Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
File:                     JmceUvfpei6lP17KvWuUvIwHWmo.mft (raw, json)
Hash identifier:          mf5l7NsUkJlXG1SY1GaJiPZRu+hxrWlywT2Bfl2d6lo=
Subject key identifier:   C5:F2:BB:47:23:41:FE:BB:AE:0D:45:6C:3A:DA:A2:DD:3A:07:B1:73
Authority key identifier: 26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A
Certificate issuer:       /CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
Certificate serial:       01962F7435030F36B59F7B64A92784ED2E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft
Manifest number:          1005
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: JgbQOde8dBoJm081qWbMUAe-4ck.roa (hash: cPb9R2Jy8VhYx4mnUxTDnSqP1F9DRsJ4eRz8x4iEUpo=)
                          2: JmceUvfpei6lP17KvWuUvIwHWmo.crl (hash: FOXybOXsLgF9/La9I2vorCN3ZPtBuzDVlVWeh7m5OLM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:35:03:0f:36:b5:9f:7b:64:a9:27:84:ed:2e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26671e52f7e97a2ea53f5ecabd6b94bc8c075a6a
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=c5f2bb472341febbae0d456c3adaa2dd3a07b173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:98:54:ca:12:46:c5:51:14:f2:5e:0c:8d:
                    97:94:ab:da:23:33:52:45:28:a6:31:13:96:73:e8:
                    84:97:6a:8d:df:99:15:67:23:cf:39:0e:f5:6a:bd:
                    92:cd:6e:72:2e:73:a6:c0:ee:cd:a9:85:96:a9:81:
                    3d:db:cb:6a:dc:67:77:b9:5f:04:6d:c8:bd:93:7a:
                    64:99:f5:d8:71:df:6d:7f:af:32:9c:bd:d8:8c:04:
                    83:cb:1d:13:17:47:b4:36:42:aa:d8:23:61:4c:63:
                    91:d2:d9:a7:21:c8:fe:60:b9:d1:07:35:82:c5:bd:
                    81:50:d9:e5:0f:ce:25:37:30:6c:04:4e:d7:04:19:
                    7f:86:20:95:50:02:df:4e:87:4a:c1:e0:07:14:a3:
                    bc:c2:29:2e:70:03:d5:46:f6:92:71:4b:47:c0:31:
                    7b:e1:6f:95:c9:51:46:d7:55:25:61:04:40:10:7e:
                    39:64:53:cb:85:fd:7f:95:a3:74:6e:23:32:b1:3f:
                    ca:2d:3e:b6:d7:8e:d6:29:e0:d8:ea:e6:67:7d:8d:
                    86:70:7b:9a:5c:91:f4:54:91:31:12:df:31:f8:a7:
                    3e:32:bb:af:0b:49:75:13:05:dd:01:61:33:39:8f:
                    81:72:87:95:0c:39:1b:97:d7:2d:60:21:58:f2:fa:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F2:BB:47:23:41:FE:BB:AE:0D:45:6C:3A:DA:A2:DD:3A:07:B1:73
            X509v3 Authority Key Identifier:
