Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File:                     JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier:          CGd5/ejr+bhXg9FDr+HzB8HP4OknEwEJlRmO/hKJrIg=
Subject key identifier:   A7:8D:24:FF:AD:F4:FE:F8:2F:53:6A:40:06:C1:47:24:D4:27:E0:31
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer:       /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial:       01962F3D90E3509D1777494E20E03F5194CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number:          0F07
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: KW2YXW4DBI7AINM7BdTxr5F6R0gKvtrXqCAFE/ms8hs=)
                          2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:90:e3:50:9d:17:77:49:4e:20:e0:3f:51:94:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=a78d24ffadf4fef82f536a4006c14724d427e031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:90:91:a2:de:84:49:92:13:97:fc:b2:73:
                    d4:e2:bc:4b:64:7b:6f:34:7c:99:29:79:25:fc:71:
                    99:b9:fa:28:63:cf:60:41:06:dc:3d:bd:cd:3f:b6:
                    77:e5:fa:d2:15:d6:5e:5b:21:32:50:1f:59:f5:78:
                    a1:6d:e2:d1:f5:ef:d7:40:49:40:73:b3:76:6f:dc:
                    26:0d:14:9a:ca:cb:ed:1b:4b:dc:97:15:59:94:ac:
                    0c:f9:5e:fa:38:57:70:e2:f4:8d:1f:9a:b0:45:d7:
                    8f:d0:5e:59:ed:9d:71:d7:fe:a7:30:31:3b:3a:1e:
                    26:34:26:7f:c7:47:d2:08:08:4a:7f:e9:ea:8b:4f:
                    c3:9a:de:76:f0:54:ca:cd:ca:e9:6c:db:52:f5:81:
                    f0:50:09:d8:98:95:97:0c:46:da:03:2d:69:f7:0e:
                    ed:0f:6a:e1:86:c7:cf:d3:02:d6:06:53:ce:5d:33:
                    1b:3b:00:19:a8:e3:3d:d4:cf:78:97:19:24:d3:72:
                    8b:b2:f2:df:f7:a3:f3:70:be:ce:b7:89:23:01:3a:
                    f5:3f:f4:17:56:38:48:e3:55:c4:19:75:0f:1d:3d:
                    1f:a3:45:7a:f8:a5:95:66:28:76:54:ff:c2:4d:9c:
                    9e:c1:ca:72:21:a1:79:20:de:45:3b:fe:d9:05:86:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8D:24:FF:AD:F4:FE:F8:2F:53:6A:40:06:C1:47:24:D4:27:E0:31
            X509v3 Authority Key Identifier:
                keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:12:4e:6d:11:31:8e:5a:cb:3a:07:3d:88:f2:cd:df:a0:ac:
         62:4d:04:01:e7:33:cc:30:13:cc:8d:50:2e:db:58:83:d0:fe:
         be:84:1f:9c:1e:95:82:39:07:9e:b3:ac:99:0e:31:64:07:ba:
         8f:d3:23:e5:da:52:ef:c0:0d:3d:75:af:de:af:7a:1c:96:9e:
         cc:ab:b0:d9:60:1b:a1:68:63:c4:dd:49:27:41:6d:85:66:e3:
         3a:d1:b2:c2:95:8c:ac:38:1a:19:a4:32:c1:27:2e:bf:c6:0b:
         60:36:ab:45:19:f3:70:b8:cb:41:6f:e7:1f:05:58:d7:10:d5:
         69:b6:c1:3b:4e:09:5a:0b:3d:4e:6b:b7:e2:af:46:52:8f:8e:
         4f:50:33:95:6a:c7:85:08:7c:8c:6b:ec:de:d4:9a:9f:95:34:
         75:f3:1b:df:8b:4d:1a:39:fa:e5:de:df:b1:28:6f:ec:01:4e:
         98:42:21:97:7c:05:c7:bf:95:12:ea:a7:a7:38:0e:76:fa:e7:
         c2:5f:35:f0:9e:e5:9b:ca:be:79:00:5a:26:2e:e3:67:91:e8:
         39:af:13:cd:cb:35:25:62:db:e8:18:92:f7:48:9a:a5:9f:bb:
         bb:ea:28:aa:d9:aa:76:27:c5:ac:ec:25:f0:c8:2b:74:c9:5a:
         b2:c1:6e:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZDjUJ0Xd0lOIOA/UZTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NzE3ODQ5YTY5YWQ4ZGY4NzA4OGRhNjU4YjIzMDViODU5
NGM4YzQwHhcNMjUwNDEzMTMwMTI1WhcNMjUwNDE0MTMwMTI1WjAzMTEwLwYDVQQD
EyhhNzhkMjRmZmFkZjRmZWY4MmY1MzZhNDAwNmMxNDcyNGQ0MjdlMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI6QkaLehEmSE5f8snPU4rxLZHtv
NHyZKXkl/HGZufooY89gQQbcPb3NP7Z35frSFdZeWyEyUB9Z9XihbeLR9e/XQElA
c7N2b9wmDRSaysvtG0vclxVZlKwM+V76OFdw4vSNH5qwRdeP0F5Z7Z1x1/6nMDE7
Oh4mNCZ/x0fSCAhKf+nqi0/Dmt528FTKzcrpbNtS9YHwUAnYmJWXDEbaAy1p9w7t
D2rhhsfP0wLWBlPOXTMbOwAZqOM91M94lxkk03KLsvLf96PzcL7Ot4kjATr1P/QX
VjhI41XEGXUPHT0fo0V6+KWVZih2VP/CTZyewcpyIaF5IN5FO/7ZBYbRkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeNJP+t9P74L1NqQAbBRyTUJ+AxMB8GA1UdIwQY
MBaAFCVxeEmmmtjfhwiNpliyMFuFlMjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTct
ZmUyNGVkMmFkY2ZmLzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTctZmUyNGVkMmFkY2Zm
LzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhJObREx
jlrLOgc9iPLN36CsYk0EAeczzDATzI1QLttYg9D+voQfnB6VgjkHnrOsmQ4xZAe6
j9Mj5dpS78ANPXWv3q96HJaezKuw2WAboWhjxN1JJ0FthWbjOtGywpWMrDgaGaQy
wScuv8YLYDarRRnzcLjLQW/nHwVY1xDVabbBO04JWgs9Tmu34q9GUo+OT1AzlWrH
hQh8jGvs3tSan5U0dfMb34tNGjn65d7fsShv7AFOmEIhl3wFx7+VEuqnpzgOdvrn
wl818J7lm8q+eQBaJi7jZ5HoOa8Tzcs1JWLb6BiS90iapZ+7u+ooqtmqdifFrOwl
8MgrdMlassFuYg==
-----END CERTIFICATE-----