Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
File:                     rsJF-gJbUVfIedsXr7ao_d4_j08.mft (raw, json)
Hash identifier:          4oeMnCZkYiZNF9fg1P+xGDH4KD5EJ03XUuSqo6jRMm4=
Subject key identifier:   BB:60:A8:D5:32:9E:F8:77:3F:94:71:BA:24:B4:D4:24:DF:91:95:45
Authority key identifier: AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F
Certificate issuer:       /CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
Certificate serial:       01962F0720EF8BBAAB37DC3BE17F8D4FE936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft
Manifest number:          0E66
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: rsJF-gJbUVfIedsXr7ao_d4_j08.crl (hash: e9v2a9cLngIOsaz48BU84IsgQW16U2lihK7bUyRGMJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:20:ef:8b:ba:ab:37:dc:3b:e1:7f:8d:4f:e9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec245fa025b5157c879db17afb6a8fdde3f8f4f
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=bb60a8d5329ef8773f9471ba24b4d424df919545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:ef:f3:51:de:5a:42:ea:1e:2d:a8:86:a0:
                    1a:22:c8:af:3e:6e:1e:68:94:13:8a:ba:92:f1:8b:
                    32:11:68:6e:18:0f:31:d7:1d:c8:cf:ac:21:21:c1:
                    45:67:97:3c:13:5d:40:e3:2b:9d:52:bf:35:33:36:
                    0d:74:d9:79:77:42:7a:8f:f9:8d:df:2b:09:bc:fe:
                    f2:65:37:ee:80:5d:9a:df:55:74:8e:8f:53:b9:36:
                    4b:f5:90:46:ce:00:1c:45:e5:6c:35:01:4b:2e:73:
                    55:6c:f0:a6:2f:92:b2:5b:bc:99:15:1c:a9:df:da:
                    1e:19:f5:46:62:37:3f:45:88:0b:33:ad:cb:79:99:
                    2a:e5:e2:28:2c:98:42:37:11:e5:35:f5:fa:49:88:
                    ad:34:bb:f8:86:26:69:23:6b:9d:e2:03:25:e9:ef:
                    c5:97:f3:d5:08:70:8f:92:d5:85:3b:eb:50:d3:bd:
                    40:c0:e0:ac:b0:11:f7:7b:e0:3d:55:8b:2d:8f:ca:
                    3d:e3:9b:5b:26:d6:72:20:39:89:40:39:8e:a7:29:
                    ee:1a:33:95:ab:ea:cc:a6:6c:8d:b6:6b:25:50:f0:
                    e9:5d:c8:24:eb:39:10:f9:07:73:cd:73:57:1d:7f:
                    b7:ea:f8:6b:fb:ea:83:68:21:d9:38:68:b1:02:b9:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:60:A8:D5:32:9E:F8:77:3F:94:71:BA:24:B4:D4:24:DF:91:95:45
            X509v3 Authority Key Identifier:
                keyid:AE:C2:45:FA:02:5B:51:57:C8:79:DB:17:AF:B6:A8:FD:DE:3F:8F:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsJF-gJbUVfIedsXr7ao_d4_j08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/01a06f-2c69-4395-8bdd-74e7c9567147/1/rsJF-gJbUVfIedsXr7ao_d4_j08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:37:fd:4d:57:02:47:6f:31:a9:cb:59:20:b5:65:32:6a:2c:
