Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File:                     jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier:          +hWUcLNtWG7BKlJjXzjE1e7gj0lrqE8rHSoN14044qI=
Subject key identifier:   5C:0B:A5:B4:EB:22:21:A2:FB:92:EC:FA:B6:28:82:54:1B:C3:80:1B
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer:       /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial:       01962ECFDC7F0213BA94447473BAF77FEC5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: AVv7KqsJQ7Zn0lKyZ4rdnlf-GJ4.roa (hash: NUdH+bGXaFI8uXmd6dLOR5WLJnhwd6mvan4jq3rAulE=)
                          2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: q7yScjormvJZHhXZA+BzCVyCmacZfFG+YWTcgrw1K6c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dc:7f:02:13:ba:94:44:74:73:ba:f7:7f:ec:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=5c0ba5b4eb2221a2fb92ecfab62882541bc3801b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:a7:a4:5a:05:0c:27:b1:5e:08:ef:57:51:
                    c2:fb:09:d4:62:ab:d4:b1:9c:b7:ea:06:a3:c1:da:
                    e0:8a:71:6f:e0:f9:38:23:1b:cb:ed:c2:9d:f4:a5:
                    14:33:e5:92:81:da:77:87:f0:68:53:89:4e:63:c5:
                    24:3c:da:61:0b:00:02:ff:dc:7c:d3:14:10:5b:47:
                    18:bb:13:8e:dd:84:bb:e0:b7:d1:f9:ad:27:93:b9:
                    68:52:6d:c4:24:4c:2e:9b:ce:80:46:c3:87:4a:73:
                    99:d8:e5:ce:d4:91:6d:04:e4:61:a2:0d:12:0c:e9:
                    5f:08:ae:6f:26:3a:80:c4:a1:10:d4:cf:ab:40:9c:
                    7b:fa:f9:7c:03:fe:d5:25:f2:1d:31:95:42:59:0a:
                    30:1a:fc:b1:47:65:53:e8:11:9c:e6:b4:49:3a:73:
                    28:36:83:ad:5b:9a:0b:8b:97:7c:78:1b:43:58:1d:
                    e5:37:d9:98:16:25:fd:55:7b:b6:27:5a:8f:96:10:
                    6d:da:9e:89:b0:83:c3:b9:dd:bd:3e:07:14:ef:e2:
                    c7:44:83:d8:dc:d2:4e:5b:eb:ba:df:7c:54:64:ef:
                    ed:2c:b1:90:3a:6e:fd:1a:83:bd:44:d4:9d:18:f1:
                    f7:fa:de:85:ec:09:4b:2a:9f:41:aa:2f:54:f6:c9:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0B:A5:B4:EB:22:21:A2:FB:92:EC:FA:B6:28:82:54:1B:C3:80:1B
            X509v3 Authority Key Identifier:
                keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a2:52:96:05:cf:02:f8:1e:31:71:f1:23:3d:10:00:3d:e5:
         71:2e:af:12:f5:bd:02:37:bd:01:9d:15:46:5f:ea:3f:ac:10:
         b1:1a:bf:1b:71:d2:f0:6f:39:1d:16:3f:1b:57:99:78:fc:3e:
         4a:37:4a:2a:e8:9f:50:fa:87:e0:5e:6e:52:c0:af:be:a1:80:
         37:3c:3f:5e:54:49:35:0c:e7:2e:50:16:91:fe:fd:16:30:e1:
         12:1a:d7:19:17:15:40:f3:98:9b:3b:ef:4c:fb:a5:1f:a3:ea:
         a9:04:27:d3:39:f7:6d:33:3b:d8:86:d7:4f:29:62:af:c0:a5:
         8c:02:a7:60:0b:17:b7:27:7f:40:6c:7e:85:d5:29:01:81:4e:
         67:69:bd:7c:99:4d:5f:71:b7:dc:85:57:b3:ad:13:ec:d3:0e:
         3f:ff:ed:ab:bd:40:97:df:73:80:67:ac:cd:8d:5b:0c:47:e1:
         ba:67:18:0e:32:e9:b2:1f:d4:d2:e7:a7:da:96:51:92:64:f0:
         63:14:fa:15:e4:7d:14:90:01:ea:9f:7d:a5:2e:31:4a:12:10:
         88:9a:c9:7e:ee:45:85:92:61:38:32:f7:ab:e9:21:19:84:a2:
         18:13:3c:f6:c9:10:ea:f1:bd:e0:41:d8:5d:81:8d:86:2f:e1:
         2c:6e:0d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9x/AhO6lER0c7r3f+xaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMjQwYzFiOTBmN2YwMjAwNTNmYTA5NTMzMGZmY2ZhZGVm
NTM5OWUwHhcNMjUwNDEzMTEwMTM2WhcNMjUwNDE0MTEwMTM2WjAzMTEwLwYDVQQD
Eyg1YzBiYTViNGViMjIyMWEyZmI5MmVjZmFiNjI4ODI1NDFiYzM4MDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2mnpFoFDCexXgjvV1HC+wnUYqvU
sZy36gajwdrginFv4Pk4IxvL7cKd9KUUM+WSgdp3h/BoU4lOY8UkPNphCwAC/9x8
0xQQW0cYuxOO3YS74LfR+a0nk7loUm3EJEwum86ARsOHSnOZ2OXO1JFtBORhog0S
DOlfCK5vJjqAxKEQ1M+rQJx7+vl8A/7VJfIdMZVCWQowGvyxR2VT6BGc5rRJOnMo
NoOtW5oLi5d8eBtDWB3lN9mYFiX9VXu2J1qPlhBt2p6JsIPDud29PgcU7+LHRIPY
3NJOW+u633xUZO/tLLGQOm79GoO9RNSdGPH3+t6F7AlLKp9Bqi9U9sn5uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwLpbTrIiGi+5Ls+rYoglQbw4AbMB8GA1UdIwQY
MBaAFIwkDBuQ9/AgBT+glTMP/Pre9TmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kN2MxNmEtOTMzMC00N2YwLTkxMmMt
ODdlMzYxODRjMGI1LzEvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9kN2MxNmEtOTMzMC00N2YwLTkxMmMtODdlMzYxODRjMGI1
LzEvakNRTUc1RDM4Q0FGUDZDVk13XzgtdDcxT1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6JSlgXP
AvgeMXHxIz0QAD3lcS6vEvW9Aje9AZ0VRl/qP6wQsRq/G3HS8G85HRY/G1eZePw+
SjdKKuifUPqH4F5uUsCvvqGANzw/XlRJNQznLlAWkf79FjDhEhrXGRcVQPOYmzvv
TPulH6PqqQQn0zn3bTM72IbXTylir8CljAKnYAsXtyd/QGx+hdUpAYFOZ2m9fJlN
X3G33IVXs60T7NMOP//tq71Al99zgGeszY1bDEfhumcYDjLpsh/U0uen2pZRkmTw
YxT6FeR9FJAB6p99pS4xShIQiJrJfu5FhZJhODL3q+khGYSiGBM89skQ6vG94EHY
XYGNhi/hLG4Npg==
-----END CERTIFICATE-----