Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          3GMS1p55KtmfNgCOXUtEP0VCbo0uCaS2g9eR213t/p4=
Subject key identifier:   F2:B1:D2:04:E3:7B:D0:47:F4:FE:C9:EA:24:31:13:57:B5:A0:DE:91
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       01962E988404BA8C2FFB1960DAD5B692EEBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          01CD
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: Eja8uROuzIbK3iaci49r3-WhTxE.roa (hash: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: 1DW+Lj/qWjayQHuiy//7XCRaAxelfeQirUofur4Nsgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:84:04:ba:8c:2f:fb:19:60:da:d5:b6:92:ee:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=f2b1d204e37bd047f4fec9ea24311357b5a0de91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:3b:64:12:a0:22:ec:31:dd:98:67:b1:f4:
                    16:60:9a:44:11:3f:dd:72:3f:9f:17:b2:41:9a:85:
                    fa:4a:cf:e6:67:96:8b:7c:79:e6:45:5c:b3:cf:3e:
                    a2:84:a4:01:54:e9:cf:ec:83:ef:cc:f7:77:4e:dc:
                    10:6e:f7:60:bf:bd:b0:d0:3d:77:d5:eb:33:8a:1e:
                    11:a0:ec:2e:30:6a:69:32:3f:20:2e:5d:60:3b:bc:
                    77:55:9e:b9:52:ef:fe:04:36:3c:ee:70:2a:98:91:
                    91:80:45:03:30:4a:66:7f:a3:54:7a:da:6e:1a:e6:
                    43:7b:98:b7:fe:db:83:c8:6d:00:37:87:13:1d:d5:
                    d4:71:4c:5e:d8:3f:82:83:cb:f7:6f:f6:f7:08:3b:
                    85:ac:75:28:9c:dc:8c:f7:11:45:b8:c7:93:5b:76:
                    b3:5b:40:31:62:c3:53:6b:6f:f6:26:15:ef:9b:84:
                    17:2a:b7:3e:f4:6f:fd:d7:ce:99:d8:73:ba:d5:b7:
                    b4:d8:33:00:42:d3:de:ec:cc:56:e0:cb:0c:93:a5:
                    15:ce:71:da:3a:1b:8e:44:66:60:51:c4:75:dc:08:
                    2c:f5:f9:75:6a:89:64:68:c7:f7:32:ba:b6:32:a4:
                    6e:b4:ea:ff:aa:e8:ea:0c:26:d7:00:be:f6:3d:fe:
                    81:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B1:D2:04:E3:7B:D0:47:F4:FE:C9:EA:24:31:13:57:B5:A0:DE:91
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:67:8b:3f:cf:5f:85:97:84:e3:17:94:12:f0:a2:7b:17:bb:
         2a:72:75:a5:c0:89:7e:e5:17:69:6d:92:2b:3c:2a:c1:82:20:
         6f:d0:9d:eb:a4:ae:fd:d6:f8:de:09:c6:e1:83:87:ae:c2:9a:
         3d:a8:28:8f:63:f9:61:c2:52:ac:c3:fd:d4:55:9d:ec:07:95:
         e8:88:37:59:6a:94:fa:ab:22:b7:d5:a0:85:60:34:bb:0e:e1:
         f0:e1:5b:4c:5e:99:bf:31:a7:bc:26:03:f3:0b:9f:e4:cc:e7:
         8a:5a:c7:ed:8e:67:6a:cc:18:87:f4:a0:a8:9e:10:91:8b:a0:
         06:9b:99:23:35:c2:07:2c:48:12:d3:a7:40:df:6d:e4:b1:01:
         6e:34:e4:b9:f5:6d:c9:e4:d7:d4:a2:a0:a3:73:67:cc:bb:62:
         4d:41:92:7b:8c:ea:6d:fb:28:80:02:3d:15:9d:a4:34:68:17:
         64:79:92:26:e3:b5:9c:fa:dd:53:20:6a:24:6a:ed:38:54:a5:
         80:22:5b:0d:ce:af:c0:6b:b9:6f:75:46:31:47:1b:6c:f0:12:
         da:3a:a8:7e:9b:64:ab:65:c5:a0:a9:e5:17:07:b4:58:92:a3:
         64:cc:ed:94:20:1f:03:2b:3b:62:52:ee:bf:70:e9:78:26:05:
         0f:25:ba:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumIQEuowv+xlg2tW2ku66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjdjMDljMWEzZjczZWJlNjE3NDBhYjY1ZTU4OWY5MTY1
NWJkZWQwHhcNMjUwNDEzMTAwMTA5WhcNMjUwNDE0MTAwMTA5WjAzMTEwLwYDVQQD
EyhmMmIxZDIwNGUzN2JkMDQ3ZjRmZWM5ZWEyNDMxMTM1N2I1YTBkZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuco7ZBKgIuwx3ZhnsfQWYJpEET/d
cj+fF7JBmoX6Ss/mZ5aLfHnmRVyzzz6ihKQBVOnP7IPvzPd3TtwQbvdgv72w0D13
1eszih4RoOwuMGppMj8gLl1gO7x3VZ65Uu/+BDY87nAqmJGRgEUDMEpmf6NUetpu
GuZDe5i3/tuDyG0AN4cTHdXUcUxe2D+Cg8v3b/b3CDuFrHUonNyM9xFFuMeTW3az
W0AxYsNTa2/2JhXvm4QXKrc+9G/9186Z2HO61be02DMAQtPe7MxW4MsMk6UVznHa
OhuORGZgUcR13Ags9fl1aolkaMf3Mrq2MqRutOr/qujqDCbXAL72Pf6BrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKx0gTje9BH9P7J6iQxE1e1oN6RMB8GA1UdIwQY
MBaAFI73wJwaP3Pr5hdAq2XlifkWVb3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84YzZkODgtNTJjMy00N2U2LTgwMDkt
ZjYyYmU5ZThhNjcxLzEvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84YzZkODgtNTJjMy00N2U2LTgwMDktZjYyYmU5ZThhNjcx
LzEvanZmQW5Cb19jLXZtRjBDclplV0otUlpWdmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGeLP89f
hZeE4xeUEvCiexe7KnJ1pcCJfuUXaW2SKzwqwYIgb9Cd66Su/db43gnG4YOHrsKa
Pagoj2P5YcJSrMP91FWd7AeV6Ig3WWqU+qsit9WghWA0uw7h8OFbTF6ZvzGnvCYD
8wuf5MznilrH7Y5naswYh/SgqJ4QkYugBpuZIzXCByxIEtOnQN9t5LEBbjTkufVt
yeTX1KKgo3NnzLtiTUGSe4zqbfsogAI9FZ2kNGgXZHmSJuO1nPrdUyBqJGrtOFSl
gCJbDc6vwGu5b3VGMUcbbPAS2jqofptkq2XFoKnlFwe0WJKjZMztlCAfAys7YlLu
v3DpeCYFDyW6nQ==
-----END CERTIFICATE-----