Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
File:                     j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json)
Hash identifier:          MzVKp1e89Akf71ebfxCK0pmGoJXHaJQQJR+BZizq9qQ=
Subject key identifier:   83:10:A9:D6:2E:41:5C:CD:39:62:3B:43:97:62:7F:45:13:6B:AB:DA
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Certificate issuer:       /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial:       01962E2B0F65842AD192328D8201C91AE0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
Manifest number:          1301
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: hH1lu6qi54xeYgPUuzVlSLVdXOk.roa (hash: 9Lqd0U++MW4wXcTAm0AGtBobzDUdjZXw+rDwnRqe5sI=)
                          2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: i7PJf8oQBkaLXHC81O3GjqDHVSj/a8rnizE4pHbUlCA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0f:65:84:2a:d1:92:32:8d:82:01:c9:1a:e0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=8310a9d62e415ccd39623b4397627f45136babda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:73:58:5b:cd:35:fb:f9:c2:06:18:a4:07:
                    24:83:2f:54:ee:b2:b9:fb:2a:d6:9d:b1:7d:d8:29:
                    df:cc:19:a8:a4:12:60:b3:c0:81:82:d0:50:e9:65:
                    8a:b5:09:dc:91:27:94:5e:2c:9c:f0:4d:27:63:6f:
                    9d:8b:34:f2:c1:bb:70:e2:ce:db:00:97:0c:40:60:
                    cd:44:c6:22:98:bb:9f:3c:9e:2e:82:6b:46:23:95:
                    08:25:56:a0:9d:ee:e7:bb:37:4b:e5:90:a0:aa:a3:
                    c9:48:2a:8e:76:40:03:69:f6:57:5c:2e:17:96:09:
                    76:c7:4f:e6:2d:e9:26:ac:54:b0:b5:05:e2:51:8c:
                    e4:24:1a:50:62:14:90:d0:9c:6d:5d:28:05:a1:9f:
                    c1:5e:6e:ff:10:46:a6:20:d4:3b:a6:a2:ac:e9:36:
                    a3:3c:22:24:a3:98:d2:a8:31:e9:91:c9:b9:6e:f6:
                    7b:6b:c7:aa:c3:83:56:03:f0:97:c1:77:b0:b2:88:
                    16:56:5b:46:6f:0e:c0:a2:3c:9a:40:6e:de:ba:c5:
                    55:ef:f9:ea:5b:5d:26:5c:32:8c:a3:d8:93:7c:65:
                    1c:f5:f5:9a:6f:28:38:a5:45:31:89:de:c3:f6:4b:
                    59:4a:de:ae:fb:7f:93:64:e4:c8:26:86:e9:24:3c:
                    8d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:10:A9:D6:2E:41:5C:CD:39:62:3B:43:97:62:7F:45:13:6B:AB:DA
            X509v3 Authority Key Identifier:
                keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:2c:2e:7e:9e:8d:5f:6e:e6:14:80:bd:68:91:0f:38:7c:d4:
         07:ee:fb:11:39:b8:ec:da:14:2d:0d:a8:63:50:bf:52:c4:76:
         da:b7:c5:75:f7:b0:a4:50:75:ea:a7:74:08:a2:6a:46:9e:78:
         f3:5c:00:ea:16:71:e0:86:41:e2:9d:c3:14:bd:41:14:81:00:
         64:c8:d9:b2:cf:43:ed:31:17:ae:4e:63:ef:ed:54:4c:5f:98:
         6b:8e:73:d6:38:f9:2c:c1:0d:19:3b:54:5a:d6:2c:7e:11:21:
         eb:7e:55:e5:77:b1:4b:76:11:8b:58:2b:7f:b4:c9:a0:6a:a6:
         8b:c3:20:a6:1e:41:e5:84:d1:88:53:25:76:13:1c:38:1b:e1:
         6d:43:e7:99:a3:51:f9:c6:53:84:b1:46:18:d5:f4:d7:e4:99:
         b7:d9:09:e5:ab:a3:89:2b:43:75:d4:1e:60:38:de:75:4b:b3:
         0d:46:9c:b5:c7:2e:ab:10:31:b6:6f:24:11:c9:18:1b:bc:bb:
         5a:db:05:04:00:1e:cb:36:bb:aa:02:54:48:fa:36:fb:70:fe:
         35:fb:d0:5e:27:49:cb:31:20:41:72:93:f6:b9:a0:bd:dc:bd:
         38:3a:41:bf:f1:92:f2:f5:9c:4d:5b:e4:ca:7e:30:08:6e:af:
         e0:0f:1d:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKw9lhCrRkjKNggHJGuCqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZmRmYWViNWE5NGViMDI3ZWM4MzhhZjUzMGYzYzEwYjM5
YjFjZDkwHhcNMjUwNDEzMDgwMTM2WhcNMjUwNDE0MDgwMTM2WjAzMTEwLwYDVQQD
Eyg4MzEwYTlkNjJlNDE1Y2NkMzk2MjNiNDM5NzYyN2Y0NTEzNmJhYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouhzWFvNNfv5wgYYpAckgy9U7rK5
+yrWnbF92CnfzBmopBJgs8CBgtBQ6WWKtQnckSeUXiyc8E0nY2+dizTywbtw4s7b
AJcMQGDNRMYimLufPJ4ugmtGI5UIJVagne7nuzdL5ZCgqqPJSCqOdkADafZXXC4X
lgl2x0/mLekmrFSwtQXiUYzkJBpQYhSQ0JxtXSgFoZ/BXm7/EEamINQ7pqKs6Taj
PCIko5jSqDHpkcm5bvZ7a8eqw4NWA/CXwXewsogWVltGbw7AojyaQG7eusVV7/nq
W10mXDKMo9iTfGUc9fWabyg4pUUxid7D9ktZSt6u+3+TZOTIJobpJDyNgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMQqdYuQVzNOWI7Q5dif0UTa6vaMB8GA1UdIwQY
MBaAFI/9+utalOsCfsg4r1MPPBCzmxzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYt
NmZiNGJlZTk5ZTYzLzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hZGNmZjUtYjJiMS00OGRmLWI3NTYtNmZiNGJlZTk5ZTYz
LzEval8zNjYxcVU2d0oteURpdlV3ODhFTE9iSE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSwufp6N
X27mFIC9aJEPOHzUB+77ETm47NoULQ2oY1C/UsR22rfFdfewpFB16qd0CKJqRp54
81wA6hZx4IZB4p3DFL1BFIEAZMjZss9D7TEXrk5j7+1UTF+Ya45z1jj5LMENGTtU
WtYsfhEh635V5XexS3YRi1grf7TJoGqmi8Mgph5B5YTRiFMldhMcOBvhbUPnmaNR
+cZThLFGGNX01+SZt9kJ5aujiStDddQeYDjedUuzDUactccuqxAxtm8kEckYG7y7
WtsFBAAeyza7qgJUSPo2+3D+NfvQXidJyzEgQXKT9rmgvdy9ODpBv/GS8vWcTVvk
yn4wCG6v4A8dfQ==
-----END CERTIFICATE-----