Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File:                     pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier:          ifhLbmJSuro5Y2rqsmog7RHUMamOviq59/dnX/bL4sA=
Subject key identifier:   DF:61:1A:2B:A0:B6:6B:96:39:41:65:C7:EC:9C:FC:01:D2:24:D8:BD
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer:       /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial:       01962F3D48895BD619D566C58029E2B6D0C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number:          023B
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: OOXOTlISKAB2SZioy1ix+3xCqpqzIlVtoTa6I5gJQIg=)
                          2: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (hash: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:48:89:5b:d6:19:d5:66:c5:80:29:e2:b6:d0:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=df611a2ba0b66b96394165c7ec9cfc01d224d8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:86:e9:d6:57:86:f0:2a:97:a3:ab:22:e5:
                    25:0f:f5:5d:2d:2d:1e:b0:35:8a:7b:79:08:d4:84:
                    82:d6:52:03:b6:cd:a7:7e:ec:41:5b:de:a1:44:53:
                    37:06:1c:fe:b5:3f:84:b5:53:dc:79:f7:38:09:18:
                    2b:33:c4:9d:f3:26:df:7e:17:be:12:c5:98:4a:11:
                    60:97:f3:7e:f3:5b:e9:2c:b8:cc:bd:b7:64:37:d5:
                    c9:09:43:e9:1c:63:18:90:d0:a9:de:f6:92:4e:dd:
                    eb:6a:82:f5:f2:bd:4c:ae:10:e6:3a:1f:34:19:43:
                    20:47:86:a0:1f:aa:88:13:18:91:2f:80:b9:04:d0:
                    5b:9d:6a:be:42:65:b2:f9:aa:6e:ca:16:4e:f5:70:
                    4c:d5:f1:84:93:c0:44:b8:6b:88:32:71:92:82:15:
                    fd:e9:09:21:be:9b:0c:89:ec:d0:84:ce:5d:a2:a6:
                    21:db:4e:b6:80:5f:57:b3:d5:19:d1:c9:7b:bc:36:
                    e9:a2:bb:df:81:3b:2b:cf:a4:a4:27:47:ac:0c:44:
                    6d:eb:5e:ce:75:44:ad:4f:fa:4f:af:93:0f:f0:91:
                    98:ac:29:e6:30:a2:08:a4:c7:e6:7d:73:e7:62:91:
                    eb:a7:8c:81:52:84:16:5e:38:de:d7:39:e0:08:13:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:61:1A:2B:A0:B6:6B:96:39:41:65:C7:EC:9C:FC:01:D2:24:D8:BD
            X509v3 Authority Key Identifier:
                keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:c4:c9:3c:14:e3:91:e6:33:e8:74:42:43:19:9d:e1:4a:
         e7:86:1f:75:82:0c:3a:7a:2f:e0:68:84:59:91:b4:aa:ab:91:
         89:dd:e5:f3:82:0c:99:34:b5:71:bb:43:24:07:be:45:69:f0:
         1c:7f:3f:71:d5:57:22:32:3f:d3:62:95:29:e9:df:e2:aa:59:
         7d:fa:17:89:eb:13:aa:cb:f0:af:c4:1f:0c:5e:09:eb:40:7b:
         b4:79:78:8f:67:0b:11:ba:69:ec:80:6d:f4:ef:c2:26:ae:78:
         0b:70:28:9b:dc:36:5f:8c:37:e5:73:6c:db:ad:ed:9a:92:da:
         47:13:bf:ca:06:0f:aa:59:91:fa:fa:cf:6d:19:48:9d:e0:e2:
         b2:0b:02:4b:11:31:c7:b4:64:20:4f:f6:32:c3:0f:d8:a5:62:
         eb:bf:0f:1c:c2:3c:64:ab:f2:83:4d:a6:c4:d1:21:57:3e:d1:
         cb:95:b3:4f:9b:d5:d0:8e:7c:fd:26:6d:f0:37:33:e0:75:90:
         6b:d8:c7:fe:91:26:7f:d0:bc:7a:b7:47:85:a7:79:fb:72:6c:
         2d:5e:55:3b:47:9f:e4:c8:7d:c9:dc:84:03:8e:1a:8b:b2:1c:
         5a:e7:b0:c1:94:31:12:5d:37:31:4c:91:76:05:ea:07:73:48:
         ab:13:22:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUiJW9YZ1WbFgCnittDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWI4ZWI3YjRiNjJlZDEyNTRmMDA1NjRlMDNjNDA2N2Fi
ZmJmYzkwHhcNMjUwNDEzMTMwMTA3WhcNMjUwNDE0MTMwMTA3WjAzMTEwLwYDVQQD
EyhkZjYxMWEyYmEwYjY2Yjk2Mzk0MTY1YzdlYzljZmMwMWQyMjRkOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM6G6dZXhvAql6OrIuUlD/VdLS0e
sDWKe3kI1ISC1lIDts2nfuxBW96hRFM3Bhz+tT+EtVPcefc4CRgrM8Sd8ybffhe+
EsWYShFgl/N+81vpLLjMvbdkN9XJCUPpHGMYkNCp3vaSTt3raoL18r1MrhDmOh80
GUMgR4agH6qIExiRL4C5BNBbnWq+QmWy+apuyhZO9XBM1fGEk8BEuGuIMnGSghX9
6QkhvpsMiezQhM5doqYh2062gF9Xs9UZ0cl7vDbporvfgTsrz6SkJ0esDERt617O
dUStT/pPr5MP8JGYrCnmMKIIpMfmfXPnYpHrp4yBUoQWXjje1zngCBMITwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9hGiugtmuWOUFlx+yc/AHSJNi9MB8GA1UdIwQY
MBaAFKTrjre0ti7RJU8AVk4DxAZ6v7/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMmMzZTgtOWMwMS00NTViLWIxODEt
ZjRkN2ZkZWJmMDRkLzEvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xMmMzZTgtOWMwMS00NTViLWIxODEtZjRkN2ZkZWJmMDRk
LzEvcE91T3Q3UzJMdEVsVHdCV1RnUEVCbnFfdjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqXEyTwU
45HmM+h0QkMZneFK54YfdYIMOnov4GiEWZG0qquRid3l84IMmTS1cbtDJAe+RWnw
HH8/cdVXIjI/02KVKenf4qpZffoXiesTqsvwr8QfDF4J60B7tHl4j2cLEbpp7IBt
9O/CJq54C3Aom9w2X4w35XNs263tmpLaRxO/ygYPqlmR+vrPbRlIneDisgsCSxEx
x7RkIE/2MsMP2KVi678PHMI8ZKvyg02mxNEhVz7Ry5WzT5vV0I58/SZt8Dcz4HWQ
a9jH/pEmf9C8erdHhad5+3JsLV5VO0ef5Mh9ydyEA44ai7IcWuewwZQxEl03MUyR
dgXqB3NIqxMiww==
-----END CERTIFICATE-----