Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
File:                     JxlBKRimYn-ZzOVcesoTkFe4V04.mft (raw, json)
Hash identifier:          jujrO71erR0XO5fnGEiGgF/w5C3kv6tApruHUSowvtA=
Subject key identifier:   DE:6D:3C:DE:DA:2E:F1:AF:86:7D:9E:C9:32:19:26:45:80:A3:D5:4F
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       01962F3D94F21851FC98F163934FADF41554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft
Manifest number:          0830
Signing time:             Sun 13 Apr 2025 13:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:27 +0000
Files and hashes:         1: 0egOCEDjjfjwdPmizCh3Cu6NbrQ.roa (hash: RjxfFq3fmsFbepGKowirBDzmyu+RZ3fSC5NUINYgMYU=)
                          2: 35WlNYoicXeTaUW3mWXsagVOnPc.roa (hash: vhlE4c9NYewGiei7QNQOzx0MpfEcyu07VzFHTp1o4sI=)
                          3: 8-PSvB9rLper4H4Z6i2q7Nh0gdw.roa (hash: 2qr0DY7SshfmBWBMPElwvi/+AJH/67rJ01N4KKU7q1A=)
                          4: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (hash: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=)
                          5: JxlBKRimYn-ZzOVcesoTkFe4V04.crl (hash: +8Jm5ZNNRONGBLR4RIWToZ06MZHwoIFXaPohKeXNxtk=)
                          6: Ntn0KC9hNBdEOU4APTAFvwKoJWM.roa (hash: Nm8YrLspYKdECPfNk4gMXsfWH7pa2i2J/txkaQvcJKs=)
                          7: UAFcUuKvgonvhSs4MdOglxDeP9A.roa (hash: cBXXRFGKUV+6kMfUTrzWb6w7ZuBP1z44qOPAvbDDmRo=)
                          8: XP9c9FnVM83t2BcVhUGYjki34JA.roa (hash: 9MjxmhRyp3W6rmd2o7KozYAfmVW00slDjc1CHV4YtKA=)
                          9: _3swtCefveYwZMovOeZXllr31i4.roa (hash: nFadkNQONx0EZ0a70RD073DgpyU0gMaLe+ajpjA05V0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:94:f2:18:51:fc:98:f1:63:93:4f:ad:f4:15:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Apr 13 13:01:27 2025 GMT
            Not After : Apr 14 13:01:27 2025 GMT
        Subject: CN=de6d3cdeda2ef1af867d9ec93219264580a3d54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:9e:c2:89:6a:8e:f6:79:76:c1:15:1f:95:
                    8f:47:e7:43:df:0c:9a:e1:99:51:a1:56:7e:42:d2:
                    fd:cb:23:04:80:81:14:d9:74:55:f8:8c:5c:30:4c:
                    c4:d7:39:b8:39:54:28:d0:f2:2c:0a:0f:da:30:f0:
                    b3:6d:99:41:65:89:df:72:fa:be:e1:69:37:8b:b4:
                    17:e3:59:af:ee:3a:6f:65:a0:33:6a:45:99:98:cb:
                    16:fa:5a:5c:01:3a:b0:d6:e7:64:54:cc:55:ca:69:
                    fd:f9:05:8e:43:0c:13:7b:d8:fe:38:d3:d9:fb:d8:
                    3d:4a:e9:85:ee:15:9d:ce:42:1f:cd:04:8a:0a:11:
                    78:10:80:72:02:3e:3d:c1:e9:4b:94:47:83:b6:3e:
                    6f:07:c4:97:93:75:c8:d3:4f:1d:08:46:6e:19:12:
                    89:4c:af:6c:e2:c4:ce:6d:45:4b:79:bd:cc:c2:73:
