Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
File:                     Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft (raw, json)
Hash identifier:          aMhAvmPO+6rHGuc8Km7rLJVB5SKBUEkUrOV1g4VYeZk=
Subject key identifier:   87:E9:39:57:E6:5A:F4:74:9F:90:AA:8D:82:A5:A2:C0:EC:CE:7A:B4
Authority key identifier: 3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
Certificate issuer:       /CN=3aa9e9832ed25de78c3ce0501208261066281f51
Certificate serial:       01962F06705FEEC00A772F0B5B0ABC8E7A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
Manifest number:          0F32
Signing time:             Sun 13 Apr 2025 12:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:13 +0000
Files and hashes:         1: Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl (hash: qIvkZ3GD1x8DvHoOjPdPCIBKINZ32vLE0fGW6tJaZKE=)
                          2: aWYIXcaJkiVxLLibbCxl3jRBEqg.roa (hash: is1rfoaga6D1caCReE6B6u2V3E2PMjX4LQvHyaYSnhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:70:5f:ee:c0:0a:77:2f:0b:5b:0a:bc:8e:7a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aa9e9832ed25de78c3ce0501208261066281f51
        Validity
            Not Before: Apr 13 12:01:13 2025 GMT
            Not After : Apr 14 12:01:13 2025 GMT
        Subject: CN=87e93957e65af4749f90aa8d82a5a2c0ecce7ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:24:07:59:dd:6a:83:68:3a:1d:7b:bc:8a:
                    a6:4b:43:e3:61:59:0e:7f:2a:ea:fa:e8:51:fb:9b:
                    bf:c3:00:24:8d:f6:9c:c2:ef:0a:ac:00:35:6f:78:
                    08:bd:f5:57:f7:1c:7d:f0:42:8d:df:5c:5c:ce:e7:
                    49:75:ea:77:34:13:0f:e2:1c:d0:88:59:d3:55:eb:
                    90:64:7d:ae:28:68:c4:ff:e9:14:54:c8:6f:37:f9:
                    5c:e5:61:9d:14:40:da:5e:da:3e:7f:b0:44:91:4d:
                    f7:19:27:f9:ba:3e:82:62:c5:f0:a4:88:b0:95:ad:
                    b8:0e:f3:0c:de:de:7b:88:fd:45:cc:ca:69:c8:b7:
                    48:c1:fc:42:01:8b:dc:70:59:eb:40:f6:c3:71:90:
                    cd:08:e3:79:e9:40:f5:7a:af:a1:a5:a9:62:4b:42:
                    8e:5e:7a:14:5c:95:e1:97:2e:a7:ad:f0:48:2e:44:
                    9d:9a:1e:58:83:aa:e6:75:1e:01:81:9a:86:5c:ed:
                    97:38:94:1c:a3:30:3d:dd:47:08:14:17:e7:85:3e:
                    3f:cd:4d:78:b3:e9:e4:5c:2a:3d:ea:2c:4a:dc:e4:
                    bc:4b:20:00:4a:a6:7d:14:9e:ce:ad:6a:f6:93:76:
                    b0:4d:6e:70:07:d2:12:60:62:2e:7a:c8:60:a1:3d:
                    0d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E9:39:57:E6:5A:F4:74:9F:90:AA:8D:82:A5:A2:C0:EC:CE:7A:B4
