Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
File:                     2JW-5WBWMPcEix_7PwA7OdKeR6A.mft (raw, json)
Hash identifier:          d9fJMkCMa9FZlcXkJbPYquJDTZ2yM1aXvcyT/hv/Veg=
Subject key identifier:   5E:CA:12:2E:02:7B:0F:0E:2F:3A:4B:FF:AE:DF:37:C9:33:CE:D8:BE
Authority key identifier: D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0
Certificate issuer:       /CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
Certificate serial:       01962DF40A953EB4C129FA06F2557D73B8C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft
Manifest number:          046B
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: 2JW-5WBWMPcEix_7PwA7OdKeR6A.crl (hash: r4BaAhT9SXi/7e8RZXhbPo6kKsaxg02MpIVBO4PYUYg=)
                          2: JfVg2a5pAi61HF6W0lENi_X8DUc.roa (hash: Mi/UBjA1CVg3EI0zZ/Mvz8hNoPR4p0IzucKiACeunmw=)
                          3: sLl8IyRQ7O2V3aDprs2XcWd9-Fc.roa (hash: Q0fY46XPSxXWXxA2rseUn7tBmmNzqG29JtQSVk/FutE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0a:95:3e:b4:c1:29:fa:06:f2:55:7d:73:b8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d895bee5605630f7048b1ffb3f003b39d29e47a0
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=5eca122e027b0f0e2f3a4bffaedf37c933ced8be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:25:ec:a7:8b:1b:8e:8e:09:96:24:a8:8f:
                    cc:d1:a5:93:58:c5:5a:bd:25:e8:b7:68:a3:b2:88:
                    65:0b:cc:66:47:1b:36:38:46:72:dd:88:63:1c:7f:
                    1a:a4:39:3a:51:bc:c3:78:dd:55:43:ef:78:14:f0:
                    27:76:dc:28:6f:22:4f:ab:b5:7d:d2:5a:c9:09:84:
                    70:77:67:98:2d:24:61:c7:cc:69:34:18:b9:66:4c:
                    3d:00:01:32:37:ab:e5:9f:79:06:cc:0a:13:a1:2b:
                    06:3d:3e:4c:74:71:7d:3a:8f:03:27:b9:3e:e5:60:
                    12:03:ab:ca:95:4a:9a:8b:bb:a0:80:53:67:70:32:
                    5c:5a:b7:19:88:43:aa:8a:7f:51:16:b0:90:e7:b3:
                    e4:28:71:2f:ba:a0:ce:4c:8f:61:3f:7d:1b:9c:13:
                    ee:6b:51:e0:bf:19:72:18:d4:2a:1f:6d:05:e7:2c:
                    a7:15:19:d6:6c:93:1d:9d:4d:78:2f:e8:1a:fa:9c:
                    b2:ec:c4:b8:b0:cd:40:4a:c5:e1:44:c8:fc:60:45:
                    4f:4f:ad:50:86:6c:b5:6c:f8:8d:98:cd:ec:5f:8b:
                    af:29:3d:a8:a0:9c:3a:26:2b:d0:20:b9:26:b2:a2:
                    12:29:38:a5:4a:e1:f8:91:b3:7d:4d:c5:66:48:e9:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CA:12:2E:02:7B:0F:0E:2F:3A:4B:FF:AE:DF:37:C9:33:CE:D8:BE
            X509v3 Authority Key Identifier:
