Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File:                     OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier:          RHvETlZQfNnbVCqIxBZba2wdALIzdhqx5YEmCqXZSX0=
Subject key identifier:   68:0E:5D:F8:BC:80:5A:48:7D:26:D9:76:15:52:F6:CC:09:18:3D:F5
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer:       /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial:       01962F742668439CEE1BD73B8B6BC23DABB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: LyEHpDbggI3U2atQo495eakiovsUPQKiOeOkKj/yqV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:26:68:43:9c:ee:1b:d7:3b:8b:6b:c2:3d:ab:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=680e5df8bc805a487d26d9761552f6cc09183df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:72:0b:f2:a7:f5:e0:22:9f:d2:45:02:c1:
                    a9:70:b6:52:a9:8f:38:68:28:1d:4e:11:5d:0b:5c:
                    a4:69:ee:e3:0b:1f:f9:cf:71:71:89:6f:99:cd:56:
                    c8:91:13:64:87:98:57:27:8f:af:59:4c:40:54:48:
                    ec:4d:36:ff:67:36:e7:ae:17:4c:23:a5:88:7c:3e:
                    51:01:e1:ec:2f:88:7d:2f:05:7a:ec:82:4b:8c:14:
                    05:e5:e3:57:af:0d:d2:58:d3:59:9c:ec:5e:3d:4e:
                    0e:0b:cb:ea:96:b5:a4:4d:58:49:c2:73:64:64:0c:
                    85:4a:2d:aa:e8:96:ee:74:06:0a:27:6c:7d:a4:47:
                    16:f6:37:7d:45:a2:b2:e3:a9:c6:c8:68:98:b6:97:
                    c5:74:ca:77:62:5f:8f:08:ad:05:0b:3d:3f:1b:8a:
                    78:14:bf:b0:40:bb:27:69:a4:67:3f:29:58:2c:77:
                    60:a4:d7:fa:d5:a0:c2:97:78:ec:3b:54:c3:a2:ce:
                    25:19:a2:04:27:21:b4:4f:97:1a:b3:e1:0e:8c:91:
                    1a:3e:6f:b2:d2:79:3e:56:3b:49:0f:67:9e:11:84:
                    ee:60:00:1f:0a:2a:00:79:cd:c1:1b:65:f2:a5:e6:
                    13:92:84:46:e4:b5:e6:a8:bc:72:48:2e:06:5e:c5:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0E:5D:F8:BC:80:5A:48:7D:26:D9:76:15:52:F6:CC:09:18:3D:F5
            X509v3 Authority Key Identifier:
                keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:59:bc:19:47:99:d9:66:94:77:ab:8b:c1:cf:70:99:f2:c5:
         2d:b1:dc:55:f8:1c:db:69:21:51:20:f4:58:7f:32:ff:bd:6b:
         60:ed:f5:48:ae:31:32:03:64:00:15:5e:c3:39:52:8c:84:61:
         cc:e6:0e:22:13:c1:f6:33:ad:6b:57:fb:dc:5d:34:47:02:5e:
         e5:bc:4a:53:06:ed:ce:52:86:09:67:46:71:4b:09:50:f0:bb:
         6c:6f:69:e2:a1:12:fc:03:a8:28:96:84:70:75:62:e2:03:5a:
         cb:49:69:45:23:a3:33:9e:5c:35:f7:25:d8:a2:5d:37:d8:e7:
         ad:1c:1f:c4:3c:e1:7a:4b:24:4a:41:bc:31:ac:bd:b7:c3:90:
         f8:9c:74:3f:50:99:f0:66:66:c9:77:19:45:41:eb:55:4f:33:
         ba:1b:f3:48:a9:e6:bd:2f:09:13:d7:78:6b:5f:38:ac:1f:19:
         83:89:f1:6d:91:bd:a7:1e:f0:82:ed:9f:9f:b6:2b:3b:22:f3:
         5c:57:0d:fe:3a:5f:55:16:1d:d4:87:c9:4a:de:c5:79:29:2c:
         b1:a5:a5:94:df:3d:d9:d5:bf:32:0a:b9:e9:75:6f:8f:82:61:
         71:db:41:05:df:21:0e:1c:12:b5:9b:76:69:49:67:e3:f4:dd:
         00:2a:89:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCZoQ5zuG9c7i2vCPauwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjQwMzBiZjIzMGJkNTZkM2ZlM2UyOWMxODg4MWJhMzJm
YWU3YTIwHhcNMjUwNDEzMTQwMTAzWhcNMjUwNDE0MTQwMTAzWjAzMTEwLwYDVQQD
Eyg2ODBlNWRmOGJjODA1YTQ4N2QyNmQ5NzYxNTUyZjZjYzA5MTgzZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAZyC/Kn9eAin9JFAsGpcLZSqY84
aCgdThFdC1ykae7jCx/5z3FxiW+ZzVbIkRNkh5hXJ4+vWUxAVEjsTTb/ZzbnrhdM
I6WIfD5RAeHsL4h9LwV67IJLjBQF5eNXrw3SWNNZnOxePU4OC8vqlrWkTVhJwnNk
ZAyFSi2q6JbudAYKJ2x9pEcW9jd9RaKy46nGyGiYtpfFdMp3Yl+PCK0FCz0/G4p4
FL+wQLsnaaRnPylYLHdgpNf61aDCl3jsO1TDos4lGaIEJyG0T5cas+EOjJEaPm+y
0nk+VjtJD2eeEYTuYAAfCioAec3BG2XypeYTkoRG5LXmqLxySC4GXsW5FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgOXfi8gFpIfSbZdhVS9swJGD31MB8GA1UdIwQY
MBaAFDlkAwvyML1W0/4+KcGIgboy+ueiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xZGQyNmQtZWFlNS00ZTE5LWFjMzUt
Yzk5M2ZkZmM0YTBiLzEvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xZGQyNmQtZWFlNS00ZTE5LWFjMzUtYzk5M2ZkZmM0YTBi
LzEvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFm8GUeZ
2WaUd6uLwc9wmfLFLbHcVfgc22khUSD0WH8y/71rYO31SK4xMgNkABVewzlSjIRh
zOYOIhPB9jOta1f73F00RwJe5bxKUwbtzlKGCWdGcUsJUPC7bG9p4qES/AOoKJaE
cHVi4gNay0lpRSOjM55cNfcl2KJdN9jnrRwfxDzhekskSkG8May9t8OQ+Jx0P1CZ
8GZmyXcZRUHrVU8zuhvzSKnmvS8JE9d4a184rB8Zg4nxbZG9px7wgu2fn7YrOyLz
XFcN/jpfVRYd1IfJSt7FeSkssaWllN892dW/Mgq56XVvj4JhcdtBBd8hDhwStZt2
aUln4/TdACqJzA==
-----END CERTIFICATE-----