                keyid:26:67:1E:52:F7:E9:7A:2E:A5:3F:5E:CA:BD:6B:94:BC:8C:07:5A:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmceUvfpei6lP17KvWuUvIwHWmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fab8bb-0547-4f33-accf-25198e0ed687/1/JmceUvfpei6lP17KvWuUvIwHWmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:6a:fa:d6:56:c7:cb:3a:ce:bd:e3:c9:62:68:d0:1c:4b:4e:
         fe:c4:84:13:a0:c2:ca:25:1c:77:41:f1:4b:e3:fc:cf:8d:87:
         7d:b7:b6:3c:7f:4d:72:0e:48:e4:d8:7a:38:5b:a6:f1:db:7d:
         e0:5e:ff:db:35:c2:cd:6c:23:77:93:b8:f7:5e:36:5a:cb:2c:
         13:f7:9b:dd:32:0c:74:37:d8:da:8f:fd:f3:2b:88:13:a4:23:
         f0:1a:e5:30:d8:26:18:44:1c:9e:77:24:5d:a9:e7:e5:d6:f2:
         17:69:90:d7:26:11:46:93:a8:99:83:16:7e:9b:83:e9:51:9e:
         dd:99:0a:33:6e:45:b5:3e:65:05:b2:fb:6b:43:95:3f:c6:f1:
         98:43:04:34:8c:46:d8:f9:f8:a5:8d:18:40:8a:21:20:60:07:
         8f:82:39:41:a3:1c:70:64:bd:f1:87:61:4c:4f:02:4a:b5:d8:
         cb:cd:9d:d0:1d:33:4b:10:3e:cb:5d:00:6c:16:3c:a1:19:57:
         82:48:f1:61:03:64:91:e8:09:1d:02:19:8a:62:26:e0:6f:ac:
         aa:52:5b:36:e3:05:75:57:77:da:96:5d:b0:c6:b5:33:72:96:
         02:b5:61:43:6b:00:2f:81:dd:3b:a5:9e:83:51:ec:1c:80:56:
         52:d2:a0:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDUDDza1n3tkqSeE7S4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjcxZTUyZjdlOTdhMmVhNTNmNWVjYWJkNmI5NGJjOGMw
NzVhNmEwHhcNMjUwNDEzMTQwMTA2WhcNMjUwNDE0MTQwMTA2WjAzMTEwLwYDVQQD
EyhjNWYyYmI0NzIzNDFmZWJiYWUwZDQ1NmMzYWRhYTJkZDNhMDdiMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MOYVMoSRsVRFPJeDI2XlKvaIzNS
RSimMROWc+iEl2qN35kVZyPPOQ71ar2SzW5yLnOmwO7NqYWWqYE928tq3Gd3uV8E
bci9k3pkmfXYcd9tf68ynL3YjASDyx0TF0e0NkKq2CNhTGOR0tmnIcj+YLnRBzWC
xb2BUNnlD84lNzBsBE7XBBl/hiCVUALfTodKweAHFKO8wikucAPVRvaScUtHwDF7
4W+VyVFG11UlYQRAEH45ZFPLhf1/laN0biMysT/KLT62147WKeDY6uZnfY2GcHua
XJH0VJExEt8x+Kc+MruvC0l1EwXdAWEzOY+BcoeVDDkbl9ctYCFY8voxmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXyu0cjQf67rg1FbDraot06B7FzMB8GA1UdIwQY
MBaAFCZnHlL36XoupT9eyr1rlLyMB1pqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mYWI4YmItMDU0Ny00ZjMzLWFjY2Yt
MjUxOThlMGVkNjg3LzEvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9mYWI4YmItMDU0Ny00ZjMzLWFjY2YtMjUxOThlMGVkNjg3
LzEvSm1jZVV2ZnBlaTZsUDE3S3ZXdVV2SXdIV21vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGr61lbH
yzrOvePJYmjQHEtO/sSEE6DCyiUcd0HxS+P8z42Hfbe2PH9Ncg5I5Nh6OFum8dt9
4F7/2zXCzWwjd5O49142WsssE/eb3TIMdDfY2o/98yuIE6Qj8BrlMNgmGEQcnnck
Xann5dbyF2mQ1yYRRpOomYMWfpuD6VGe3ZkKM25FtT5lBbL7a0OVP8bxmEMENIxG
2Pn4pY0YQIohIGAHj4I5QaMccGS98YdhTE8CSrXYy82d0B0zSxA+y10AbBY8oRlX
gkjxYQNkkegJHQIZimIm4G+sqlJbNuMFdVd32pZdsMa1M3KWArVhQ2sAL4HdO6We
g1HsHIBWUtKg3A==
-----END CERTIFICATE-----