Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File:                     j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier:          CtjqadVevkWl4YoE7RPOOPSEZE1dG7Zwpqd0lrJQYKY=
Subject key identifier:   AA:E9:B9:70:DE:3A:9A:2E:4E:72:FB:2D:AB:5F:21:69:D7:7E:76:B0
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer:       /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial:       0195E0EB44FD5706A2F6062D32034D80D44A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number:          0939
Signing time:             Sat 29 Mar 2025 08:01:09 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:09 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:09 +0000
Files and hashes:         1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: +dCQnmzrtAGtUi2H70f/U7OIGcxz756hwckojVwfPpY=)
                          2: v0kVKV7zgFySWfJ-lGmi8aljQUA.roa (hash: QFeJpmHiChV7sVzkjOtXP/zd/9P3djdIsqxjZcryjik=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:44:fd:57:06:a2:f6:06:2d:32:03:4d:80:d4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
        Validity
            Not Before: Mar 29 08:01:09 2025 GMT
            Not After : Mar 30 08:01:09 2025 GMT
        Subject: CN=aae9b970de3a9a2e4e72fb2dab5f2169d77e76b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:de:1f:ea:9d:9e:73:00:5a:9b:cf:d5:db:
                    49:44:6a:57:4b:50:fc:55:47:74:09:60:e4:a7:86:
                    07:89:d4:49:b4:78:f3:22:c6:f5:7d:b9:0e:3e:9e:
                    ff:57:05:34:a7:f6:f4:9c:41:13:39:7d:12:89:ec:
                    f6:93:1e:32:64:e2:14:3f:20:0e:63:5a:83:b0:ec:
                    1c:86:8e:5b:4f:a1:6f:b8:8f:fc:10:d9:1f:47:bd:
                    6e:c7:e1:f9:66:1a:4d:53:e7:c4:f2:5e:6b:dd:db:
                    f3:ae:8e:d7:9d:bb:2f:2a:20:af:07:15:cc:cd:bc:
                    bd:88:b4:54:12:fd:50:64:7d:4b:a5:46:a5:c1:44:
                    88:62:f1:d3:96:24:7e:8a:06:59:01:6b:7e:16:21:
                    81:4e:de:a2:a8:27:c9:63:96:8e:d3:1a:c8:26:55:
                    a7:7b:2a:3c:5f:e4:79:e6:84:fd:d7:ba:cb:b2:4e:
                    f9:e9:26:89:9a:e2:55:49:38:35:cc:fc:73:4d:9e:
                    3f:e2:ba:5d:9c:92:bb:82:c3:88:ef:f0:5f:bc:0c:
                    11:50:ee:28:4c:ea:1c:62:a5:f5:a3:54:07:88:42:
                    bf:fa:79:c5:32:d3:fd:53:6f:06:1b:17:21:26:65:
                    b1:22:a9:d4:6d:31:ee:36:db:ac:1a:e4:79:bc:fd:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E9:B9:70:DE:3A:9A:2E:4E:72:FB:2D:AB:5F:21:69:D7:7E:76:B0
            X509v3 Authority Key Identifier:
                keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:fe:38:bf:ae:89:18:f9:4b:24:05:fb:ae:31:06:a9:d4:ac:
         a7:4b:63:f0:1c:3c:c5:4e:a0:47:e6:77:f5:26:53:c6:6e:47:
         fe:d4:23:db:7d:51:2d:64:3b:2a:2a:f4:89:df:2c:84:ef:30:
         81:f9:73:3d:41:07:3b:97:2d:4c:8e:1a:63:1c:7b:ad:0f:fa:
         84:7a:ed:2f:72:5d:12:cf:1a:8b:94:58:68:c2:be:68:50:52:
         20:77:cf:11:22:4b:b8:0f:7d:06:f9:a5:6d:60:8a:ac:2d:54:
         87:a6:22:47:8d:01:eb:66:05:8f:eb:b1:67:3b:6b:e3:f7:da:
         17:96:9a:4f:41:4d:0c:e3:78:0f:e9:49:0c:75:91:55:a3:d5:
         2c:ce:f4:5d:b1:24:0e:9b:7a:1a:ea:3f:45:2d:7c:7b:ae:86:
         03:fb:e4:53:89:ee:e6:94:9f:5b:b1:dd:13:37:99:d0:aa:a7:
         2e:75:2d:ae:c7:f4:c1:c5:a3:bc:26:9f:50:ed:a8:68:13:7e:
         82:8e:27:75:4d:2b:c0:f5:a0:b4:d1:ca:cc:b9:27:90:cd:63:
         ec:ad:f9:e8:06:65:29:26:cc:65:4c:d7:ab:af:1c:6e:ea:ab:
         57:78:00:cc:b0:ee:f8:8c:d7:01:a8:99:43:b6:ac:b9:32:34:
         c1:08:00:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg60T9Vwai9gYtMgNNgNRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNTRmYzgxZTUxNTMzODZjYjQyYzE3MzMzMDUwZGE4MzFh
ZGE5ZTUwHhcNMjUwMzI5MDgwMTA5WhcNMjUwMzMwMDgwMTA5WjAzMTEwLwYDVQQD
EyhhYWU5Yjk3MGRlM2E5YTJlNGU3MmZiMmRhYjVmMjE2OWQ3N2U3NmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+zeH+qdnnMAWpvP1dtJRGpXS1D8
VUd0CWDkp4YHidRJtHjzIsb1fbkOPp7/VwU0p/b0nEETOX0Siez2kx4yZOIUPyAO
Y1qDsOwcho5bT6FvuI/8ENkfR71ux+H5ZhpNU+fE8l5r3dvzro7XnbsvKiCvBxXM
zby9iLRUEv1QZH1LpUalwUSIYvHTliR+igZZAWt+FiGBTt6iqCfJY5aO0xrIJlWn
eyo8X+R55oT917rLsk756SaJmuJVSTg1zPxzTZ4/4rpdnJK7gsOI7/BfvAwRUO4o
TOocYqX1o1QHiEK/+nnFMtP9U28GGxchJmWxIqnUbTHuNtusGuR5vP2GMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrpuXDeOpouTnL7LatfIWnXfnawMB8GA1UdIwQY
MBaAFI9U/IHlFTOGy0LBczMFDagxranlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQt
NDU3OTQ5MjRjYjUzLzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQtNDU3OTQ5MjRjYjUz
LzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAff44v66J
GPlLJAX7rjEGqdSsp0tj8Bw8xU6gR+Z39SZTxm5H/tQj231RLWQ7Kir0id8shO8w
gflzPUEHO5ctTI4aYxx7rQ/6hHrtL3JdEs8ai5RYaMK+aFBSIHfPESJLuA99Bvml
bWCKrC1Uh6YiR40B62YFj+uxZztr4/faF5aaT0FNDON4D+lJDHWRVaPVLM70XbEk
Dpt6Guo/RS18e66GA/vkU4nu5pSfW7HdEzeZ0KqnLnUtrsf0wcWjvCafUO2oaBN+
go4ndU0rwPWgtNHKzLknkM1j7K356AZlKSbMZUzXq68cbuqrV3gAzLDu+IzXAaiZ
Q7asuTI0wQgA3w==
-----END CERTIFICATE-----