Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
File:                     jcDIIYG5DfbElpFMMZ0x_4sqQII.mft (raw, json)
Hash identifier:          ECcEnnJWzpJRabW7y5I9KLgSJjithUUel07EZLE3HZk=
Subject key identifier:   72:A5:0B:67:0D:53:37:26:37:85:6C:72:56:65:9C:F6:0A:8E:39:0C
Authority key identifier: 8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82
Certificate issuer:       /CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
Certificate serial:       01962E6203E0D5925DF5EB99B4E590D07816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft
Manifest number:          0BBC
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: 2Fh6mDHQ6-BYGlBx3MhV5PW4a_0.roa (hash: grPXzh7UKrKKCIxzSzsbZfXISu0fqMnVM0HgZcxoLTc=)
                          2: jcDIIYG5DfbElpFMMZ0x_4sqQII.crl (hash: sAVIc6YT5hRI5QfxUP0/eWse+t+O/EceWxq1/fmvd3w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:03:e0:d5:92:5d:f5:eb:99:b4:e5:90:d0:78:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc0c82181b90df6c496914c319d31ff8b2a4082
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=72a50b670d53372637856c7256659cf60a8e390c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:10:cb:29:bc:c3:34:7a:e8:23:1c:af:71:
                    14:c7:9c:68:7b:f3:b9:e0:ad:82:1d:03:f3:66:51:
                    9e:bd:57:11:c8:e2:94:eb:62:35:34:65:64:c9:5b:
                    c9:b7:fa:26:19:17:68:b9:41:09:96:f4:2e:e7:69:
                    fd:51:45:a0:e5:6e:90:b7:b8:74:68:08:57:ca:15:
                    2d:eb:fb:1f:d8:87:4b:ce:c3:3e:43:f9:c3:c8:5a:
                    b2:d0:f6:34:3e:15:ea:c0:c2:97:af:1c:bf:25:a9:
                    c1:69:2b:18:a2:8e:6a:4f:4c:76:42:62:71:2b:38:
                    56:da:75:fc:a6:57:26:ee:4b:01:35:1a:5b:76:f8:
                    f1:92:6c:52:de:5a:75:99:bc:06:a9:3e:72:0b:39:
                    49:41:16:b9:b7:2d:9f:79:48:53:32:16:f5:8f:49:
                    64:bb:7a:5f:72:2c:41:fa:47:ab:bc:3c:26:f4:4e:
                    ca:2c:df:cd:35:38:df:0a:2d:42:78:fa:71:8a:ca:
                    22:91:ca:e3:ae:f7:0b:08:22:bc:33:bc:6f:3c:60:
                    ab:ae:50:8c:c9:14:c1:2d:ae:5d:d9:ba:ab:65:53:
                    27:12:6a:3d:8c:50:70:50:e6:cb:33:9c:4a:41:ea:
                    ae:46:8f:1b:39:3f:a6:98:0b:0f:c4:83:d8:ee:7b:
                    d7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A5:0B:67:0D:53:37:26:37:85:6C:72:56:65:9C:F6:0A:8E:39:0C
            X509v3 Authority Key Identifier:
