Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
File:                     jixz-hcMOrnsQ00fKdPb3nkgv4g.mft (raw, json)
Hash identifier:          GN2EwwyOLcmJ9i+238u+X6isemB27QRdMb6yYBk+wNA=
Subject key identifier:   D5:5F:08:8C:61:02:1B:54:6B:70:86:12:22:D3:D7:61:A4:9A:41:3C
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Certificate issuer:       /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial:       01962E98C9F29EC1885206D8656D73B1E809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:27 +0000
Files and hashes:         1: YcUFbLW8Ja687zOtqcOEs1JkusI.roa (hash: jVuy+dZTj6fKKPTMd+qmk6LWIWDCVPbDfAfYyWjJE2U=)
                          2: jixz-hcMOrnsQ00fKdPb3nkgv4g.crl (hash: +oHILRgOGOWAvApP2Iy1tCx3hR2/jGPQpzHT6vebPFA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c9:f2:9e:c1:88:52:06:d8:65:6d:73:b1:e8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
        Validity
            Not Before: Apr 13 10:01:27 2025 GMT
            Not After : Apr 14 10:01:27 2025 GMT
        Subject: CN=d55f088c61021b546b70861222d3d761a49a413c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:b1:48:d1:ca:dc:86:3c:6e:18:49:1f:a3:
                    d5:6e:d1:ec:2d:fb:e9:66:a7:ec:93:05:a7:34:30:
                    b5:4d:75:08:0f:3c:39:62:3b:42:04:b4:16:c2:9b:
                    95:50:9e:e2:67:80:d1:27:a6:9f:29:cb:1a:39:ad:
                    04:98:55:81:4c:c9:95:4a:53:0b:96:df:18:54:f1:
                    b6:06:43:e6:e0:ad:df:1a:75:df:c8:f1:25:77:e9:
                    28:ae:4a:1e:7f:c7:46:68:8c:ca:30:69:88:fd:60:
                    2f:2a:ae:f2:ff:8d:95:1e:e5:19:d3:eb:20:ec:83:
                    7d:07:c4:39:ac:53:69:ef:63:dc:20:ec:8b:1d:36:
                    1f:cc:21:dc:82:da:9b:96:46:d7:eb:5d:f8:ca:76:
                    10:4d:26:f6:59:b3:80:98:76:77:03:17:db:0d:e1:
                    ee:3b:d1:05:c8:f3:ab:f9:3d:1b:1f:80:dd:f7:4c:
                    23:0e:97:34:ae:df:9e:a3:80:37:d2:cf:31:d1:cd:
                    fe:59:b6:1c:d2:53:0b:19:9a:9a:98:7a:54:c2:66:
                    22:ad:df:70:a8:ad:55:59:2c:21:1a:61:39:50:c4:
                    15:b8:71:40:c6:03:9f:b7:bb:08:a5:59:ae:64:9d:
                    fa:91:b7:ae:c1:d4:81:33:6b:df:8d:3e:ff:3a:96:
                    31:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5F:08:8C:61:02:1B:54:6B:70:86:12:22:D3:D7:61:A4:9A:41:3C
            X509v3 Authority Key Identifier:
                keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5f:75:11:44:49:8f:67:d0:bb:c7:01:da:78:2f:d1:a9:2c:
         80:42:a1:88:46:93:a0:56:e8:67:90:51:7b:b4:c8:e7:b4:71:
         6f:eb:dd:9a:71:1d:62:36:23:f7:84:fb:53:e3:4c:66:d9:a8:
         56:66:de:0d:8a:74:1a:c4:91:f8:cc:e2:37:8d:f5:82:a5:30:
         bf:b4:de:38:42:cc:b2:14:d8:b2:66:fd:44:90:f1:01:4b:a0:
         d1:7d:24:32:23:a4:9d:3e:c7:14:ab:c6:d7:50:50:86:5f:5e:
         ba:57:73:04:1d:ff:9a:c8:2f:32:6f:b0:14:5c:da:f1:54:d6:
         a6:11:9e:3a:01:d1:09:1b:fd:df:f8:68:e1:7c:8b:2d:8d:6b:
         16:08:09:47:63:2c:d0:19:c7:1a:51:1d:ce:8b:c0:74:9a:e0:
         e3:5b:01:d3:80:ad:a7:0a:3f:cd:88:f8:f7:52:1c:5b:f9:d0:
         30:b3:20:e1:c0:13:3a:d7:80:f9:1b:79:af:aa:80:88:1e:2c:
         94:23:f9:9a:26:9e:85:37:a3:46:0a:18:c2:9c:85:69:40:7a:
         9f:9d:0d:ca:d5:4d:ca:84:b4:70:1d:ac:77:fa:86:b6:bd:e8:
         0b:3a:56:7c:62:3f:97:99:50:0b:8a:f7:c4:da:3b:39:14:01:
         92:c6:84:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMnynsGIUgbYZW1zsegJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMmM3M2ZhMTcwYzNhYjllYzQzNGQxZjI5ZDNkYmRlNzky
MGJmODgwHhcNMjUwNDEzMTAwMTI3WhcNMjUwNDE0MTAwMTI3WjAzMTEwLwYDVQQD
EyhkNTVmMDg4YzYxMDIxYjU0NmI3MDg2MTIyMmQzZDc2MWE0OWE0MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1+xSNHK3IY8bhhJH6PVbtHsLfvp
ZqfskwWnNDC1TXUIDzw5YjtCBLQWwpuVUJ7iZ4DRJ6afKcsaOa0EmFWBTMmVSlML
lt8YVPG2BkPm4K3fGnXfyPEld+korkoef8dGaIzKMGmI/WAvKq7y/42VHuUZ0+sg
7IN9B8Q5rFNp72PcIOyLHTYfzCHcgtqblkbX6134ynYQTSb2WbOAmHZ3AxfbDeHu
O9EFyPOr+T0bH4Dd90wjDpc0rt+eo4A30s8x0c3+WbYc0lMLGZqamHpUwmYird9w
qK1VWSwhGmE5UMQVuHFAxgOft7sIpVmuZJ36kbeuwdSBM2vfjT7/OpYx1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVfCIxhAhtUa3CGEiLT12GkmkE8MB8GA1UdIwQY
MBaAFI4sc/oXDDq57ENNHynT2955IL+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMt
ZmVlMTJiZmQzYmQxLzEvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mMGMzMTctZTM5ZC00YmMxLWJmOGMtZmVlMTJiZmQzYmQx
LzEvaml4ei1oY01Pcm5zUTAwZktkUGIzbmtndjRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPl91EURJ
j2fQu8cB2ngv0aksgEKhiEaToFboZ5BRe7TI57Rxb+vdmnEdYjYj94T7U+NMZtmo
VmbeDYp0GsSR+MziN431gqUwv7TeOELMshTYsmb9RJDxAUug0X0kMiOknT7HFKvG
11BQhl9euldzBB3/msgvMm+wFFza8VTWphGeOgHRCRv93/ho4XyLLY1rFggJR2Ms
0BnHGlEdzovAdJrg41sB04Ctpwo/zYj491IcW/nQMLMg4cATOteA+Rt5r6qAiB4s
lCP5miaehTejRgoYwpyFaUB6n50NytVNyoS0cB2sd/qGtr3oCzpWfGI/l5lQC4r3
xNo7ORQBksaEOg==
-----END CERTIFICATE-----