Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File:                     Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier:          6LpT3QkbsEkOBQUpE2ngV05cOx/6xo7WX8/d1+YIsoU=
Subject key identifier:   11:C5:11:16:F7:CB:71:B6:A9:64:C7:6D:27:85:6B:B4:36:E2:D2:72
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer:       /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial:       01962F06F9A3E570F178E14D1A26B9887466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number:          143C
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: AmvfkGu7qEAiopTFSQDUBsr2RDrHIK79NBf3+FuRG3o=)
                          2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f9:a3:e5:70:f1:78:e1:4d:1a:26:b9:88:74:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=11c51116f7cb71b6a964c76d27856bb436e2d272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a3:c4:49:0a:04:61:23:eb:17:1d:88:34:9b:
                    38:a6:ba:23:66:5c:35:e0:cd:96:fd:90:0e:82:d5:
                    f5:44:05:06:98:75:69:7c:52:1e:2a:10:57:c5:04:
                    58:01:46:8e:b7:b9:a9:f1:7f:39:47:1b:28:df:54:
                    12:e6:68:c5:19:4e:7d:4d:c4:ba:25:1b:86:d5:f5:
                    c7:11:82:f9:16:45:db:9e:69:2a:fa:60:b3:12:be:
                    b3:d4:bf:8d:4a:d8:ad:31:17:a9:6a:55:0b:5c:85:
                    05:2b:f5:30:1e:29:c2:1b:c9:58:47:53:be:ba:99:
                    af:4e:d8:82:16:eb:e0:e9:79:4c:04:5d:9d:2f:47:
                    15:29:05:20:e8:f8:83:dd:09:d5:5b:0a:2f:28:16:
                    02:fd:f6:42:db:22:21:60:89:7b:98:b4:32:56:3e:
                    59:4a:88:5f:fb:4d:e4:77:2e:ae:31:87:3d:1f:59:
                    ab:61:91:92:cd:b5:b9:9a:7a:29:5f:97:c8:2e:a4:
                    da:98:28:f4:85:3f:b8:12:38:ff:41:99:8a:a3:51:
                    c1:03:89:26:58:f4:4f:e8:9b:ef:87:32:a0:1e:b2:
                    f0:88:79:07:e9:fe:a3:ec:6c:91:d5:df:e6:9d:1a:
                    5e:8d:5c:9e:20:27:ff:99:2a:b9:56:0c:ff:68:e1:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C5:11:16:F7:CB:71:B6:A9:64:C7:6D:27:85:6B:B4:36:E2:D2:72
            X509v3 Authority Key Identifier:
                keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0d:68:cf:03:0d:b7:22:94:07:06:fc:d4:e0:f9:9d:a3:68:
         01:85:b2:c3:7a:8e:09:68:bd:09:33:65:52:71:b9:a9:02:22:
         f5:e1:83:9c:a8:8b:31:31:4e:4d:df:a1:cb:84:56:ce:8e:4b:
         c6:9e:c0:1c:36:32:34:54:5c:ba:75:50:04:34:7a:47:ea:54:
         25:4a:1e:9a:ce:3c:8d:2b:a4:84:38:0c:8e:42:16:3d:a8:09:
         b4:c1:26:61:f7:02:1d:f6:3d:27:51:ea:40:2a:2f:05:34:e6:
         55:fe:2c:a7:0c:cd:2a:26:38:a6:41:0d:c1:86:6f:03:49:a0:
         ff:bf:cd:61:a7:a9:8a:f9:48:6e:14:e0:a6:74:cc:ed:ed:60:
         44:5f:57:7f:aa:af:b2:9d:c7:c0:e7:fc:91:43:99:09:60:17:
         b0:ea:ee:c9:13:5e:53:e3:99:c5:6a:5c:35:75:8d:90:51:73:
         4f:c8:9a:a4:76:3c:aa:9f:ba:df:29:8f:77:e9:e3:25:ae:4c:
         0e:30:d4:ca:da:6d:9f:ad:d6:00:c1:d0:51:c9:ab:92:70:36:
         fe:ae:16:67:76:ff:b3:da:ca:1d:20:48:d2:1f:44:44:bc:37:
         72:83:11:67:5c:0e:ec:2f:3c:30:71:7e:1b:e5:74:90:91:ee:
         3c:79:f8:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBvmj5XDxeOFNGia5iHRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2N2Q5ZWNiOTk2NDgyNWQ0NGRkMjY2YmJkMzJhYTA4MDRi
YzEwZjcwHhcNMjUwNDEzMTIwMTQ4WhcNMjUwNDE0MTIwMTQ4WjAzMTEwLwYDVQQD
EygxMWM1MTExNmY3Y2I3MWI2YTk2NGM3NmQyNzg1NmJiNDM2ZTJkMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaPESQoEYSPrFx2INJs4projZlw1
4M2W/ZAOgtX1RAUGmHVpfFIeKhBXxQRYAUaOt7mp8X85Rxso31QS5mjFGU59TcS6
JRuG1fXHEYL5FkXbnmkq+mCzEr6z1L+NStitMRepalULXIUFK/UwHinCG8lYR1O+
upmvTtiCFuvg6XlMBF2dL0cVKQUg6PiD3QnVWwovKBYC/fZC2yIhYIl7mLQyVj5Z
Sohf+03kdy6uMYc9H1mrYZGSzbW5mnopX5fILqTamCj0hT+4Ejj/QZmKo1HBA4km
WPRP6JvvhzKgHrLwiHkH6f6j7GyR1d/mnRpejVyeICf/mSq5Vgz/aOEIDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHFERb3y3G2qWTHbSeFa7Q24tJyMB8GA1UdIwQY
MBaAFCZ9nsuZZIJdRN0ma70yqggEvBD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMt
MzkxYmNlNzFmZWExLzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMtMzkxYmNlNzFmZWEx
LzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFA1ozwMN
tyKUBwb81OD5naNoAYWyw3qOCWi9CTNlUnG5qQIi9eGDnKiLMTFOTd+hy4RWzo5L
xp7AHDYyNFRcunVQBDR6R+pUJUoems48jSukhDgMjkIWPagJtMEmYfcCHfY9J1Hq
QCovBTTmVf4spwzNKiY4pkENwYZvA0mg/7/NYaepivlIbhTgpnTM7e1gRF9Xf6qv
sp3HwOf8kUOZCWAXsOruyRNeU+OZxWpcNXWNkFFzT8iapHY8qp+63ymPd+njJa5M
DjDUytptn63WAMHQUcmrknA2/q4WZ3b/s9rKHSBI0h9ERLw3coMRZ1wO7C88MHF+
G+V0kJHuPHn4/Q==
-----END CERTIFICATE-----