Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File:                     jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier:          sNhdUTOHc8FD2XXLdQ9973TeWoCl6cVSaa/nbsDaksA=
Subject key identifier:   DC:8A:01:25:96:11:B6:D7:BC:B4:C4:F0:8E:5A:ED:81:9F:2A:AF:7D
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer:       /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial:       01962E2B4BC7E6BA1DC8DCE99939A0A1304D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number:          0547
Signing time:             Sun 13 Apr 2025 08:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:51 +0000
Files and hashes:         1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: LSZJTklhlE0Z7iQLNKOR13GZehpd13A0Ecv+anhiBac=)
                          2: pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa (hash: YNYcfocsMawW3njWrgaZfKy0b3fCRuRw7rODR3Kt6t8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4b:c7:e6:ba:1d:c8:dc:e9:99:39:a0:a1:30:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
        Validity
            Not Before: Apr 13 08:01:51 2025 GMT
            Not After : Apr 14 08:01:51 2025 GMT
        Subject: CN=dc8a01259611b6d7bcb4c4f08e5aed819f2aaf7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:24:7e:ca:77:e3:32:c6:75:9f:34:d4:72:2d:
                    c0:a2:2a:58:e5:d3:2f:38:7f:cd:5e:0d:4f:82:81:
                    5b:63:b6:f4:c1:9c:24:64:cc:d1:88:9b:2d:df:e0:
                    57:77:62:49:a8:b3:6c:1e:2a:f8:3a:d8:b3:63:de:
                    6f:20:cf:cd:61:54:72:63:e8:29:35:31:f8:31:66:
                    ba:e1:75:3f:ef:02:b8:7d:ea:a1:b4:76:d4:94:01:
                    1d:0c:f6:ca:5d:d8:70:97:d0:9f:28:e1:ec:7f:17:
                    de:a0:d3:ea:e6:2e:45:66:dc:93:14:ca:d6:57:38:
                    31:b1:af:a2:6b:d8:a1:7b:79:12:ca:9c:2a:43:16:
                    07:f4:3c:ef:d2:9d:8f:56:79:ec:ef:78:52:9a:79:
                    71:e9:a8:96:2f:8d:15:c5:b7:a8:16:9c:50:43:30:
                    90:27:73:1e:53:fa:9c:90:26:84:42:63:d9:db:a7:
                    a3:a7:64:dc:a6:7c:13:01:ca:62:b4:e9:10:2b:a6:
                    e7:18:8a:9c:8d:3f:b5:4c:25:16:e5:87:a7:b6:f8:
                    56:4c:67:19:f8:cc:6a:d9:dc:73:f9:60:28:85:a9:
                    b0:a3:c3:c0:3b:b2:f5:3f:67:ca:c1:63:6f:59:35:
                    d2:d3:71:3d:09:c8:6a:5c:5a:e5:f8:5f:0b:fc:5a:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8A:01:25:96:11:B6:D7:BC:B4:C4:F0:8E:5A:ED:81:9F:2A:AF:7D
            X509v3 Authority Key Identifier:
                keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f5:3e:65:d9:37:86:2b:e7:3d:e7:36:8e:09:85:a8:5f:7f:
         44:e9:95:34:26:f3:5d:11:b3:8b:d0:90:40:68:8f:66:49:e6:
         cf:85:6f:42:e6:a9:43:26:ab:29:12:6e:b5:81:94:e7:c7:b8:
         e7:9a:eb:af:cd:cd:43:0b:4b:31:ab:1f:9c:d6:9d:dd:51:83:
         da:eb:1d:14:1a:e1:93:35:5b:7b:0c:62:1f:3f:1e:98:22:3b:
         87:91:87:2a:28:92:7a:d4:ab:dc:0a:51:5b:99:d8:81:63:d5:
         2c:bf:00:86:6c:3c:85:3b:8f:36:ef:02:80:14:8c:e8:93:0f:
         01:0d:55:da:24:cd:c2:a2:0c:5e:74:6d:e8:1a:3e:e2:4d:b4:
         01:c1:76:a3:30:b9:8c:96:cb:b1:2a:72:d4:05:5e:60:6f:ae:
         e6:6d:5a:6f:bc:35:ee:3f:31:a5:35:41:d4:9d:9e:e5:d4:57:
         76:1c:d2:ea:6d:12:d0:7a:26:c6:6a:f4:92:a8:89:fd:b6:44:
         76:83:cb:4c:fe:23:cc:68:fa:28:49:a3:9d:f7:96:49:ef:14:
         9c:1c:39:1d:3b:79:5e:df:8b:c2:59:27:05:bd:b7:1b:24:98:
         95:51:b0:96:ee:ed:15:f7:06:e5:46:b1:fa:6c:64:61:87:54:
         23:c6:cf:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0vH5rodyNzpmTmgoTBNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZmM2MTBjZTdiY2Y0Nzk2NTFmZDk1MThjMjg4OTRlZDFl
YjVhODQwHhcNMjUwNDEzMDgwMTUxWhcNMjUwNDE0MDgwMTUxWjAzMTEwLwYDVQQD
EyhkYzhhMDEyNTk2MTFiNmQ3YmNiNGM0ZjA4ZTVhZWQ4MTlmMmFhZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSR+ynfjMsZ1nzTUci3AoipY5dMv
OH/NXg1PgoFbY7b0wZwkZMzRiJst3+BXd2JJqLNsHir4OtizY95vIM/NYVRyY+gp
NTH4MWa64XU/7wK4feqhtHbUlAEdDPbKXdhwl9CfKOHsfxfeoNPq5i5FZtyTFMrW
Vzgxsa+ia9ihe3kSypwqQxYH9Dzv0p2PVnns73hSmnlx6aiWL40VxbeoFpxQQzCQ
J3MeU/qckCaEQmPZ26ejp2TcpnwTAcpitOkQK6bnGIqcjT+1TCUW5YentvhWTGcZ
+Mxq2dxz+WAohamwo8PAO7L1P2fKwWNvWTXS03E9CchqXFrl+F8L/FrKiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyKASWWEbbXvLTE8I5a7YGfKq99MB8GA1UdIwQY
MBaAFI78YQznvPR5ZR/ZUYwoiU7R61qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEt
MjEyNzJiODc3MjhiLzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yODk0ZDctMTRlZS00NmFiLTg4MmEtMjEyNzJiODc3Mjhi
LzEvanZ4aERPZTg5SGxsSDlsUmpDaUpUdEhyV29RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfU+Zdk3
hivnPec2jgmFqF9/ROmVNCbzXRGzi9CQQGiPZknmz4VvQuapQyarKRJutYGU58e4
55rrr83NQwtLMasfnNad3VGD2usdFBrhkzVbewxiHz8emCI7h5GHKiiSetSr3ApR
W5nYgWPVLL8Ahmw8hTuPNu8CgBSM6JMPAQ1V2iTNwqIMXnRt6Bo+4k20AcF2ozC5
jJbLsSpy1AVeYG+u5m1ab7w17j8xpTVB1J2e5dRXdhzS6m0S0Homxmr0kqiJ/bZE
doPLTP4jzGj6KEmjnfeWSe8UnBw5HTt5Xt+LwlknBb23GySYlVGwlu7tFfcG5Uax
+mxkYYdUI8bPjA==
-----END CERTIFICATE-----