Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
File:                     1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json)
Hash identifier:          JlGHbi1tjPmFzDcB1GRW/wRmTyQvSnoSHGp/GdyOhqo=
Subject key identifier:   F9:CD:C5:D4:01:5B:91:EC:76:57:41:5C:E8:CB:B9:25:EB:C1:40:8E
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Certificate issuer:       /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial:       01962DF40E8175D01DE6E1A3C43332142151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
Manifest number:          027C
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: dAnACWDnB7yd6ImxKzuaqduMHbGVC+XwXfnrxCa/H9Q=)
                          2: 8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa (hash: D9xl0kFJAWKH2xA+S2m21lyse1ulC1gNGZHY3WDEYOY=)
                          3: qhXB5I3L_1gebx9uWPle22yXSzs.roa (hash: 1Bibbr3y/zyc6e3zTUWDLu/M4E9ABrzuKYe3XtB8cLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0e:81:75:d0:1d:e6:e1:a3:c4:33:32:14:21:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=f9cdc5d4015b91ec7657415ce8cbb925ebc1408e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:7b:c7:9d:d1:06:b6:10:6a:fe:f4:4c:cb:
                    4c:1b:8f:75:7a:c6:12:22:ae:1e:e3:74:d6:80:8d:
                    bd:82:21:9f:b5:52:bd:65:a5:68:84:86:2d:45:a0:
                    0e:1b:ee:a9:6b:d6:9a:cc:ff:d1:17:17:00:4e:29:
                    1a:b9:b5:67:ab:4d:25:4b:c1:33:63:a9:f3:ae:3b:
                    24:51:e1:ab:55:56:93:ad:f8:c9:d2:64:0c:61:ba:
                    1e:44:46:05:6c:6c:90:e3:89:99:36:60:a1:75:48:
                    2a:43:6d:70:ea:41:b5:73:70:d4:ec:79:bd:c0:6b:
                    17:c8:3d:bc:00:3c:73:38:fd:e6:f8:0a:cb:b9:40:
                    c9:34:4a:9f:f2:7f:69:f6:4b:9c:2c:1a:dc:98:c7:
                    78:83:96:d3:aa:f5:ed:f0:77:f9:d3:08:ab:45:08:
                    46:f5:8d:10:6d:da:47:88:c7:10:f6:dd:db:c7:c1:
                    62:66:28:be:31:62:2c:e1:dd:ec:f0:38:46:e3:ae:
                    f8:fa:9c:9f:d6:90:12:f1:fc:a1:f8:26:d0:ce:c1:
                    8b:84:ad:1e:7a:41:45:9f:ca:0b:72:e3:c5:8c:00:
                    68:0f:78:7c:56:43:e7:44:b2:27:e2:6a:97:ff:54:
                    ec:1b:fe:59:8e:3f:c3:70:36:e5:e0:d4:01:21:aa:
                    71:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CD:C5:D4:01:5B:91:EC:76:57:41:5C:E8:CB:B9:25:EB:C1:40:8E
            X509v3 Authority Key Identifier:
                keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:b0:29:72:0d:a2:32:f2:1e:f5:c5:7e:26:d6:34:f2:d1:
         27:d4:9e:2b:ee:ce:b8:49:f4:c6:f5:3b:ce:12:6f:1a:cf:2d:
         2e:e9:a3:af:37:71:ca:55:a8:a1:85:f7:58:1f:3b:20:37:9b:
         57:75:27:17:65:2f:a4:c2:d8:21:cf:0c:ca:8b:fd:69:56:d0:
         09:06:14:fe:34:79:2f:f6:f3:65:f3:6e:63:de:50:e5:26:16:
         5d:f8:09:fc:94:e8:28:a8:58:29:39:2f:d5:9c:92:bd:42:5e:
         f7:e0:29:f8:6f:ed:c3:a5:93:1f:60:90:8c:db:15:6c:dd:f9:
         fc:c2:25:d3:c9:a6:50:58:75:d9:41:0b:b1:e9:d1:1c:9a:87:
         00:4f:4d:4b:e5:17:97:23:89:94:1a:a0:46:54:67:a3:f3:d1:
         67:85:61:f9:00:a1:01:b6:a5:9b:ce:1a:61:1d:b1:80:ef:76:
         b5:0f:95:9a:29:09:2a:7f:70:42:f8:ec:fe:d3:dd:70:ae:e0:
         c0:6a:6c:59:61:fe:39:a4:b4:33:a8:1b:b6:d8:8f:98:1d:06:
         7e:b8:58:6c:85:1f:11:a8:d4:cf:72:7b:26:04:9a:10:32:7a:
         ec:1f:d4:2a:3b:60:41:5b:2f:11:be:da:88:c1:9b:b6:35:c9:
         0c:ce:0e:fe
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYt9A6BddAd5uGjxDMyFCFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjhjZDVkMjRhMDhiNWE4YWZiNTdjOWU2MDRkMTkzYmM4
Y2FlMjAwHhcNMjUwNDEzMDcwMTMxWhcNMjUwNDE0MDcwMTMxWjAzMTEwLwYDVQQD
EyhmOWNkYzVkNDAxNWI5MWVjNzY1NzQxNWNlOGNiYjkyNWViYzE0MDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR17x53RBrYQav70TMtMG491esYS
Iq4e43TWgI29giGftVK9ZaVohIYtRaAOG+6pa9aazP/RFxcATikaubVnq00lS8Ez
Y6nzrjskUeGrVVaTrfjJ0mQMYboeREYFbGyQ44mZNmChdUgqQ21w6kG1c3DU7Hm9
wGsXyD28ADxzOP3m+ArLuUDJNEqf8n9p9kucLBrcmMd4g5bTqvXt8Hf50wirRQhG
9Y0QbdpHiMcQ9t3bx8FiZii+MWIs4d3s8DhG4674+pyf1pAS8fyh+CbQzsGLhK0e
ekFFn8oLcuPFjABoD3h8VkPnRLIn4mqX/1TsG/5Zjj/DcDbl4NQBIapxcQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPnNxdQBW5HsdldBXOjLuSXrwUCOMB8GA1UdIwQY
MBaAFPv4zV0koItaivtXyeYE0ZO8jK4gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fak5YU1NnaTFxSy0xZko1Z1RSazd5TXJpQS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZWIzZTliLTZkYjUtNDZjNi05YWEx
LWViODc4NjliZDFjOS8xLzEtX2pOWFNTZ2kxcUstMWZKNWdUUms3eU1yaUEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2MwL2ViM2U5Yi02ZGI1LTQ2YzYtOWFhMS1lYjg3ODY5YmQx
YzkvMS8xLV9qTlhTU2dpMXFLLTFmSjVnVFJrN3lNcmlBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0uw
KXINojLyHvXFfibWNPLRJ9SeK+7OuEn0xvU7zhJvGs8tLumjrzdxylWooYX3WB87
IDebV3UnF2UvpMLYIc8Myov9aVbQCQYU/jR5L/bzZfNuY95Q5SYWXfgJ/JToKKhY
KTkv1ZySvUJe9+Ap+G/tw6WTH2CQjNsVbN35/MIl08mmUFh12UELsenRHJqHAE9N
S+UXlyOJlBqgRlRno/PRZ4Vh+QChAbalm84aYR2xgO92tQ+VmikJKn9wQvjs/tPd
cK7gwGpsWWH+OaS0M6gbttiPmB0GfrhYbIUfEajUz3J7JgSaEDJ67B/UKjtgQVsv
Eb7aiMGbtjXJDM4O/g==
-----END CERTIFICATE-----