            X509v3 Authority Key Identifier:
                keyid:3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:00:23:73:ea:86:2e:a2:0d:42:55:3d:ca:fe:f4:f2:46:db:
         10:53:27:e1:ff:b1:85:a0:40:d9:11:e2:19:80:a3:0a:d8:e8:
         11:ce:9c:8c:f7:a9:eb:b3:1a:5e:c3:9c:0a:19:a9:f7:02:3f:
         e8:a7:86:37:93:fa:76:da:e8:4f:c8:80:35:3b:3e:98:eb:1d:
         9d:42:cb:4f:51:9f:7a:f8:ea:cc:47:c9:7f:bb:c2:84:d8:ec:
         95:f6:74:7c:62:7b:3b:16:2d:d6:46:43:54:1c:19:29:90:6c:
         5b:99:8b:c0:f9:9f:bc:cf:d2:0d:4d:60:64:6f:74:94:81:96:
         db:98:6d:16:7c:e2:f7:69:97:ce:40:96:d7:68:e9:6e:6a:19:
         a7:c2:5e:e4:4e:d8:16:03:07:3c:30:e1:0b:1f:33:ce:ca:5f:
         ab:1f:ad:24:c7:a1:a2:35:52:1a:bb:4a:fb:80:96:0a:ac:05:
         37:33:ed:3b:f9:65:f1:5b:ea:d9:5b:ce:e9:a9:e2:63:d7:ff:
         2d:be:c5:9c:1c:31:6e:e2:57:41:1a:31:a2:ca:08:e0:8b:c2:
         af:bb:5f:a5:b8:b4:9d:63:ce:01:84:7a:41:44:82:d2:5b:34:
         df:dc:18:3c:51:8f:65:e8:0d:2f:0d:df:71:76:44:4e:2e:27:
         7d:79:b8:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnBf7sAKdy8LWwq8jnouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYTllOTgzMmVkMjVkZTc4YzNjZTA1MDEyMDgyNjEwNjYy
ODFmNTEwHhcNMjUwNDEzMTIwMTEzWhcNMjUwNDE0MTIwMTEzWjAzMTEwLwYDVQQD
Eyg4N2U5Mzk1N2U2NWFmNDc0OWY5MGFhOGQ4MmE1YTJjMGVjY2U3YWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfgkB1ndaoNoOh17vIqmS0PjYVkO
fyrq+uhR+5u/wwAkjfacwu8KrAA1b3gIvfVX9xx98EKN31xczudJdep3NBMP4hzQ
iFnTVeuQZH2uKGjE/+kUVMhvN/lc5WGdFEDaXto+f7BEkU33GSf5uj6CYsXwpIiw
la24DvMM3t57iP1FzMppyLdIwfxCAYvccFnrQPbDcZDNCON56UD1eq+hpaliS0KO
XnoUXJXhly6nrfBILkSdmh5Yg6rmdR4BgZqGXO2XOJQcozA93UcIFBfnhT4/zU14
s+nkXCo96ixK3OS8SyAASqZ9FJ7OrWr2k3awTW5wB9ISYGIueshgoT0NvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfpOVfmWvR0n5CqjYKlosDsznq0MB8GA1UdIwQY
MBaAFDqp6YMu0l3njDzgUBIIJhBmKB9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3FucGd5N1NYZWVNUE9CUUVnZ21FR1lvSDFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81ZmQyNzMtZjNhOS00NzU1LWIyM2Et
M2JiZDg4N2QwNWMyLzEvT3FucGd5N1NYZWVNUE9CUUVnZ21FR1lvSDFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy81ZmQyNzMtZjNhOS00NzU1LWIyM2EtM2JiZDg4N2QwNWMy
LzEvT3FucGd5N1NYZWVNUE9CUUVnZ21FR1lvSDFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwAjc+qG
LqINQlU9yv708kbbEFMn4f+xhaBA2RHiGYCjCtjoEc6cjPep67MaXsOcChmp9wI/
6KeGN5P6dtroT8iANTs+mOsdnULLT1GfevjqzEfJf7vChNjslfZ0fGJ7OxYt1kZD
VBwZKZBsW5mLwPmfvM/SDU1gZG90lIGW25htFnzi92mXzkCW12jpbmoZp8Je5E7Y
FgMHPDDhCx8zzspfqx+tJMehojVSGrtK+4CWCqwFNzPtO/ll8Vvq2VvO6aniY9f/
Lb7FnBwxbuJXQRoxosoI4IvCr7tfpbi0nWPOAYR6QUSC0ls039wYPFGPZegNLw3f
cXZETi4nfXm4TQ==
-----END CERTIFICATE-----