Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File:                     jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier:          vDaodmsB9mUkeR5F5zuxpDvcsfgy0jqaBUPc/ZDkAaE=
Subject key identifier:   2D:06:F9:CF:0A:E8:01:DF:83:7D:1A:72:32:D4:E8:A4:DB:5C:FB:CF
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer:       /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial:       01962F066ACF9D5ADF0F64C200C3B184F2DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number:          05D4
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: 1JbOtzxYDWM2qenUOTdlSY3fd5Q.roa (hash: 29iS50bByv5wLzXr4K0Csf8RD3fhTCBvX8TAVNzMbwo=)
                          2: GF6qwIhn7BKx8zVT1r1ZzDDltcs.roa (hash: oGf8wMfqUF8JdbLvtQMA0kJ00Y8rIVvgSBkLwNEB5B4=)
                          3: QN0VQCuu6Ab4ghDCzRAtiDK4bpU.roa (hash: fQG7ZPM5zlZX7+zBrxZiv3xKwkw7FH8PXLjSY5ZQtDI=)
                          4: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: +WnMQBfB19N204z5aQNeT+4+ZSXPtXqG2N8/3PG09S4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6a:cf:9d:5a:df:0f:64:c2:00:c3:b1:84:f2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=2d06f9cf0ae801df837d1a7232d4e8a4db5cfbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:1f:95:92:7e:94:38:84:57:af:f0:d0:0c:
                    e2:01:92:5c:c3:91:4d:9c:bc:a4:c2:fb:18:0f:dc:
                    8a:dc:81:7b:3c:e1:bc:07:99:a0:c4:17:14:bc:39:
                    91:d4:e8:06:d9:42:5e:9a:02:f1:3c:ac:c4:7b:c2:
                    08:3b:86:42:a4:b9:91:6d:53:c9:ab:ec:f8:42:de:
                    3c:a3:0e:18:93:a2:c5:df:b9:52:87:bf:48:d3:91:
                    c8:38:98:43:50:38:d7:3b:ad:2e:4b:16:cb:10:7e:
                    66:6f:63:6e:da:60:c1:23:c6:9d:8f:6e:1f:39:0c:
                    72:33:3b:50:e0:76:41:a5:ed:b8:c3:d3:a2:02:7c:
                    61:fe:06:28:da:e8:cf:20:53:b7:23:75:f0:0d:34:
                    a4:55:73:ad:69:04:df:4f:c1:7a:7b:53:c1:a9:4a:
                    e8:c4:5a:92:86:36:66:73:18:67:87:dd:ea:01:d2:
                    b0:f5:30:08:36:79:bb:80:68:f4:be:18:31:5d:8b:
                    00:23:cb:c5:41:4c:d0:72:9d:b4:ef:35:e1:88:f3:
                    64:96:fd:03:05:3a:db:ee:1b:c2:58:de:98:f9:81:
                    93:7d:3e:99:15:df:26:5f:8e:2f:1b:d9:c0:a8:b6:
                    c0:5a:68:21:48:45:6c:43:d6:c4:43:20:03:67:05:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:F9:CF:0A:E8:01:DF:83:7D:1A:72:32:D4:E8:A4:DB:5C:FB:CF
            X509v3 Authority Key Identifier:
                keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:e1:6f:1e:94:d8:a8:2b:51:89:3f:6e:5d:6b:36:1c:02:
         97:40:89:b7:3b:b1:52:86:b8:79:05:b8:00:75:15:36:8d:6c:
         63:59:eb:37:39:35:a2:d5:21:9f:23:23:8b:df:52:7b:16:8b:
         bf:a8:99:0d:4a:81:8c:56:a2:bf:46:ec:2d:00:5e:e0:65:90:
         fc:0c:67:ad:dd:7b:fa:67:5a:58:9c:27:a7:7f:c1:e1:0f:a2:
         5c:30:f1:dc:98:35:8d:b9:f9:bb:69:0f:35:00:21:67:27:58:
         36:6e:24:4a:bc:a5:f8:16:bb:50:f9:50:8d:5d:62:0c:62:a0:
         e8:91:a0:8d:f9:3b:1b:2e:8f:45:6d:ef:30:39:2c:60:2e:d7:
         9e:9c:c0:7d:39:4f:f4:91:b0:e7:fb:e0:7a:b0:09:5a:01:47:
         50:b0:c3:4f:b5:a2:39:a9:7c:ce:47:1b:ab:39:c5:48:52:80:
         4f:21:ad:6d:96:65:46:bb:b1:55:19:14:70:f1:53:93:2c:46:
         f2:a1:2c:48:4b:27:b8:c8:29:5f:0f:6d:3e:b2:94:59:53:26:
         86:eb:cb:b7:f3:8a:84:98:af:67:e2:35:1e:0c:57:e4:8f:f0:
         94:9e:66:82:c5:60:bb:e4:27:77:41:77:ab:b9:63:04:5b:18:
         70:97:fa:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmrPnVrfD2TCAMOxhPLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi
Y2VkNWUwHhcNMjUwNDEzMTIwMTExWhcNMjUwNDE0MTIwMTExWjAzMTEwLwYDVQQD
EygyZDA2ZjljZjBhZTgwMWRmODM3ZDFhNzIzMmQ0ZThhNGRiNWNmYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIkflZJ+lDiEV6/w0AziAZJcw5FN
nLykwvsYD9yK3IF7POG8B5mgxBcUvDmR1OgG2UJemgLxPKzEe8IIO4ZCpLmRbVPJ
q+z4Qt48ow4Yk6LF37lSh79I05HIOJhDUDjXO60uSxbLEH5mb2Nu2mDBI8adj24f
OQxyMztQ4HZBpe24w9OiAnxh/gYo2ujPIFO3I3XwDTSkVXOtaQTfT8F6e1PBqUro
xFqShjZmcxhnh93qAdKw9TAINnm7gGj0vhgxXYsAI8vFQUzQcp207zXhiPNklv0D
BTrb7hvCWN6Y+YGTfT6ZFd8mX44vG9nAqLbAWmghSEVsQ9bEQyADZwWsCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0G+c8K6AHfg30acjLU6KTbXPvPMB8GA1UdIwQY
MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt
ZDYwNmQ5OTI1YWI3LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3
LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5/hbx6U
2KgrUYk/bl1rNhwCl0CJtzuxUoa4eQW4AHUVNo1sY1nrNzk1otUhnyMji99SexaL
v6iZDUqBjFaiv0bsLQBe4GWQ/Axnrd17+mdaWJwnp3/B4Q+iXDDx3Jg1jbn5u2kP
NQAhZydYNm4kSryl+Ba7UPlQjV1iDGKg6JGgjfk7Gy6PRW3vMDksYC7XnpzAfTlP
9JGw5/vgerAJWgFHULDDT7WiOal8zkcbqznFSFKATyGtbZZlRruxVRkUcPFTkyxG
8qEsSEsnuMgpXw9tPrKUWVMmhuvLt/OKhJivZ+I1HgxX5I/wlJ5mgsVgu+Qnd0F3
q7ljBFsYcJf6ZQ==
-----END CERTIFICATE-----