         5e:1f:2d:a6:68:19:03:3d:75:a1:54:04:32:09:2a:7a:72:cb:
         f3:cb:bf:74:b1:c8:a6:f7:74:70:61:d1:84:2e:34:05:28:0b:
         ca:5f:ee:6c:04:25:01:b0:23:b7:a4:86:c1:0c:db:fc:53:3b:
         50:9e:ed:45:6b:4c:9e:98:b6:2e:27:6a:01:09:99:cd:ba:8e:
         ad:a4:c0:34:5f:2d:c2:2d:44:bf:91:97:bd:b8:71:8c:7a:4b:
         69:d7:b3:1f:b4:87:8b:13:d0:77:f2:83:83:6b:09:dd:d5:34:
         e7:ef:47:36:05:46:49:f9:ba:a3:6a:ad:7d:54:7c:5e:fa:77:
         ae:da:2c:0a:45:c4:f3:ec:fb:f8:5e:99:db:a5:91:ee:2e:13:
         f1:4d:da:1a:b6:33:95:d8:dc:a5:56:2a:bf:bb:e2:18:00:f1:
         36:88:d4:f2:a6:d1:02:ed:e1:49:07:37:67:88:03:e0:4e:32:
         1c:15:a9:af:03:67:f2:4b:3c:a4:48:f7:02:04:cc:cd:0c:49:
         3d:c0:7d:3e:74:ed:82:93:6a:60:b0:0d:fa:d7:e9:b0:77:61:
         f2:a4:21:a3:8f:0d:fc:20:3d:04:ae:af:17:e8:47:88:03:80:
         6e:67:a5:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvByDvi7qrN9w74X+NT+k2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYzI0NWZhMDI1YjUxNTdjODc5ZGIxN2FmYjZhOGZkZGUz
ZjhmNGYwHhcNMjUwNDEzMTIwMTU4WhcNMjUwNDE0MTIwMTU4WjAzMTEwLwYDVQQD
EyhiYjYwYThkNTMyOWVmODc3M2Y5NDcxYmEyNGI0ZDQyNGRmOTE5NTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvizv81HeWkLqHi2ohqAaIsivPm4e
aJQTirqS8YsyEWhuGA8x1x3Iz6whIcFFZ5c8E11A4yudUr81MzYNdNl5d0J6j/mN
3ysJvP7yZTfugF2a31V0jo9TuTZL9ZBGzgAcReVsNQFLLnNVbPCmL5KyW7yZFRyp
39oeGfVGYjc/RYgLM63LeZkq5eIoLJhCNxHlNfX6SYitNLv4hiZpI2ud4gMl6e/F
l/PVCHCPktWFO+tQ071AwOCssBH3e+A9VYstj8o945tbJtZyIDmJQDmOpynuGjOV
q+rMpmyNtmslUPDpXcgk6zkQ+QdzzXNXHX+36vhr++qDaCHZOGixArkN6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtgqNUynvh3P5RxuiS01CTfkZVFMB8GA1UdIwQY
MBaAFK7CRfoCW1FXyHnbF6+2qP3eP49PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNKRi1nSmJVVmZJZWRzWHI3YW9fZDRfajA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wMWEwNmYtMmM2OS00Mzk1LThiZGQt
NzRlN2M5NTY3MTQ3LzEvcnNKRi1nSmJVVmZJZWRzWHI3YW9fZDRfajA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wMWEwNmYtMmM2OS00Mzk1LThiZGQtNzRlN2M5NTY3MTQ3
LzEvcnNKRi1nSmJVVmZJZWRzWHI3YW9fZDRfajA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDf9TVcC
R28xqctZILVlMmosXh8tpmgZAz11oVQEMgkqenLL88u/dLHIpvd0cGHRhC40BSgL
yl/ubAQlAbAjt6SGwQzb/FM7UJ7tRWtMnpi2LidqAQmZzbqOraTANF8twi1Ev5GX
vbhxjHpLadezH7SHixPQd/KDg2sJ3dU05+9HNgVGSfm6o2qtfVR8Xvp3rtosCkXE
8+z7+F6Z26WR7i4T8U3aGrYzldjcpVYqv7viGADxNojU8qbRAu3hSQc3Z4gD4E4y
HBWprwNn8ks8pEj3AgTMzQxJPcB9PnTtgpNqYLAN+tfpsHdh8qQho48N/CA9BK6v
F+hHiAOAbmel0w==
-----END CERTIFICATE-----