                keyid:D8:95:BE:E5:60:56:30:F7:04:8B:1F:FB:3F:00:3B:39:D2:9E:47:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JW-5WBWMPcEix_7PwA7OdKeR6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e754d6-0dac-4246-9fd6-202a0980c176/1/2JW-5WBWMPcEix_7PwA7OdKeR6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:2b:bd:0f:14:44:22:a5:6c:4f:80:38:37:43:7c:dc:98:b1:
         de:32:2c:2a:ab:e3:be:d7:b1:4a:59:fa:68:64:e0:73:e1:7c:
         13:57:40:11:3b:c3:3d:5b:13:a1:7a:77:c3:6e:91:2a:ad:6a:
         d2:f0:2f:43:58:11:6d:9b:01:fd:a6:8e:c5:88:b9:84:66:ec:
         22:6f:a6:aa:e5:9f:74:d2:01:e1:f5:32:e0:07:b9:e4:0b:75:
         9c:ce:65:1a:7b:8b:63:de:7b:c9:4b:1d:d5:13:8d:a0:a9:2b:
         62:3f:86:46:10:1b:45:30:62:78:bf:f6:b4:d6:99:07:ff:78:
         c4:18:74:06:4f:f6:d9:55:0c:e4:02:4b:6b:48:c6:c6:1b:85:
         62:e3:38:79:85:26:e0:9d:5d:d2:ae:58:81:0e:6e:bf:25:27:
         2c:e7:a6:9c:8a:88:35:fb:2f:f9:a5:d6:99:ba:cb:19:a9:69:
         ae:5b:64:df:66:8f:c7:2f:8e:58:9d:36:0a:5a:5d:43:fc:85:
         5c:65:c0:d8:39:c6:66:36:58:b2:9f:30:78:6a:fe:a5:4a:7c:
         72:b4:49:a1:38:3d:2b:23:e4:1f:fc:1e:b4:d9:d7:b2:da:24:
         1d:89:bb:6f:e2:c9:e2:d6:12:25:54:a9:a3:99:5d:30:aa:b3:
         ac:7f:3c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9AqVPrTBKfoG8lV9c7jFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTViZWU1NjA1NjMwZjcwNDhiMWZmYjNmMDAzYjM5ZDI5
ZTQ3YTAwHhcNMjUwNDEzMDcwMTMwWhcNMjUwNDE0MDcwMTMwWjAzMTEwLwYDVQQD
Eyg1ZWNhMTIyZTAyN2IwZjBlMmYzYTRiZmZhZWRmMzdjOTMzY2VkOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswEl7KeLG46OCZYkqI/M0aWTWMVa
vSXot2ijsohlC8xmRxs2OEZy3YhjHH8apDk6UbzDeN1VQ+94FPAndtwobyJPq7V9
0lrJCYRwd2eYLSRhx8xpNBi5Zkw9AAEyN6vln3kGzAoToSsGPT5MdHF9Oo8DJ7k+
5WASA6vKlUqai7uggFNncDJcWrcZiEOqin9RFrCQ57PkKHEvuqDOTI9hP30bnBPu
a1HgvxlyGNQqH20F5yynFRnWbJMdnU14L+ga+pyy7MS4sM1ASsXhRMj8YEVPT61Q
hmy1bPiNmM3sX4uvKT2ooJw6JivQILkmsqISKTilSuH4kbN9TcVmSOn3uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7KEi4Cew8OLzpL/67fN8kzzti+MB8GA1UdIwQY
MBaAFNiVvuVgVjD3BIsf+z8AOznSnkegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYt
MjAyYTA5ODBjMTc2LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lNzU0ZDYtMGRhYy00MjQ2LTlmZDYtMjAyYTA5ODBjMTc2
LzEvMkpXLTVXQldNUGNFaXhfN1B3QTdPZEtlUjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiu9DxRE
IqVsT4A4N0N83Jix3jIsKqvjvtexSln6aGTgc+F8E1dAETvDPVsToXp3w26RKq1q
0vAvQ1gRbZsB/aaOxYi5hGbsIm+mquWfdNIB4fUy4Ae55At1nM5lGnuLY957yUsd
1RONoKkrYj+GRhAbRTBieL/2tNaZB/94xBh0Bk/22VUM5AJLa0jGxhuFYuM4eYUm
4J1d0q5YgQ5uvyUnLOemnIqINfsv+aXWmbrLGalprltk32aPxy+OWJ02ClpdQ/yF
XGXA2DnGZjZYsp8weGr+pUp8crRJoTg9KyPkH/wetNnXstokHYm7b+LJ4tYSJVSp
o5ldMKqzrH88yw==
-----END CERTIFICATE-----