Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
File:                     oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft (raw, json)
Hash identifier:          zU1+Swlyya3UMx4QgfR0HHnT9btAAjJAWzVUEfkZTJM=
Subject key identifier:   8F:D4:F7:67:F7:A5:57:FE:BE:C9:2B:AD:9B:70:05:F4:DB:17:F2:46
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Certificate issuer:       /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial:       01962F3D709BFE5C4982032E06549CC74972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
Manifest number:          0F8C
Signing time:             Sun 13 Apr 2025 13:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:17 +0000
Files and hashes:         1: d8Ubh0CXhXXhagmmKA6YqgiY1CI.roa (hash: XS7bGpIqru665bj8O0eStPb/SWXWzyB/RG2r/OA2+68=)
                          2: oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl (hash: mZthX4ErH91KvXT422p/W0zMUP5Oo3EF00IA91nY3fM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:70:9b:fe:5c:49:82:03:2e:06:54:9c:c7:49:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
        Validity
            Not Before: Apr 13 13:01:17 2025 GMT
            Not After : Apr 14 13:01:17 2025 GMT
        Subject: CN=8fd4f767f7a557febec92bad9b7005f4db17f246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:84:de:32:65:be:2a:8c:0b:e5:26:69:37:
                    c6:6e:4e:17:7c:8d:ef:62:d5:5b:4d:d0:2d:36:7f:
                    58:7e:7c:bb:72:c7:d7:45:da:35:55:72:03:e1:2c:
                    25:f8:b8:1d:93:f6:e2:45:70:43:ae:5a:91:67:2e:
                    8e:6c:6f:df:a6:79:6d:cd:21:23:23:ae:84:37:5e:
                    aa:ad:9a:46:09:9b:42:fc:68:2c:dd:64:ae:b3:0c:
                    48:8e:b8:07:75:b9:12:3f:99:66:0c:90:06:b3:7d:
                    fd:36:81:b4:de:86:d0:b8:5f:b2:83:8d:d1:bd:00:
                    3f:ae:d4:b6:7e:7b:b8:8e:06:11:f5:a1:aa:b8:51:
                    ae:97:5e:39:a7:b9:64:13:61:99:22:da:68:a0:a1:
                    e9:0e:ca:11:ae:5c:bf:04:28:87:a2:9a:85:f3:f3:
                    bc:01:3c:76:e7:08:11:c1:e6:fb:38:fb:62:a6:b0:
                    ab:3d:d6:ae:94:55:26:e8:76:ac:49:51:c2:db:25:
                    14:c4:64:ee:b5:95:d8:d7:75:bc:2e:72:a1:65:16:
                    89:4c:3a:ae:3c:c5:70:f3:b2:18:fb:cc:54:89:a0:
                    b6:7f:e2:32:11:d3:90:e1:da:e8:a6:7b:89:73:aa:
                    62:aa:36:98:67:6e:97:02:26:b7:a0:66:92:29:6c:
                    37:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D4:F7:67:F7:A5:57:FE:BE:C9:2B:AD:9B:70:05:F4:DB:17:F2:46
            X509v3 Authority Key Identifier:
                keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:09:9c:e2:25:6e:8d:c8:2a:45:4d:09:d0:39:24:3f:6e:
         a9:65:36:a6:e4:8c:fa:3a:60:75:48:64:01:10:3c:b1:0b:31:
         45:98:c9:00:e9:a6:f5:74:8f:c6:99:90:34:e5:44:7a:18:99:
         be:68:cf:13:14:f2:a9:6f:c3:28:84:78:36:92:47:92:56:96:
         44:1f:4a:16:50:9c:86:73:68:62:ad:16:c0:80:ec:4a:52:9f:
         93:61:ea:98:ae:6a:ac:78:8a:b8:52:c8:fe:5b:27:88:41:cf:
         9c:cd:de:3e:6d:19:cd:3e:64:80:ce:63:a8:68:88:d5:51:48:
         20:56:b9:b6:dc:f3:73:8c:ab:eb:98:c3:c1:6b:69:2f:60:04:
         d8:93:04:4c:26:47:e3:da:8c:33:f0:84:3f:45:5e:68:46:bf:
         77:23:78:6a:da:41:84:b4:aa:36:e1:01:a8:64:d1:fb:02:4e:
         d8:42:b9:44:0f:9c:00:65:99:5b:df:c0:c4:d5:c3:07:9d:97:
         52:7a:05:c0:4b:d2:5c:9c:4d:17:f5:23:61:37:b7:b9:3f:73:
         d1:01:ae:2c:f4:e1:1d:ee:26:68:d3:fd:18:57:4c:4e:4a:3f:
         c9:3e:af:5f:f8:82:6d:4b:59:cb:45:b4:66:c1:8f:11:c1:93:
         53:59:c1:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXCb/lxJggMuBlScx0lyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzc4OTFkZDRmM2RmODM3NzJkN2NmZTcxODM4NDNjYmZm
NDRkNTQwHhcNMjUwNDEzMTMwMTE3WhcNMjUwNDE0MTMwMTE3WjAzMTEwLwYDVQQD
Eyg4ZmQ0Zjc2N2Y3YTU1N2ZlYmVjOTJiYWQ5YjcwMDVmNGRiMTdmMjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjaE3jJlviqMC+UmaTfGbk4XfI3v
YtVbTdAtNn9Yfny7csfXRdo1VXID4Swl+Lgdk/biRXBDrlqRZy6ObG/fpnltzSEj
I66EN16qrZpGCZtC/Ggs3WSuswxIjrgHdbkSP5lmDJAGs339NoG03obQuF+yg43R
vQA/rtS2fnu4jgYR9aGquFGul145p7lkE2GZItpooKHpDsoRrly/BCiHopqF8/O8
ATx25wgRweb7OPtiprCrPdaulFUm6HasSVHC2yUUxGTutZXY13W8LnKhZRaJTDqu
PMVw87IY+8xUiaC2f+IyEdOQ4dropnuJc6piqjaYZ26XAia3oGaSKWw38wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/U92f3pVf+vskrrZtwBfTbF/JGMB8GA1UdIwQY
MBaAFKE3iR3U89+Ddy18/nGDhDy/9E1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMt
OGRkYTZjNmNhODFkLzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMtOGRkYTZjNmNhODFk
LzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf68JnOIl
bo3IKkVNCdA5JD9uqWU2puSM+jpgdUhkARA8sQsxRZjJAOmm9XSPxpmQNOVEehiZ
vmjPExTyqW/DKIR4NpJHklaWRB9KFlCchnNoYq0WwIDsSlKfk2HqmK5qrHiKuFLI
/lsniEHPnM3ePm0ZzT5kgM5jqGiI1VFIIFa5ttzzc4yr65jDwWtpL2AE2JMETCZH
49qMM/CEP0VeaEa/dyN4atpBhLSqNuEBqGTR+wJO2EK5RA+cAGWZW9/AxNXDB52X
UnoFwEvSXJxNF/UjYTe3uT9z0QGuLPThHe4maNP9GFdMTko/yT6vX/iCbUtZy0W0
ZsGPEcGTU1nBnw==
-----END CERTIFICATE-----