Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File:                     JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier:          i1tbyckuIiOSBOPlmdnZzkoA6YZT0dWVZIklX8DiHuU=
Subject key identifier:   93:AD:AF:8E:77:52:58:64:01:F2:A7:57:46:DE:89:95:73:BF:C8:09
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer:       /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial:       01962E2AD4FDC15A66B5EE8E3047CAB8D949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
                          2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: W9s2vav1JOfz/TxiZEf7ZKnCWFZtLS0NjLEoFCvUQYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d4:fd:c1:5a:66:b5:ee:8e:30:47:ca:b8:d9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=93adaf8e7752586401f2a75746de899573bfc809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:75:4a:07:91:ca:70:5d:07:ec:27:2d:4d:
                    8a:fc:24:50:cf:82:1d:96:b2:c1:9d:fb:d2:ba:e8:
                    00:29:ce:9a:56:f5:83:8e:4d:49:40:f4:fb:c2:76:
                    39:01:27:5a:18:9d:9a:25:f5:aa:2b:8d:3b:1e:c8:
                    04:5c:0e:43:25:0e:95:4a:21:45:2d:1f:89:ec:84:
                    18:f5:dd:6a:9e:ce:b7:e9:38:89:88:19:64:7c:f0:
                    81:db:03:71:ae:40:59:e1:b5:03:d0:25:52:bc:2f:
                    30:d3:a2:87:1f:6d:7c:3b:b2:46:1b:66:d5:e3:ba:
                    34:b5:52:c6:32:6d:d4:d2:86:8a:93:05:e9:f7:d7:
                    26:f3:85:97:e6:7f:fc:4e:dc:8b:b3:b9:8f:f4:98:
                    03:39:79:45:4b:c7:20:47:3d:3a:fc:b6:32:ee:50:
                    6e:2c:b2:be:f4:6e:de:16:c9:f2:e8:c5:59:b2:47:
                    17:96:6d:31:29:aa:7e:ed:ef:ae:56:c0:9a:28:1c:
                    c7:1d:fe:df:62:82:7e:54:38:47:0f:62:57:51:be:
                    ae:dc:a7:5a:b3:77:86:04:de:cf:20:0a:d4:9d:4d:
                    79:b3:4c:a3:43:f4:c3:4f:f1:f8:1b:f9:a7:c5:2e:
                    48:0c:c2:85:b1:fd:12:ee:de:9b:c5:2b:7f:61:93:
                    5d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AD:AF:8E:77:52:58:64:01:F2:A7:57:46:DE:89:95:73:BF:C8:09
            X509v3 Authority Key Identifier:
                keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:20:fe:10:a4:d7:a0:54:3f:fc:c7:27:b8:ca:60:05:5e:e7:
         75:4b:5e:61:be:54:40:ed:73:48:6d:66:b6:0c:02:df:09:60:
         53:2f:ad:69:3b:49:b0:c1:b6:cf:3a:6a:5f:3f:9a:df:58:05:
         29:a4:03:cb:9e:87:d1:80:72:eb:f1:eb:c5:08:2e:ee:e0:c3:
         d5:38:aa:5c:f4:ca:ce:de:00:56:1f:61:b1:b2:45:27:6e:13:
         43:20:48:72:c4:3c:6e:d0:97:d4:d6:24:4d:75:1d:64:f5:5b:
         0c:59:51:a4:26:f4:7f:de:fe:83:b1:56:3e:2b:f8:1b:40:c2:
         99:45:ac:78:7f:68:fd:58:e3:0f:b9:1a:99:8c:b6:26:b5:25:
         7e:d8:80:68:a2:82:2e:89:8d:4d:54:13:b2:4f:f7:b3:36:f6:
         d9:b8:e1:40:da:0c:e0:ae:97:6c:1a:8c:81:86:6f:07:84:c4:
         04:78:3e:46:88:97:38:1a:a3:9a:6e:db:60:ba:3a:12:24:a6:
         7d:51:32:82:d8:2c:96:6a:f5:87:4d:6f:94:8c:95:42:41:20:
         09:5a:8f:aa:9f:b2:79:86:a1:f5:80:81:01:da:49:77:9e:b5:
         df:e8:27:21:c1:0c:02:09:16:2a:77:8e:4b:b3:8b:ed:83:cf:
         8d:17:51:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtT9wVpmte6OMEfKuNlJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDlmNDVlZjIwYjUwNmVhOGVmNGNiNjgyYzJjYTI3MDFi
MjkwYjQwHhcNMjUwNDEzMDgwMTIwWhcNMjUwNDE0MDgwMTIwWjAzMTEwLwYDVQQD
Eyg5M2FkYWY4ZTc3NTI1ODY0MDFmMmE3NTc0NmRlODk5NTczYmZjODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl91SgeRynBdB+wnLU2K/CRQz4Id
lrLBnfvSuugAKc6aVvWDjk1JQPT7wnY5ASdaGJ2aJfWqK407HsgEXA5DJQ6VSiFF
LR+J7IQY9d1qns636TiJiBlkfPCB2wNxrkBZ4bUD0CVSvC8w06KHH218O7JGG2bV
47o0tVLGMm3U0oaKkwXp99cm84WX5n/8TtyLs7mP9JgDOXlFS8cgRz06/LYy7lBu
LLK+9G7eFsny6MVZskcXlm0xKap+7e+uVsCaKBzHHf7fYoJ+VDhHD2JXUb6u3Kda
s3eGBN7PIArUnU15s0yjQ/TDT/H4G/mnxS5IDMKFsf0S7t6bxSt/YZNdLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOtr453UlhkAfKnV0beiZVzv8gJMB8GA1UdIwQY
MBaAFCVJ9F7yC1BuqO9MtoLCyicBspC0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMt
YTU0MzFiMDdkMDllLzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9lN2M3ZjItNTc4NC00MjY1LTg0YjMtYTU0MzFiMDdkMDll
LzEvSlVuMFh2SUxVRzZvNzB5MmdzTEtKd0d5a0xRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSD+EKTX
oFQ//McnuMpgBV7ndUteYb5UQO1zSG1mtgwC3wlgUy+taTtJsMG2zzpqXz+a31gF
KaQDy56H0YBy6/HrxQgu7uDD1TiqXPTKzt4AVh9hsbJFJ24TQyBIcsQ8btCX1NYk
TXUdZPVbDFlRpCb0f97+g7FWPiv4G0DCmUWseH9o/VjjD7kamYy2JrUlftiAaKKC
LomNTVQTsk/3szb22bjhQNoM4K6XbBqMgYZvB4TEBHg+RoiXOBqjmm7bYLo6EiSm
fVEygtgslmr1h01vlIyVQkEgCVqPqp+yeYah9YCBAdpJd5613+gnIcEMAgkWKneO
S7OL7YPPjRdRJw==
-----END CERTIFICATE-----