                keyid:8D:C0:C8:21:81:B9:0D:F6:C4:96:91:4C:31:9D:31:FF:8B:2A:40:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcDIIYG5DfbElpFMMZ0x_4sqQII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a0d78-7656-4516-9875-dc01ac228451/1/jcDIIYG5DfbElpFMMZ0x_4sqQII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:05:a4:f0:a0:fa:2e:1d:9c:4d:aa:d6:5c:c2:82:fa:96:3f:
         b7:99:ea:21:69:42:a0:3e:38:bc:76:a3:5e:70:1c:20:72:1a:
         f9:71:c5:60:fd:f0:ed:4a:01:91:6f:f1:2d:39:49:6f:d6:ab:
         43:0e:88:5a:37:56:ea:e5:e3:a9:27:3e:35:13:12:9a:32:16:
         97:3d:b2:59:aa:e2:a0:ca:03:bb:c9:2d:cc:93:58:26:35:27:
         bc:e2:f6:aa:1e:1d:b8:49:39:5a:54:c9:c4:a3:0e:07:95:d8:
         06:69:e3:19:d8:6e:c6:ac:bb:cd:8f:91:2c:0e:44:14:ed:8e:
         2d:7c:81:98:97:98:8a:9d:be:b2:d8:ce:71:a0:aa:a2:9d:7d:
         90:7d:e7:5c:79:cf:1d:52:67:2b:ef:e6:dc:11:cd:6f:24:55:
         77:81:8e:24:26:f7:63:bd:10:fc:c3:2c:be:96:de:c7:35:af:
         a3:33:64:b3:b1:63:03:05:34:71:e7:de:36:aa:a8:c1:07:97:
         38:25:0f:01:bb:2b:8b:0d:a7:98:8a:d8:9d:8d:1c:f5:9c:91:
         7a:5c:72:35:29:b1:b7:a2:ee:fc:de:13:cb:8e:c7:20:36:d9:
         88:f3:45:f7:8a:01:af:11:4a:e4:5d:55:ad:a4:c2:43:1b:98:
         fd:15:ba:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgPg1ZJd9euZtOWQ0HgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzBjODIxODFiOTBkZjZjNDk2OTE0YzMxOWQzMWZmOGIy
YTQwODIwHhcNMjUwNDEzMDkwMTM3WhcNMjUwNDE0MDkwMTM3WjAzMTEwLwYDVQQD
Eyg3MmE1MGI2NzBkNTMzNzI2Mzc4NTZjNzI1NjY1OWNmNjBhOGUzOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslgQyym8wzR66CMcr3EUx5xoe/O5
4K2CHQPzZlGevVcRyOKU62I1NGVkyVvJt/omGRdouUEJlvQu52n9UUWg5W6Qt7h0
aAhXyhUt6/sf2IdLzsM+Q/nDyFqy0PY0PhXqwMKXrxy/JanBaSsYoo5qT0x2QmJx
KzhW2nX8plcm7ksBNRpbdvjxkmxS3lp1mbwGqT5yCzlJQRa5ty2feUhTMhb1j0lk
u3pfcixB+kervDwm9E7KLN/NNTjfCi1CePpxisoikcrjrvcLCCK8M7xvPGCrrlCM
yRTBLa5d2bqrZVMnEmo9jFBwUObLM5xKQequRo8bOT+mmAsPxIPY7nvXqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKlC2cNUzcmN4VsclZlnPYKjjkMMB8GA1UdIwQY
MBaAFI3AyCGBuQ32xJaRTDGdMf+LKkCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUt
ZGMwMWFjMjI4NDUxLzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTBkNzgtNzY1Ni00NTE2LTk4NzUtZGMwMWFjMjI4NDUx
LzEvamNESUlZRzVEZmJFbHBGTU1aMHhfNHNxUUlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagWk8KD6
Lh2cTarWXMKC+pY/t5nqIWlCoD44vHajXnAcIHIa+XHFYP3w7UoBkW/xLTlJb9ar
Qw6IWjdW6uXjqSc+NRMSmjIWlz2yWarioMoDu8ktzJNYJjUnvOL2qh4duEk5WlTJ
xKMOB5XYBmnjGdhuxqy7zY+RLA5EFO2OLXyBmJeYip2+stjOcaCqop19kH3nXHnP
HVJnK+/m3BHNbyRVd4GOJCb3Y70Q/MMsvpbexzWvozNks7FjAwU0cefeNqqowQeX
OCUPAbsriw2nmIrYnY0c9ZyRelxyNSmxt6Lu/N4Ty47HIDbZiPNF94oBrxFK5F1V
raTCQxuY/RW6Vw==
-----END CERTIFICATE-----