                    ca:e7:ef:eb:61:a3:f7:82:7a:69:d7:6b:79:f4:dc:
                    45:ae:ea:9a:b3:a6:3c:42:46:8b:63:21:8f:b0:d2:
                    b1:28:a0:3b:e1:7d:15:58:36:5f:43:2d:0c:cc:c9:
                    45:00:12:5a:f2:ca:ff:f0:49:d7:44:85:53:0c:f5:
                    cc:3a:b4:40:be:3c:cf:31:3c:c7:c1:90:2f:14:54:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6D:3C:DE:DA:2E:F1:AF:86:7D:9E:C9:32:19:26:45:80:A3:D5:4F
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:34:0a:ee:72:19:3a:d1:d7:cb:a1:58:13:b9:e4:33:35:53:
         0d:01:b0:98:9d:91:9d:0c:f4:53:2a:72:46:bf:66:80:02:cf:
         76:dd:0f:fb:32:f6:15:2e:7d:e5:7c:16:e4:69:f7:9c:74:49:
         c4:17:2f:48:b3:c6:9d:e2:db:0f:52:08:69:c1:2b:2a:52:ca:
         af:88:1c:2c:a9:56:70:b5:23:b3:15:3e:6d:fe:41:1c:a2:56:
         d4:8a:db:cc:d7:d4:f8:bf:1a:be:2f:89:66:78:fc:94:f3:25:
         81:68:5c:0f:9b:22:91:d7:6a:a5:05:cc:2f:02:99:3f:e6:4e:
         f5:be:a8:92:5e:f7:87:e5:9a:4d:f7:29:20:f8:6a:68:85:9e:
         97:1c:f3:5d:0a:42:70:5a:2a:ac:5d:7e:17:54:bd:56:20:a6:
         b2:c6:33:0a:60:15:73:12:6f:55:67:a3:db:7c:f8:42:03:d9:
         2a:57:25:72:9a:20:7a:b9:59:df:f0:05:9a:52:9c:9b:35:47:
         8d:aa:82:18:42:96:a0:c8:ba:d7:f2:8a:0c:63:f3:0f:44:92:
         86:39:25:cd:6d:ba:d4:9c:24:3c:c3:75:87:32:80:0c:47:1f:
         0c:21:cb:e8:a2:43:ae:d0:cb:83:24:9c:c7:a7:7b:d5:0f:89:
         9d:48:52:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPZTyGFH8mPFjk0+t9BVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi
ODU3NGUwHhcNMjUwNDEzMTMwMTI3WhcNMjUwNDE0MTMwMTI3WjAzMTEwLwYDVQQD
EyhkZTZkM2NkZWRhMmVmMWFmODY3ZDllYzkzMjE5MjY0NTgwYTNkNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1+ewolqjvZ5dsEVH5WPR+dD3wya
4ZlRoVZ+QtL9yyMEgIEU2XRV+IxcMEzE1zm4OVQo0PIsCg/aMPCzbZlBZYnfcvq+
4Wk3i7QX41mv7jpvZaAzakWZmMsW+lpcATqw1udkVMxVymn9+QWOQwwTe9j+ONPZ
+9g9SumF7hWdzkIfzQSKChF4EIByAj49welLlEeDtj5vB8SXk3XI008dCEZuGRKJ
TK9s4sTObUVLeb3MwnPK5+/rYaP3gnpp12t59NxFruqas6Y8QkaLYyGPsNKxKKA7
4X0VWDZfQy0MzMlFABJa8sr/8EnXRIVTDPXMOrRAvjzPMTzHwZAvFFR3gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5tPN7aLvGvhn2eyTIZJkWAo9VPMB8GA1UdIwQY
MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt
NGUyMjM5MTdiODYwLzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw
LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbDQK7nIZ
OtHXy6FYE7nkMzVTDQGwmJ2RnQz0UypyRr9mgALPdt0P+zL2FS595XwW5Gn3nHRJ
xBcvSLPGneLbD1IIacErKlLKr4gcLKlWcLUjsxU+bf5BHKJW1IrbzNfU+L8avi+J
Znj8lPMlgWhcD5sikddqpQXMLwKZP+ZO9b6okl73h+WaTfcpIPhqaIWelxzzXQpC
cFoqrF1+F1S9ViCmssYzCmAVcxJvVWej23z4QgPZKlclcpogerlZ3/AFmlKcmzVH
jaqCGEKWoMi61/KKDGPzD0SShjklzW261JwkPMN1hzKADEcfDCHL6KJDrtDLgySc
x6d71Q+JnUhS2Q==
-----END CERTIFICATE-----