Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File:                     jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier:          AZdjKx15j8Rs4H19ZyeZ9yOQ0MK7GxOwLrMA9jeNZWU=
Subject key identifier:   BE:9F:4C:E4:AA:A1:AE:D5:FB:DE:5A:55:05:EC:37:42:D6:29:42:BE
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer:       /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial:       01962E61E82C806E1E90AB03F942277693A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
                          2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
                          3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
                          4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: gVB2RhmI7mvXSq5yGMAyhkLIuvaXciQZI54OjwM9Sx0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e8:2c:80:6e:1e:90:ab:03:f9:42:27:76:93:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=be9f4ce4aaa1aed5fbde5a5505ec3742d62942be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:5b:51:ae:55:c9:bd:71:ff:a6:ab:5d:88:
                    92:8f:0c:ae:3b:06:1b:0e:e3:9b:be:60:da:f5:fd:
                    8f:fd:6d:56:74:c0:d2:ae:53:17:ae:c6:c0:54:11:
                    4d:c9:34:dc:5d:40:b1:5e:13:ca:6c:82:de:bc:8e:
                    a7:cf:1e:68:a0:ad:92:80:6a:60:c3:ed:9b:20:28:
                    fe:01:aa:f5:96:9b:74:c6:6f:f0:ef:15:0b:29:c6:
                    7b:65:cc:6b:11:97:a7:a6:dd:4d:c1:df:db:95:ad:
                    b6:e2:0a:8a:ea:07:56:72:3d:80:44:78:7c:85:9e:
                    c5:da:9d:be:f9:df:91:06:5e:79:9b:15:33:35:3e:
                    68:6a:f5:64:ad:7c:6e:4a:de:a1:8e:dc:29:c4:36:
                    2e:57:c2:60:07:aa:e2:11:0c:aa:ee:a0:b4:40:55:
                    ae:7f:4f:e8:5d:d9:c4:e9:37:88:72:17:94:53:bf:
                    e7:4f:39:d2:1b:bb:18:2d:37:ed:b7:d6:bd:d5:35:
                    c1:06:cf:de:b7:8b:45:e9:6c:13:33:49:ac:f5:55:
                    2d:34:90:b9:43:85:ee:53:6d:4a:fc:f7:b0:20:d7:
                    5d:b8:24:e7:bd:49:2d:58:b3:6d:71:6c:60:0c:f0:
                    ec:91:2e:ec:de:97:dc:56:4b:b7:e0:b8:48:94:52:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9F:4C:E4:AA:A1:AE:D5:FB:DE:5A:55:05:EC:37:42:D6:29:42:BE
            X509v3 Authority Key Identifier:
                keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:a6:40:5b:0d:0e:c9:31:1f:f3:9e:65:b6:79:7f:2a:90:5e:
         d6:77:1e:26:0f:91:4f:78:59:d0:37:8d:c3:02:ca:5f:b2:07:
         0c:58:16:64:5b:7d:3f:5f:21:46:29:69:0b:9d:60:e5:e1:46:
         de:cf:f5:25:ca:d5:19:70:85:18:ed:79:b5:5d:9a:c1:e0:68:
         75:6c:ba:d4:4c:4a:f9:fb:06:c7:ed:9e:da:ba:89:ed:68:65:
         db:a8:7d:e5:d9:53:60:a7:2b:77:a1:96:ec:4f:97:73:9a:ce:
         b4:77:cd:4d:48:12:18:a1:ed:9e:76:40:b1:4d:12:ee:32:55:
         e1:56:3a:99:f0:02:30:00:bc:84:b4:c3:9f:66:7e:da:cc:6b:
         6a:f4:3b:71:44:67:23:81:a1:75:5c:04:60:12:f0:8c:d5:19:
         0a:ce:07:84:fc:eb:68:4b:7e:c6:7c:36:79:2d:f0:86:65:2b:
         c2:bf:72:af:a5:3c:97:5f:ef:94:21:68:95:5f:ca:fd:d5:ac:
         5c:c7:bd:93:d8:2b:a5:b7:66:98:15:b2:b0:9e:5e:7f:48:63:
         5e:9a:f1:93:fb:0d:1a:70:07:cb:6e:44:15:f8:4b:b2:1a:35:
         e8:82:65:1e:45:4c:0f:4c:11:c6:ef:bd:40:7a:62:c8:95:03:
         78:dd:30:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYegsgG4ekKsD+UIndpOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODU2NTU3YzQxNDZhOGI1MGRjNGQ5NDQyNGIwNjY4MGNl
Zjc1NWIwHhcNMjUwNDEzMDkwMTMwWhcNMjUwNDE0MDkwMTMwWjAzMTEwLwYDVQQD
EyhiZTlmNGNlNGFhYTFhZWQ1ZmJkZTVhNTUwNWVjMzc0MmQ2Mjk0MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXFbUa5Vyb1x/6arXYiSjwyuOwYb
DuObvmDa9f2P/W1WdMDSrlMXrsbAVBFNyTTcXUCxXhPKbILevI6nzx5ooK2SgGpg
w+2bICj+Aar1lpt0xm/w7xULKcZ7ZcxrEZenpt1Nwd/bla224gqK6gdWcj2ARHh8
hZ7F2p2++d+RBl55mxUzNT5oavVkrXxuSt6hjtwpxDYuV8JgB6riEQyq7qC0QFWu
f0/oXdnE6TeIcheUU7/nTznSG7sYLTftt9a91TXBBs/et4tF6WwTM0ms9VUtNJC5
Q4XuU21K/PewINdduCTnvUktWLNtcWxgDPDskS7s3pfcVku34LhIlFI/PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6fTOSqoa7V+95aVQXsN0LWKUK+MB8GA1UdIwQY
MBaAFIyFZVfEFGqLUNxNlEJLBmgM73VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt
MmE2YjlhMGNjYWJkLzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk
LzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyqZAWw0O
yTEf855ltnl/KpBe1nceJg+RT3hZ0DeNwwLKX7IHDFgWZFt9P18hRilpC51g5eFG
3s/1JcrVGXCFGO15tV2aweBodWy61ExK+fsGx+2e2rqJ7Whl26h95dlTYKcrd6GW
7E+Xc5rOtHfNTUgSGKHtnnZAsU0S7jJV4VY6mfACMAC8hLTDn2Z+2sxravQ7cURn
I4GhdVwEYBLwjNUZCs4HhPzraEt+xnw2eS3whmUrwr9yr6U8l1/vlCFolV/K/dWs
XMe9k9grpbdmmBWysJ5ef0hjXprxk/sNGnAHy25EFfhLsho16IJlHkVMD0wRxu+9
QHpiyJUDeN0wKg==
-----END CERTIFICATE-----