Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File:                     JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier:          V/ZnGGRORR7mnezPvnXPreGJa3rxjpIJZPRANU2yUnY=
Subject key identifier:   CC:41:A1:0A:D1:87:C3:66:07:5C:47:D3:9D:FF:71:2F:57:E5:7E:93
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer:       /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial:       01962FAB9305B9E983DA45FC83CADB5F6618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number:          02E9
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: MIcvnCr+ASKhd63WxLEI6NDq2PI/ddlmL756uOd/BBM=)
                          2: Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa (hash: WTO6N136wAT9bdE+8AHFBftVkmxQHl/oBzZ0du4NvZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:93:05:b9:e9:83:da:45:fc:83:ca:db:5f:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=cc41a10ad187c366075c47d39dff712f57e57e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8f:f9:f4:70:39:ee:a7:33:85:59:c6:f8:5c:
                    6a:c0:e3:30:d6:9a:9f:8f:a3:d0:51:dd:53:c4:3e:
                    a4:3d:18:b4:70:6f:62:25:a7:60:27:37:62:bf:0f:
                    33:94:40:fa:fc:b7:ae:c1:84:74:fd:a6:46:06:0a:
                    47:ff:5e:4b:98:7b:3f:cc:34:f1:ea:00:25:ed:53:
                    d7:f9:80:16:25:67:4c:dc:b3:55:77:d0:80:83:72:
                    b8:99:9e:39:b8:7e:d9:dc:12:56:07:b2:19:c7:fc:
                    c8:d1:9e:03:06:d2:cf:b6:89:f7:45:a9:12:2e:4d:
                    2f:9f:5e:80:7c:5d:24:6f:11:a7:7c:7b:b8:d0:df:
                    a2:5f:47:1d:34:6a:74:e0:d4:7f:83:f5:0a:45:e1:
                    5a:7d:0c:7b:e8:b8:69:c6:a1:b9:20:5e:cb:73:fc:
                    00:bc:1f:49:db:df:ee:36:91:05:63:ee:5f:98:17:
                    14:94:e4:74:b9:62:84:4c:59:58:2e:ee:b1:22:94:
                    5e:c9:64:b4:d8:90:d4:72:eb:07:54:ae:dc:f1:d0:
                    95:85:4a:8c:b4:4a:95:99:ea:c4:ec:b1:80:89:53:
                    db:72:49:1f:25:87:a5:01:9b:7b:9b:2f:fe:6f:8e:
                    b3:3e:3e:a6:45:27:89:96:2b:14:23:0c:87:d0:c9:
                    3d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:41:A1:0A:D1:87:C3:66:07:5C:47:D3:9D:FF:71:2F:57:E5:7E:93
            X509v3 Authority Key Identifier:
                keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:c4:b5:e7:bd:aa:66:a1:02:60:fc:a5:81:96:28:1d:d1:d7:
         c9:58:be:8c:8b:c7:2b:a8:2a:45:77:17:ef:f7:ef:74:91:81:
         ba:3a:d6:f3:da:05:52:91:28:b7:33:88:51:01:49:a4:57:af:
         e4:b4:1d:05:74:17:22:7f:8b:6f:0e:52:04:75:b9:44:50:8d:
         f5:7a:f7:df:b4:1c:e5:b0:0c:26:00:97:0e:2c:a9:a8:da:36:
         c5:c3:01:2a:65:e0:01:06:57:25:fe:f5:7a:cc:8c:78:e9:a2:
         a5:13:35:79:4e:a6:8d:f8:6d:a3:59:ed:12:39:7e:f2:c8:97:
         ec:49:fe:f0:0d:c0:51:12:88:50:e1:7d:7b:0a:40:4c:2f:b5:
         47:22:fd:6e:70:81:c9:8f:e7:76:f6:5b:2a:fb:75:5d:e7:33:
         b7:dc:12:32:81:13:a2:5a:37:df:06:6d:cf:26:75:e0:f6:d9:
         63:50:b9:37:0b:50:db:24:1a:85:4d:a6:ee:aa:1c:e3:37:56:
         ff:98:e2:0f:a2:27:37:75:f6:4c:9a:bd:31:ce:98:2a:79:be:
         77:cf:be:6a:bf:77:1c:20:65:16:99:d1:6b:f3:c3:16:1a:e0:
         91:b7:2c:9e:cb:88:2c:c7:a0:a5:35:6f:60:f1:04:8f:cb:0a:
         65:00:12:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq5MFuemD2kX8g8rbX2YYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZTFjNTExMGUwZTkwMzAyZTQ3MDEyZmY1YzgyMzAzYTQ2
NjFhZGUwHhcNMjUwNDEzMTUwMTM1WhcNMjUwNDE0MTUwMTM1WjAzMTEwLwYDVQQD
EyhjYzQxYTEwYWQxODdjMzY2MDc1YzQ3ZDM5ZGZmNzEyZjU3ZTU3ZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74/59HA57qczhVnG+FxqwOMw1pqf
j6PQUd1TxD6kPRi0cG9iJadgJzdivw8zlED6/LeuwYR0/aZGBgpH/15LmHs/zDTx
6gAl7VPX+YAWJWdM3LNVd9CAg3K4mZ45uH7Z3BJWB7IZx/zI0Z4DBtLPton3RakS
Lk0vn16AfF0kbxGnfHu40N+iX0cdNGp04NR/g/UKReFafQx76LhpxqG5IF7Lc/wA
vB9J29/uNpEFY+5fmBcUlOR0uWKETFlYLu6xIpReyWS02JDUcusHVK7c8dCVhUqM
tEqVmerE7LGAiVPbckkfJYelAZt7my/+b46zPj6mRSeJlisUIwyH0Mk9pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxBoQrRh8NmB1xH053/cS9X5X6TMB8GA1UdIwQY
MBaAFCThxREODpAwLkcBL/XIIwOkZhreMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iM2JjNzAtNWRiMC00N2I5LWI2OTYt
NjdkYTU0MDkxMTZmLzEvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9iM2JjNzAtNWRiMC00N2I5LWI2OTYtNjdkYTU0MDkxMTZm
LzEvSk9IRkVRNE9rREF1UndFdjljZ2pBNlJtR3Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAicS1572q
ZqECYPylgZYoHdHXyVi+jIvHK6gqRXcX7/fvdJGBujrW89oFUpEotzOIUQFJpFev
5LQdBXQXIn+Lbw5SBHW5RFCN9Xr337Qc5bAMJgCXDiypqNo2xcMBKmXgAQZXJf71
esyMeOmipRM1eU6mjfhto1ntEjl+8siX7En+8A3AURKIUOF9ewpATC+1RyL9bnCB
yY/ndvZbKvt1Xeczt9wSMoETolo33wZtzyZ14PbZY1C5NwtQ2yQahU2m7qoc4zdW
/5jiD6InN3X2TJq9Mc6YKnm+d8++ar93HCBlFpnRa/PDFhrgkbcsnsuILMegpTVv
YPEEj8sKZQASKw==
-----END CERTIFICATE-----