Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File:                     jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier:          MuHNr6GPOZiLE3GfAIvm2o4LJwp8pvvup7TdBdHDdSU=
Subject key identifier:   7F:DA:20:A4:7A:DD:AB:23:31:9A:3D:11:12:8B:63:2D:F8:57:23:F1
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer:       /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial:       01962ECF61A529EE0D55B46E382392F50A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number:          1203
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=)
                          2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: Xh4oaNo4qC7HW7q+6rA1/MKmH5Y+zqV7l827yNP/UjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:61:a5:29:ee:0d:55:b4:6e:38:23:92:f5:0a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=7fda20a47addab23319a3d11128b632df85723f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:09:e5:e3:27:b2:b5:c7:96:6b:41:cb:26:
                    5e:44:93:3e:5e:fa:e9:0b:e8:83:3a:fa:7b:20:66:
                    13:43:b0:9a:2c:33:c6:66:b4:41:ba:7d:0c:ce:bd:
                    88:0c:c3:13:72:d3:9c:66:66:70:da:3a:a4:be:f8:
                    97:b2:6e:29:be:44:73:47:d7:3f:24:aa:e7:7b:61:
                    3f:47:f9:9c:b6:7a:d8:d5:fa:1f:48:0d:f2:e0:4a:
                    64:26:a5:e6:93:e6:c4:b0:a6:c5:ce:ad:fa:da:d6:
                    0f:da:da:cf:6b:b3:ae:9d:f7:fb:e4:11:a7:18:09:
                    8f:01:bb:81:c6:b5:b5:5e:23:28:c0:0b:b8:88:08:
                    74:96:71:70:ce:ba:ae:96:b0:64:b2:53:98:23:d6:
                    2f:9c:ba:06:a9:20:06:89:10:82:db:a2:d0:b1:55:
                    65:1b:3f:84:cf:b5:97:da:a3:cd:40:64:32:95:f2:
                    08:9b:be:38:30:d9:51:a9:f9:9c:75:db:1d:17:9f:
                    45:30:48:8d:61:f2:96:d1:08:85:f1:ed:79:93:59:
                    b5:0e:56:75:e0:98:75:92:1f:69:a3:c9:18:32:52:
                    c0:19:c9:cc:95:f2:14:d4:f1:02:83:91:5f:9b:d7:
                    3d:d3:81:11:7c:32:bd:57:9c:57:fd:9c:dd:fe:63:
                    97:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DA:20:A4:7A:DD:AB:23:31:9A:3D:11:12:8B:63:2D:F8:57:23:F1
            X509v3 Authority Key Identifier:
                keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:75:a3:8a:2f:82:3f:20:ab:eb:5b:b6:2d:5b:ff:d7:a2:db:
         10:47:5d:6d:3c:43:db:11:eb:3f:7f:5a:97:5a:bc:6a:04:d4:
         2c:40:95:28:01:9a:36:a1:f0:85:c0:0f:49:f4:dc:d7:3e:eb:
         3e:0a:6c:f5:55:37:9d:98:7f:9c:2a:19:65:61:d9:a5:28:da:
         4a:2f:2b:2f:7f:3e:8d:a7:6a:aa:fa:62:73:11:64:05:80:fb:
         47:3e:1a:ea:32:31:48:74:e5:2e:1c:52:00:27:6c:a6:d4:ae:
         d3:31:ee:d8:b2:8d:25:52:31:d5:a1:0c:93:4f:ee:46:38:d1:
         2a:fb:2d:c2:b2:b5:8d:57:15:b6:45:fe:8e:a7:30:ef:f4:3a:
         8a:b3:7a:a1:29:a3:62:78:1f:a4:69:14:85:53:af:13:41:f6:
         d9:e3:ff:e9:fc:ce:d7:6a:12:b5:f8:8e:95:99:c7:51:8b:da:
         5f:2a:5e:c7:08:c0:e0:50:8a:8d:72:3e:36:21:6d:0f:d9:c6:
         81:d6:dc:b5:33:ad:04:2b:2e:99:f7:35:0f:ef:36:30:96:e0:
         56:35:25:d5:f1:17:f4:c7:9f:78:55:8a:e3:ef:39:d8:55:1a:
         d0:3e:12:20:e8:c9:cc:23:77:bd:61:41:ac:83:1c:f6:94:2c:
         0f:40:a7:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2GlKe4NVbRuOCOS9QooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTc2YTg2YWUzYTM1MzJlMTA5YzVjZGY3MjlhZDQ3OGMx
YzY5N2YwHhcNMjUwNDEzMTEwMTA0WhcNMjUwNDE0MTEwMTA0WjAzMTEwLwYDVQQD
Eyg3ZmRhMjBhNDdhZGRhYjIzMzE5YTNkMTExMjhiNjMyZGY4NTcyM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnEJ5eMnsrXHlmtByyZeRJM+Xvrp
C+iDOvp7IGYTQ7CaLDPGZrRBun0Mzr2IDMMTctOcZmZw2jqkvviXsm4pvkRzR9c/
JKrne2E/R/mctnrY1fofSA3y4EpkJqXmk+bEsKbFzq362tYP2trPa7Ounff75BGn
GAmPAbuBxrW1XiMowAu4iAh0lnFwzrqulrBkslOYI9YvnLoGqSAGiRCC26LQsVVl
Gz+Ez7WX2qPNQGQylfIIm744MNlRqfmcddsdF59FMEiNYfKW0QiF8e15k1m1DlZ1
4Jh1kh9po8kYMlLAGcnMlfIU1PECg5Ffm9c904ERfDK9V5xX/Zzd/mOXDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/aIKR63asjMZo9ERKLYy34VyPxMB8GA1UdIwQY
MBaAFI1XaoauOjUy4QnFzfcprUeMHGl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUt
NjRlNzI5ZWYzMDJkLzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUtNjRlNzI5ZWYzMDJk
LzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3Wjii+C
PyCr61u2LVv/16LbEEddbTxD2xHrP39al1q8agTULECVKAGaNqHwhcAPSfTc1z7r
Pgps9VU3nZh/nCoZZWHZpSjaSi8rL38+jadqqvpicxFkBYD7Rz4a6jIxSHTlLhxS
ACdsptSu0zHu2LKNJVIx1aEMk0/uRjjRKvstwrK1jVcVtkX+jqcw7/Q6irN6oSmj
YngfpGkUhVOvE0H22eP/6fzO12oStfiOlZnHUYvaXypexwjA4FCKjXI+NiFtD9nG
gdbctTOtBCsumfc1D+82MJbgVjUl1fEX9MefeFWK4+852FUa0D4SIOjJzCN3vWFB
rIMc9pQsD0Cngw==
-----END CERTIFICATE-----