Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
File:                     OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft (raw, json)
Hash identifier:          Ski2kyr505ig+Crh/MOL/KrHV+YOQ9ceO/k2FXAHKLc=
Subject key identifier:   87:ED:AF:7E:2D:51:6A:BB:D6:FE:F0:B9:84:FF:42:34:35:A6:B4:43
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Certificate issuer:       /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial:       01962FABA1D049340E5E593256A607AB5A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl (hash: F6rPrcOloHsI1pGwfwNsJO4wnV4gj3gUcvASmMi5Wh4=)
                          2: P-qDcpUjUWgiMApBb5BbPbEUdus.roa (hash: S9R1fM6ee5L0InXw/97Mdsuva54hJaVpgqKQTLiB5Tw=)
                          3: VyN653hL4rAY_e2hdksKGUqIxbM.roa (hash: VrgaTpIZV9tWUm9PEYZT3bNMzddxfH9mCTF1o6wKY4w=)
                          4: ev01UlTf8xnmaZcDqeNnJaY8mDw.roa (hash: bBrSvTSN1a9z7klG5jouNd18ngFrGD6DYe0uz0gXvaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a1:d0:49:34:0e:5e:59:32:56:a6:07:ab:5a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=87edaf7e2d516abbd6fef0b984ff423435a6b443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:a1:35:57:25:53:77:19:dd:c6:ff:51:88:
                    7e:ca:f8:f5:67:87:e0:54:44:a1:6e:81:86:e5:d1:
                    30:00:d0:c9:8a:22:ae:7a:ce:b0:dc:a6:ae:49:12:
                    ea:91:80:6a:15:d5:7d:07:99:be:d1:b8:77:8a:37:
                    28:07:71:7d:42:40:84:84:55:aa:92:6f:ef:95:78:
                    7e:e0:a9:2b:28:5c:cd:91:53:2d:eb:20:1f:20:af:
                    2f:09:b1:fc:5b:bf:8d:a2:50:7e:9c:76:83:06:ab:
                    85:ca:af:ea:45:0f:51:85:e9:17:15:22:75:68:1c:
                    58:c4:96:17:2f:33:a9:1e:d1:e7:17:ae:5a:c9:17:
                    2d:a3:6c:71:fd:ca:39:f5:16:f2:93:a0:cf:9b:97:
                    06:48:1b:42:37:f4:04:ed:af:33:83:4f:6b:8a:7d:
                    34:83:e2:6f:2b:cf:b2:fd:7c:03:4a:f0:02:b3:6c:
                    4a:f6:ed:ff:1a:9e:0f:40:e8:e0:53:03:4c:42:2d:
                    81:98:2e:74:7b:4f:0c:d3:b7:03:19:5b:39:20:e8:
                    73:44:7d:d2:8a:b2:0f:5b:41:80:40:bb:9e:38:1c:
                    2e:7a:95:30:6e:a9:0c:09:07:f3:91:f8:57:98:d5:
                    fe:b2:27:57:14:a7:34:c9:be:84:e3:3d:b9:24:8c:
                    bf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:ED:AF:7E:2D:51:6A:BB:D6:FE:F0:B9:84:FF:42:34:35:A6:B4:43
            X509v3 Authority Key Identifier:
                keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:d2:ad:ac:3b:7e:ba:51:ae:b2:a9:24:04:16:fc:4b:80:9e:
