Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File:                     jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier:          fUJRnYVLKgc5gqD2p1TVPZIu5bDDVxhQEGc1CaCv6nE=
Subject key identifier:   F1:00:A9:6E:DD:55:D4:3A:BA:39:0F:33:EB:D6:83:D4:7C:C7:56:D2
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer:       /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial:       01962E98CA5446385A937B4C16DA3D5E21C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number:          13EA
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
                          2: c9lDVYQcRQdBCo43HauWZGFuClk.roa (hash: inruiVih5EBCVj6ZjI9SCWuJ/TuQ5KyFEPVY6V2Z9e0=)
                          3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: Vt4Hls1IF4ZkPY4esKnZke7Wkber3SDy9D+aeJ2ct6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ca:54:46:38:5a:93:7b:4c:16:da:3d:5e:21:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=f100a96edd55d43aba390f33ebd683d47cc756d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:72:2c:7c:b0:53:5a:28:c9:d0:b9:27:9e:ba:
                    ae:57:10:c2:66:f1:e4:cf:81:9e:81:5f:90:cf:92:
                    7f:1d:28:fa:4d:2d:0c:9a:93:d2:82:71:63:3f:4e:
                    42:71:10:fa:75:de:d8:91:eb:43:de:39:05:ab:20:
                    9e:1b:f7:a5:48:41:f3:04:fe:3f:4d:8e:67:a0:ab:
                    1b:be:93:da:11:34:a8:cc:fc:e1:68:35:a3:f1:0d:
                    9e:6a:f7:de:e1:34:31:77:2e:c4:0c:ab:94:b0:22:
                    23:ae:20:62:b0:00:ab:c3:87:e6:fd:55:5e:bb:1b:
                    30:44:4d:6d:7c:1e:c7:60:da:0a:20:df:3c:07:ff:
                    4d:9f:24:f4:77:43:8a:e0:09:0c:58:d4:80:6c:e7:
                    0b:4c:a1:d5:a1:78:4c:17:84:8c:1a:de:94:5a:22:
                    dc:ca:38:ab:66:db:c4:7f:0e:d7:e7:be:cc:87:ca:
                    93:c3:82:e6:d1:09:48:53:85:1f:1c:1f:d4:03:38:
                    10:e8:e5:12:33:f1:9b:7d:5e:2a:19:c2:a4:97:e2:
                    8a:b5:7f:bf:9b:41:bd:8d:a2:ec:3f:21:a1:13:51:
                    1d:e7:b0:53:8c:ae:04:c4:ee:d4:6f:c5:c8:47:28:
                    0d:cd:6b:de:b0:a2:93:3b:4c:c0:67:f1:fb:a0:44:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:00:A9:6E:DD:55:D4:3A:BA:39:0F:33:EB:D6:83:D4:7C:C7:56:D2
            X509v3 Authority Key Identifier:
                keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:14:37:47:6d:c3:cc:ca:6c:d5:d0:9a:47:c3:70:45:a6:62:
         65:7d:82:ce:09:ca:b8:8d:03:d7:b1:04:75:fc:d6:e3:c4:18:
         87:84:15:e3:88:5f:96:c8:5e:67:57:5b:f5:d3:f1:ef:a8:c1:
         6e:68:03:05:8d:92:30:4e:fc:ce:50:54:3e:18:fd:85:7f:a4:
         5d:2a:c7:93:fb:3a:28:cc:35:bf:ce:7b:f3:a5:13:18:51:b7:
         a2:9f:ae:2c:28:06:42:09:4f:f6:8d:b7:05:02:17:39:c8:08:
         e5:14:c1:07:ca:85:9d:57:1c:ed:ff:3b:57:1b:d2:6c:e8:40:
         77:78:f6:84:fd:df:35:63:cb:12:6a:85:24:df:43:19:fa:eb:
         52:3e:13:92:b7:5a:50:16:84:a5:3b:44:08:45:22:85:e5:8f:
         5d:ef:ee:55:75:e6:d8:37:b0:f3:8c:67:36:91:0f:69:c7:0c:
         0a:a8:6d:12:d5:d0:8a:14:bf:91:c8:49:62:bc:4a:45:5c:09:
         4e:6d:07:2a:f8:ec:af:dd:78:a9:b7:b3:e9:29:15:76:8b:cd:
         f4:d8:f6:97:32:78:d9:f2:85:ee:55:05:f2:eb:42:05:52:43:
         63:cd:5c:b9:9f:95:a8:b3:ff:0e:f5:a3:eb:53:a0:c9:2c:eb:
         6f:b8:eb:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMpURjhak3tMFto9XiHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTQzYmIzOGQ2ZTBiZThjMjg5MDk0YmE0YWRmMzg3ZDBk
ZTQwYTAwHhcNMjUwNDEzMTAwMTI3WhcNMjUwNDE0MTAwMTI3WjAzMTEwLwYDVQQD
EyhmMTAwYTk2ZWRkNTVkNDNhYmEzOTBmMzNlYmQ2ODNkNDdjYzc1NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23IsfLBTWijJ0LknnrquVxDCZvHk
z4GegV+Qz5J/HSj6TS0MmpPSgnFjP05CcRD6dd7YketD3jkFqyCeG/elSEHzBP4/
TY5noKsbvpPaETSozPzhaDWj8Q2eavfe4TQxdy7EDKuUsCIjriBisACrw4fm/VVe
uxswRE1tfB7HYNoKIN88B/9NnyT0d0OK4AkMWNSAbOcLTKHVoXhMF4SMGt6UWiLc
yjirZtvEfw7X577Mh8qTw4Lm0QlIU4UfHB/UAzgQ6OUSM/GbfV4qGcKkl+KKtX+/
m0G9jaLsPyGhE1Ed57BTjK4ExO7Ub8XIRygNzWvesKKTO0zAZ/H7oEQEyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEAqW7dVdQ6ujkPM+vWg9R8x1bSMB8GA1UdIwQY
MBaAFI6kO7ONbgvowokJS6St84fQ3kCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWIt
MjRmN2Y5NDM2Y2VjLzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWItMjRmN2Y5NDM2Y2Vj
LzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRQ3R23D
zMps1dCaR8NwRaZiZX2CzgnKuI0D17EEdfzW48QYh4QV44hflsheZ1db9dPx76jB
bmgDBY2SME78zlBUPhj9hX+kXSrHk/s6KMw1v85786UTGFG3op+uLCgGQglP9o23
BQIXOcgI5RTBB8qFnVcc7f87VxvSbOhAd3j2hP3fNWPLEmqFJN9DGfrrUj4Tkrda
UBaEpTtECEUiheWPXe/uVXXm2Dew84xnNpEPaccMCqhtEtXQihS/kchJYrxKRVwJ
Tm0HKvjsr914qbez6SkVdovN9Nj2lzJ42fKF7lUF8utCBVJDY81cuZ+VqLP/DvWj
61OgySzrb7jrBQ==
-----END CERTIFICATE-----