Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File:                     jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier:          MQF8R4vOA48Yf9mUB+W05C3q1j1sC86h99nceTz0KrY=
Subject key identifier:   B7:A9:0C:42:C4:8F:71:A3:5B:BD:9F:23:B1:88:50:CC:76:30:15:E4
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer:       /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial:       01962F068D8A4FCE13C3CEAB83E9CE311C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number:          11F9
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=)
                          2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=)
                          3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: h7sBrpB3/3nnq8QY75M86zd2n+6yaLf0iEXNrQr7xkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8d:8a:4f:ce:13:c3:ce:ab:83:e9:ce:31:1c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=b7a90c42c48f71a35bbd9f23b18850cc763015e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:06:e2:8e:c6:31:34:f2:e7:b7:36:a4:47:
                    1f:f5:5e:d1:cf:1a:46:16:19:43:63:f2:d3:67:0e:
                    bb:4d:56:09:7f:0e:e2:ef:33:4e:37:2a:db:e7:c3:
                    34:6d:30:7e:73:1b:61:5d:88:22:21:c9:b7:12:62:
                    67:f0:41:70:e2:ef:b8:69:bc:04:1a:6b:c1:dc:4d:
                    e4:65:ae:4b:91:91:2a:8f:11:79:56:2a:92:52:39:
                    cd:60:2c:b1:bf:c3:ba:c6:a0:26:22:28:da:18:19:
                    d0:f0:2f:11:00:89:d2:81:59:68:40:56:42:5f:df:
                    4e:0a:2d:3f:d3:72:18:04:8e:14:c7:5c:d5:a6:6a:
                    1f:67:4d:f7:f7:56:4b:96:5d:35:a8:a8:51:14:54:
                    a7:4d:db:f6:73:a3:f1:03:1b:29:e1:9e:48:31:96:
                    d6:7d:2b:7e:e2:69:1f:ca:7a:6d:09:7a:23:eb:cd:
                    5a:87:8b:f7:73:eb:0d:19:09:d6:bd:3f:f7:a1:3d:
                    f5:d9:a9:23:0a:2c:b8:ee:d0:10:72:01:db:96:9a:
                    ad:bd:85:f5:72:62:dc:db:9d:43:11:43:7f:45:13:
                    44:6d:51:4a:e4:43:91:9c:9a:32:0f:06:e0:68:f7:
                    05:7f:e1:88:1b:60:d6:48:56:c6:cf:2d:3c:c8:a5:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A9:0C:42:C4:8F:71:A3:5B:BD:9F:23:B1:88:50:CC:76:30:15:E4
            X509v3 Authority Key Identifier:
                keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3a:9f:48:11:2f:7e:7c:f0:2c:3c:b3:71:18:c2:9b:95:d8:
         9e:cf:4d:cf:a2:ae:83:98:fb:b0:96:ab:53:db:e4:fa:4b:12:
         43:08:d4:62:1c:2c:84:64:d2:47:59:ae:34:ab:b3:e2:6c:56:
         f5:e4:53:b0:62:28:7e:23:73:48:b3:2d:56:8e:8f:86:e8:a2:
         d7:c0:a2:9c:61:d5:c2:25:9b:32:68:07:96:90:40:47:fa:ef:
         b5:25:61:21:4d:88:b1:69:d6:2e:5b:9b:54:4e:86:3a:9d:f8:
         79:ff:b1:86:c0:6d:bf:12:1b:61:df:b7:29:35:9c:21:5e:24:
         3a:0c:37:b4:bd:2f:d5:ea:d8:b7:66:fc:55:f9:d8:ef:f0:49:
         0e:60:f7:f4:c9:1b:90:ec:cf:ff:67:e6:13:db:4c:e8:bb:a1:
         4e:99:61:a4:56:e4:71:5d:7c:8e:13:1e:2f:b8:44:37:0e:5e:
         7a:f7:7b:0d:53:da:53:ed:c9:7e:4e:48:b4:c9:ab:7f:4a:c1:
         a6:e1:bb:4a:7a:ec:60:4c:d6:c3:c4:b3:74:5d:fd:6a:34:70:
         fd:4c:8b:b7:db:27:a8:1d:f8:db:2c:38:02:de:49:ab:8e:1f:
         3b:cb:57:9a:55:ce:f5:b7:99:13:3b:7c:d2:e7:df:62:bd:2e:
         c8:a4:85:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBo2KT84Tw86rg+nOMRxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3
MDBjN2MwHhcNMjUwNDEzMTIwMTIwWhcNMjUwNDE0MTIwMTIwWjAzMTEwLwYDVQQD
EyhiN2E5MGM0MmM0OGY3MWEzNWJiZDlmMjNiMTg4NTBjYzc2MzAxNWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr30G4o7GMTTy57c2pEcf9V7RzxpG
FhlDY/LTZw67TVYJfw7i7zNONyrb58M0bTB+cxthXYgiIcm3EmJn8EFw4u+4abwE
GmvB3E3kZa5LkZEqjxF5ViqSUjnNYCyxv8O6xqAmIijaGBnQ8C8RAInSgVloQFZC
X99OCi0/03IYBI4Ux1zVpmofZ03391ZLll01qKhRFFSnTdv2c6PxAxsp4Z5IMZbW
fSt+4mkfynptCXoj681ah4v3c+sNGQnWvT/3oT312akjCiy47tAQcgHblpqtvYX1
cmLc251DEUN/RRNEbVFK5EORnJoyDwbgaPcFf+GIG2DWSFbGzy08yKVbWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLepDELEj3GjW72fI7GIUMx2MBXkMB8GA1UdIwQY
MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt
ZDg3YjcwMjZhM2ZmLzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm
LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozqfSBEv
fnzwLDyzcRjCm5XYns9Nz6Kug5j7sJarU9vk+ksSQwjUYhwshGTSR1muNKuz4mxW
9eRTsGIofiNzSLMtVo6Phuii18CinGHVwiWbMmgHlpBAR/rvtSVhIU2IsWnWLlub
VE6GOp34ef+xhsBtvxIbYd+3KTWcIV4kOgw3tL0v1erYt2b8VfnY7/BJDmD39Mkb
kOzP/2fmE9tM6LuhTplhpFbkcV18jhMeL7hENw5eevd7DVPaU+3Jfk5ItMmrf0rB
puG7SnrsYEzWw8SzdF39ajRw/UyLt9snqB342yw4At5Jq44fO8tXmlXO9beZEzt8
0uffYr0uyKSFaQ==
-----END CERTIFICATE-----