Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File:                     JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier:          8/Nc+5pnrFPEEnnuQW/J+5q8M8sZ4gJ4Bv6N84k5jnk=
Subject key identifier:   BC:A5:82:BD:A9:80:C9:C7:3D:2E:E0:B1:E8:6B:EB:3A:85:3D:A6:EE
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer:       /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial:       01962F3D7527066A3F9A3E240CB6F426D304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number:          06FA
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: +eH23z2aedAlqv0Qlw2wf8fDu2imPUzUYGxcVGDYEvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:75:27:06:6a:3f:9a:3e:24:0c:b6:f4:26:d3:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d26a5146996d220461081072c76396582fca84
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=bca582bda980c9c73d2ee0b1e86beb3a853da6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:2b:42:ab:5d:4d:94:9c:9a:ff:25:7d:14:
                    e6:4b:31:a7:a0:70:08:44:b0:79:6b:7e:6f:67:f6:
                    08:5b:9b:d7:8f:42:f0:f9:63:73:71:fd:72:71:12:
                    91:f7:d9:73:fd:f5:c4:b5:22:b7:c3:2b:97:2d:94:
                    47:e1:da:90:cb:40:73:f5:98:1d:c2:4a:29:8b:c1:
                    ca:1c:43:81:5c:14:17:cb:95:c3:76:07:2b:9f:44:
                    a1:05:f0:85:af:ce:62:bb:16:c5:b8:e4:20:1b:54:
                    b3:12:38:c4:d0:48:a5:a5:cc:4a:cb:80:3e:07:7d:
                    47:4e:ba:eb:85:61:6b:63:63:28:8d:76:97:0f:03:
                    ae:8c:86:a6:ef:8e:3c:6c:19:47:af:db:93:3a:f6:
                    c6:19:8a:c8:9b:00:a1:bc:da:40:e9:2e:f2:06:a5:
                    94:96:ab:0f:84:2e:92:09:b4:cb:ff:07:06:58:d1:
                    f2:bf:03:e4:03:c4:fd:bb:72:18:05:a0:0a:bb:db:
                    3b:f0:f7:13:4e:d3:0f:b7:28:ef:4f:a0:ed:c8:db:
                    9e:c5:c1:68:6f:b7:78:8d:0e:97:ff:b1:c5:3f:3b:
                    5e:1c:25:f5:85:eb:14:92:7b:f2:c3:46:e7:cc:d3:
                    c8:3a:48:ab:cb:2c:9a:75:16:37:27:81:fb:47:90:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A5:82:BD:A9:80:C9:C7:3D:2E:E0:B1:E8:6B:EB:3A:85:3D:A6:EE
            X509v3 Authority Key Identifier:
                keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:80:27:7d:26:a3:05:34:7c:9d:f6:d3:27:fe:bc:05:27:58:
         04:f8:61:44:99:aa:02:b4:03:fd:f4:da:f1:d8:35:6f:07:d7:
         fa:36:55:8d:35:8b:d5:7b:7b:d5:7c:28:af:20:84:e9:d4:6b:
         d2:5b:0b:bb:e1:e4:f2:0d:ff:a4:09:b0:da:8a:4e:34:32:fe:
         7b:0b:fe:63:f8:da:cd:9d:8c:3f:c9:84:fd:c9:57:70:7f:a4:
         21:82:61:3a:69:f3:a9:a8:72:cd:7b:3f:c1:08:b1:26:60:60:
         22:63:b9:02:18:3a:74:6d:be:66:71:d6:ae:a3:aa:c0:b5:53:
         ba:15:56:15:ba:00:0f:0f:ee:ba:1d:a7:c8:31:1e:ce:f4:af:
         ea:eb:d3:e3:39:32:6b:99:5a:5e:be:09:dd:32:5e:7a:95:a9:
         82:94:8b:5e:37:82:f2:e6:bc:e1:e1:05:01:f5:50:6a:9b:23:
         98:00:45:a8:43:6e:18:aa:bf:2f:14:d2:8a:82:c5:e9:f8:cd:
         d7:12:07:82:9d:92:9d:17:e4:ba:76:d7:e0:14:08:cd:c7:45:
         79:dd:29:45:56:9b:2c:83:f2:43:1b:1f:2d:07:10:87:0c:4a:
         77:7d:9d:b3:93:80:f6:9c:82:41:42:e0:63:96:40:69:2a:02:
         e1:4d:4e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXUnBmo/mj4kDLb0JtMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDI2YTUxNDY5OTZkMjIwNDYxMDgxMDcyYzc2Mzk2NTgy
ZmNhODQwHhcNMjUwNDEzMTMwMTE4WhcNMjUwNDE0MTMwMTE4WjAzMTEwLwYDVQQD
EyhiY2E1ODJiZGE5ODBjOWM3M2QyZWUwYjFlODZiZWIzYTg1M2RhNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveorQqtdTZScmv8lfRTmSzGnoHAI
RLB5a35vZ/YIW5vXj0Lw+WNzcf1ycRKR99lz/fXEtSK3wyuXLZRH4dqQy0Bz9Zgd
wkopi8HKHEOBXBQXy5XDdgcrn0ShBfCFr85iuxbFuOQgG1SzEjjE0EilpcxKy4A+
B31HTrrrhWFrY2MojXaXDwOujIam7448bBlHr9uTOvbGGYrImwChvNpA6S7yBqWU
lqsPhC6SCbTL/wcGWNHyvwPkA8T9u3IYBaAKu9s78PcTTtMPtyjvT6DtyNuexcFo
b7d4jQ6X/7HFPzteHCX1hesUknvyw0bnzNPIOkiryyyadRY3J4H7R5D7RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLylgr2pgMnHPS7gsehr6zqFPabuMB8GA1UdIwQY
MBaAFCTSalFGmW0iBGEIEHLHY5ZYL8qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEt
NWI5ODk2MjczNzg5LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEtNWI5ODk2MjczNzg5
LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4AnfSaj
BTR8nfbTJ/68BSdYBPhhRJmqArQD/fTa8dg1bwfX+jZVjTWL1Xt71XworyCE6dRr
0lsLu+Hk8g3/pAmw2opONDL+ewv+Y/jazZ2MP8mE/clXcH+kIYJhOmnzqahyzXs/
wQixJmBgImO5Ahg6dG2+ZnHWrqOqwLVTuhVWFboADw/uuh2nyDEezvSv6uvT4zky
a5laXr4J3TJeepWpgpSLXjeC8ua84eEFAfVQapsjmABFqENuGKq/LxTSioLF6fjN
1xIHgp2SnRfkunbX4BQIzcdFed0pRVabLIPyQxsfLQcQhwxKd32ds5OA9pyCQULg
Y5ZAaSoC4U1ONw==
-----END CERTIFICATE-----