yc5x/OO
JHdnx9/Ai5MGyuZMB5LF78O6n6tMOVUeXSMZV5V9JXEJxphLtR4lCIxep4bpqEwp
aH5Ihx7jQU5/GFimsSQKFL+Vp2EhsfHwgsf4WI8IkQiY68njsp2yjy5dpTnqSdKW
44cgj2l28wDyGg==
-----END CERTIFICATE-----