Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
File:                     oInHIR6wy6D9k84xaziVOM4aywA.mft (raw, json)
Hash identifier:          YFl/RiGAWqQtPUWFjvQKy6/zuZIS80yTuhjw/ZpX8uI=
Subject key identifier:   71:1E:4D:CA:81:D2:40:99:82:33:FA:5D:F5:D9:42:98:D8:A3:9B:72
Authority key identifier: A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
Certificate issuer:       /CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Certificate serial:       01962F74958C938DD064391417EE49C11962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
Manifest number:          0D5A
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: 07n12IDxKPAxIxs90Uxv2kiE_p8.roa (hash: onmuGRswCBPJXmNtk3krWUPKECPDIYJbgKGbyF0Mw3c=)
                          2: oInHIR6wy6D9k84xaziVOM4aywA.crl (hash: HNykcKmM0JZcW1ztGCeoB5Z5Udaqxur4VbTfqhK+mF8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:8c:93:8d:d0:64:39:14:17:ee:49:c1:19:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=711e4dca81d240998233fa5df5d94298d8a39b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:5c:77:d8:f2:16:c7:cd:14:21:12:a2:65:
                    23:06:21:82:49:54:92:37:03:a8:fe:3d:4e:98:d8:
                    00:79:2c:f1:24:1e:b4:a7:97:5f:7e:cb:6f:49:94:
                    09:29:3d:6b:c9:58:0d:c9:09:5f:aa:6e:6a:a6:de:
                    2e:75:60:06:3a:45:b5:55:9a:7f:a4:13:67:ae:bb:
                    b3:ce:b1:8a:e7:9f:12:36:92:42:9c:a4:72:a3:48:
                    e0:9a:d3:8d:ab:7c:09:19:ec:38:b3:65:f8:f9:d5:
                    4c:51:9d:b2:48:3d:96:80:28:7d:b1:a2:23:b6:7b:
                    d6:52:f9:e2:bf:26:02:2f:f0:75:33:c7:73:08:40:
                    83:f1:31:eb:7f:5d:e6:65:40:9b:ce:d7:38:0a:19:
                    aa:34:b2:e7:61:3b:3f:30:a4:ed:8f:97:a9:b6:3d:
                    fc:fc:21:e1:e4:5a:f0:dd:14:84:ef:94:75:76:9b:
                    23:af:bb:c8:3a:d9:35:f2:07:6a:bf:f9:4b:58:fd:
                    f3:14:4c:a5:d0:6a:ad:79:4d:fe:88:5c:db:09:db:
                    02:a7:39:9c:8a:3f:4d:6e:f9:36:d4:f9:d0:41:1d:
                    da:e3:7a:d4:c4:d3:1d:2a:61:24:21:38:4d:c2:82:
                    ed:5c:0f:b2:6a:79:97:97:17:cf:ca:42:2f:2b:02:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1E:4D:CA:81:D2:40:99:82:33:FA:5D:F5:D9:42:98:D8:A3:9B:72
            X509v3 Authority Key Identifier:
                keyid:A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e4:81:36:c5:fa:d5:96:31:5a:57:43:56:6e:9d:67:17:90:
         10:6b:5c:90:6e:ed:a8:27:ea:8b:e6:bb:67:dd:d2:0f:a6:79:
         06:b6:bb:f7:2e:39:79:b9:94:31:f4:cd:2c:1c:2c:63:b7:df:
         d2:9a:16:62:9f:47:5b:95:ce:0f:dc:ef:85:ed:ff:0f:2b:60:
         59:ab:32:e0:8f:8b:9e:0e:c7:b0:cd:2d:f8:fc:67:1d:ae:bd:
         60:b9:99:68:09:0b:7a:87:e2:79:52:0d:d8:60:ec:68:5b:ce:
         77:c1:51:2d:ba:3c:09:d5:a8:ee:3a:1d:9f:3a:57:fb:a0:6d:
         48:82:b2:51:f9:31:d1:07:a4:b5:6f:74:d0:6f:39:d3:34:e3:
         09:e9:3f:96:09:3c:37:a1:72:7a:7f:ca:60:64:c4:fb:d1:76:
         e1:c6:9e:80:9b:bf:da:12:69:3c:64:26:e6:80:33:fd:9a:1f:
         23:89:94:33:ce:5e:93:02:3b:77:3d:53:6a:47:c6:35:d1:c7:
         34:7d:29:7c:e7:ba:66:30:e5:81:2b:aa:a6:b5:8e:e4:94:8b:
         18:55:55:2f:b9:6a:a2:8a:b2:0c:e7:ca:86:e5:da:cb:99:50:
         f2:fa:39:ee:a2:f3:df:55:85:9a:5b:1a:10:7c:90:9c:c5:5d:
         07:69:d0:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJWMk43QZDkUF+5JwRliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODljNzIxMWViMGNiYTBmZDkzY2UzMTZiMzg5NTM4Y2Ux
YWNiMDAwHhcNMjUwNDEzMTQwMTMxWhcNMjUwNDE0MTQwMTMxWjAzMTEwLwYDVQQD
Eyg3MTFlNGRjYTgxZDI0MDk5ODIzM2ZhNWRmNWQ5NDI5OGQ4YTM5YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun5cd9jyFsfNFCESomUjBiGCSVSS
NwOo/j1OmNgAeSzxJB60p5dffstvSZQJKT1ryVgNyQlfqm5qpt4udWAGOkW1VZp/
pBNnrruzzrGK558SNpJCnKRyo0jgmtONq3wJGew4s2X4+dVMUZ2ySD2WgCh9saIj
tnvWUvnivyYCL/B1M8dzCECD8THrf13mZUCbztc4ChmqNLLnYTs/MKTtj5eptj38
/CHh5Frw3RSE75R1dpsjr7vIOtk18gdqv/lLWP3zFEyl0GqteU3+iFzbCdsCpzmc
ij9Nbvk21PnQQR3a43rUxNMdKmEkIThNwoLtXA+yanmXlxfPykIvKwJo5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEeTcqB0kCZgjP6XfXZQpjYo5tyMB8GA1UdIwQY
MBaAFKCJxyEesMug/ZPOMWs4lTjOGssAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0luSElSNnd5NkQ5azg0eGF6aVZPTTRheXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS84ZTEyMDQtNGEwMy00Yzk3LWEwM2Yt
OTdlMDgwZTJhOTEwLzEvb0luSElSNnd5NkQ5azg0eGF6aVZPTTRheXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS84ZTEyMDQtNGEwMy00Yzk3LWEwM2YtOTdlMDgwZTJhOTEw
LzEvb0luSElSNnd5NkQ5azg0eGF6aVZPTTRheXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuSBNsX6
1ZYxWldDVm6dZxeQEGtckG7tqCfqi+a7Z93SD6Z5Bra79y45ebmUMfTNLBwsY7ff
0poWYp9HW5XOD9zvhe3/DytgWasy4I+Lng7HsM0t+PxnHa69YLmZaAkLeofieVIN
2GDsaFvOd8FRLbo8CdWo7jodnzpX+6BtSIKyUfkx0QektW900G850zTjCek/lgk8
N6Fyen/KYGTE+9F24caegJu/2hJpPGQm5oAz/ZofI4mUM85ekwI7dz1TakfGNdHH
NH0pfOe6ZjDlgSuqprWO5JSLGFVVL7lqooqyDOfKhuXay5lQ8vo57qLz31WFmlsa
EHyQnMVdB2nQZA==
-----END CERTIFICATE-----