Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File:                     JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier:          GxtumOgcinCfQOLn6bAdt1iUcxJjip3/AiwRPr3NrqA=
Subject key identifier:   23:A5:D7:2B:26:DF:9E:17:81:EC:BC:A3:63:6A:25:0B:91:30:38:0F
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer:       /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial:       01962DF43CFC4355CF272CAB62F4C2C6A918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number:          07C9
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: ekrpVEeYSWo2Y9ZQoeXS0GhXfhvcpNC6ZhuhJtvgO4g=)
                          2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3c:fc:43:55:cf:27:2c:ab:62:f4:c2:c6:a9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=23a5d72b26df9e1781ecbca3636a250b9130380f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:8e:c6:cc:dd:d5:e5:8f:e7:43:ac:f0:5e:
                    2b:54:c5:90:1d:3e:21:f0:64:ca:53:f1:e1:46:26:
                    42:1e:d7:16:cd:3d:ef:49:bf:7f:3e:19:8f:66:95:
                    57:25:74:f9:e5:ea:a2:e8:dd:6e:43:85:48:b3:19:
                    f7:ae:68:10:67:d7:f3:01:95:f6:08:e5:66:b6:e8:
                    fb:de:9f:21:9d:0c:98:1d:54:07:00:0f:13:1b:79:
                    ec:57:2c:31:08:1b:74:67:5b:36:d8:e6:16:0c:e7:
                    f7:91:72:8d:24:b6:80:2d:1f:4a:48:7d:31:42:22:
                    d0:00:4e:ea:15:43:d6:ad:2c:a6:d2:d5:9e:94:cd:
                    e3:c0:4e:34:f9:6d:38:cc:82:0b:fd:0d:12:70:5a:
                    b9:a2:0d:24:fe:97:ce:20:48:61:ad:28:c2:27:22:
                    05:95:aa:03:19:0f:da:17:a5:29:c5:64:ab:c7:9f:
                    13:1b:14:49:78:13:4b:e2:51:f4:4e:19:9e:0e:4a:
                    83:63:df:ec:b6:82:48:80:c3:37:d7:97:5b:0f:37:
                    91:fc:43:df:c6:fc:e5:24:5a:a1:17:38:10:a3:b4:
                    d2:d2:43:f4:cc:a8:41:53:2b:bb:e3:2a:58:2e:e9:
                    c6:de:45:e0:a0:15:20:2b:89:2e:fc:47:6f:3f:3b:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A5:D7:2B:26:DF:9E:17:81:EC:BC:A3:63:6A:25:0B:91:30:38:0F
            X509v3 Authority Key Identifier:
                keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:b9:20:cc:d3:8b:4a:0c:36:b2:4e:b7:60:00:97:52:9b:75:
         07:97:c5:e8:33:62:86:37:f8:03:9a:ae:2f:5a:6e:fb:d2:7c:
         03:ce:b2:d4:8b:24:43:6d:ef:1b:00:42:03:9d:6d:ac:40:16:
         0b:4a:27:5d:e3:40:9a:83:62:07:30:05:9c:0e:46:1d:22:26:
         2b:97:11:4c:0e:67:07:d6:d4:39:20:c6:1e:ab:b1:7b:b9:43:
         3d:9e:ca:0c:c8:93:0b:1b:3f:e0:d1:f6:50:98:fe:f5:c3:6c:
         f6:0b:be:be:28:ae:71:7d:e6:85:c5:46:b8:c9:74:52:ef:91:
         a5:5c:3f:fa:dc:cd:32:19:5e:d2:5a:6b:dc:06:d2:d7:c2:cb:
         6d:75:d0:9b:27:9d:bb:f7:41:46:e1:24:2f:f2:34:58:69:e5:
         7a:fc:b9:f9:57:6b:72:fb:46:c3:40:0d:0f:c2:0c:46:52:24:
         9a:cb:6e:9e:19:eb:0f:6c:b1:c5:1f:38:7a:7d:4f:3e:cf:0c:
         36:5f:e0:50:76:86:df:fd:cb:b4:70:8a:28:32:32:60:fb:c2:
         1d:a1:39:40:8d:79:7d:94:3a:52:08:b8:3c:d1:33:dc:aa:3a:
         bb:3d:25:d5:f3:a8:b9:a9:9c:a8:a1:10:21:6d:62:d5:4e:d3:
         59:8f:5d:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Dz8Q1XPJyyrYvTCxqkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1
ZjU2ZTQwHhcNMjUwNDEzMDcwMTQzWhcNMjUwNDE0MDcwMTQzWjAzMTEwLwYDVQQD
EygyM2E1ZDcyYjI2ZGY5ZTE3ODFlY2JjYTM2MzZhMjUwYjkxMzAzODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwuOxszd1eWP50Os8F4rVMWQHT4h
8GTKU/HhRiZCHtcWzT3vSb9/PhmPZpVXJXT55eqi6N1uQ4VIsxn3rmgQZ9fzAZX2
COVmtuj73p8hnQyYHVQHAA8TG3nsVywxCBt0Z1s22OYWDOf3kXKNJLaALR9KSH0x
QiLQAE7qFUPWrSym0tWelM3jwE40+W04zIIL/Q0ScFq5og0k/pfOIEhhrSjCJyIF
laoDGQ/aF6UpxWSrx58TGxRJeBNL4lH0ThmeDkqDY9/stoJIgMM315dbDzeR/EPf
xvzlJFqhFzgQo7TS0kP0zKhBUyu74ypYLunG3kXgoBUgK4ku/EdvPztd9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOl1ysm354Xgey8o2NqJQuRMDgPMB8GA1UdIwQY
MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt
MDY2NzZiZTEzOGZhLzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh
LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyrkgzNOL
Sgw2sk63YACXUpt1B5fF6DNihjf4A5quL1pu+9J8A86y1IskQ23vGwBCA51trEAW
C0onXeNAmoNiBzAFnA5GHSImK5cRTA5nB9bUOSDGHquxe7lDPZ7KDMiTCxs/4NH2
UJj+9cNs9gu+viiucX3mhcVGuMl0Uu+RpVw/+tzNMhle0lpr3AbS18LLbXXQmyed
u/dBRuEkL/I0WGnlevy5+VdrcvtGw0AND8IMRlIkmstunhnrD2yxxR84en1PPs8M
Nl/gUHaG3/3LtHCKKDIyYPvCHaE5QI15fZQ6Ugi4PNEz3Ko6uz0l1fOouamcqKEQ
IW1i1U7TWY9dhg==
-----END CERTIFICATE-----