         79:38:7d:44:18:2a:39:53:75:b4:bd:fd:f9:28:c1:c5:99:4f:
         e6:20:73:44:fd:97:c0:f3:91:78:15:90:dd:be:1d:c4:93:24:
         4a:02:9f:a2:1d:42:01:fb:ad:93:17:69:4b:e8:40:aa:80:d9:
         13:ec:0a:35:2e:21:25:5f:85:ef:59:e7:a1:e6:d0:e3:ca:c2:
         17:91:5e:8e:d9:44:31:ff:16:5e:e9:d7:82:f9:c0:ed:6b:4f:
         8c:07:7f:47:cc:ba:32:8f:b6:a7:e9:76:c0:fd:09:19:05:55:
         05:47:d9:e6:58:d6:bb:49:68:31:c7:d7:cc:66:28:1c:9a:98:
         4c:20:8d:f2:bf:1f:d8:5a:ab:bb:00:a9:6d:95:44:51:54:91:
         15:6d:6b:7c:83:7b:99:0c:da:bc:c7:89:a5:4c:3f:34:b7:60:
         2f:58:47:60:3a:f4:e5:da:82:b6:8e:48:7d:07:aa:2c:a4:d6:
         d7:b0:ac:48:a5:55:74:a8:62:5a:f1:d6:1e:22:b2:cd:ea:11:
         a9:91:16:a7:8a:e2:96:79:76:60:3b:86:87:70:a8:a6:fe:b6:
         4f:17:96:e9:be:d8:4a:44:78:db:2c:5d:52:de:99:4d:a1:ac:
         96:49:49:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq6HQSTQOXlkyVqYHq1qeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YmQ2ZDhlYmI4MjQwNGQ1NzA5MzUxYmMyMzI5YTBlZTQz
YTlhNDMwHhcNMjUwNDEzMTUwMTM5WhcNMjUwNDE0MTUwMTM5WjAzMTEwLwYDVQQD
Eyg4N2VkYWY3ZTJkNTE2YWJiZDZmZWYwYjk4NGZmNDIzNDM1YTZiNDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1GhNVclU3cZ3cb/UYh+yvj1Z4fg
VEShboGG5dEwANDJiiKues6w3KauSRLqkYBqFdV9B5m+0bh3ijcoB3F9QkCEhFWq
km/vlXh+4KkrKFzNkVMt6yAfIK8vCbH8W7+NolB+nHaDBquFyq/qRQ9RhekXFSJ1
aBxYxJYXLzOpHtHnF65ayRcto2xx/co59Rbyk6DPm5cGSBtCN/QE7a8zg09rin00
g+JvK8+y/XwDSvACs2xK9u3/Gp4PQOjgUwNMQi2BmC50e08M07cDGVs5IOhzRH3S
irIPW0GAQLueOBwuepUwbqkMCQfzkfhXmNX+sidXFKc0yb6E4z25JIy/WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIftr34tUWq71v7wuYT/QjQ1prRDMB8GA1UdIwQY
MBaAFDi9bY67gkBNVwk1G8Iymg7kOppDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0wxdGpydUNRRTFYQ1RVYndqS2FEdVE2bWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iYjNiNDktNjJkMC00OTdjLWJkMWUt
OGM5NTM5ZjQ0NGM2LzEvT0wxdGpydUNRRTFYQ1RVYndqS2FEdVE2bWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iYjNiNDktNjJkMC00OTdjLWJkMWUtOGM5NTM5ZjQ0NGM2
LzEvT0wxdGpydUNRRTFYQ1RVYndqS2FEdVE2bWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdKtrDt+
ulGusqkkBBb8S4CeeTh9RBgqOVN1tL39+SjBxZlP5iBzRP2XwPOReBWQ3b4dxJMk
SgKfoh1CAfutkxdpS+hAqoDZE+wKNS4hJV+F71nnoebQ48rCF5FejtlEMf8WXunX
gvnA7WtPjAd/R8y6Mo+2p+l2wP0JGQVVBUfZ5ljWu0loMcfXzGYoHJqYTCCN8r8f
2FqruwCpbZVEUVSRFW1rfIN7mQzavMeJpUw/NLdgL1hHYDr05dqCto5IfQeqLKTW
17CsSKVVdKhiWvHWHiKyzeoRqZEWp4rilnl2YDuGh3Copv62TxeW6b7YSkR42yxd
Ut6ZTaGslklJOQ==
-----END CERTIFICATE-----