Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File:                     f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier:          GsIUvbziOjVGzm6wS+xkzICuC5S+yJqA1BPNiC2+Q+Q=
Subject key identifier:   38:97:CC:F7:BD:FD:B7:38:8B:7C:E4:08:0B:34:E4:C3:05:F3:82:86
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer:       /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial:       01962F741CDD20404C2420FA5F2F8BBDA60F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number:          1082
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=)
                          2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: z+hPNZuh0Y/LHJGBipuvvKBMETF24iBcYmMExSxr7tk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1c:dd:20:40:4c:24:20:fa:5f:2f:8b:bd:a6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=3897ccf7bdfdb7388b7ce4080b34e4c305f38286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a3:42:05:44:9c:ae:b5:67:29:be:60:87:ea:
                    0f:d9:db:4a:c7:15:f3:c1:af:5b:2c:42:0d:a1:63:
                    01:f2:4a:4c:81:c9:c3:29:a7:4b:5a:16:2d:0b:31:
                    95:d2:89:9d:f5:1c:44:d8:49:e0:f1:2c:3a:fd:a3:
                    c2:53:41:5b:64:7a:cb:2b:f6:66:c0:74:94:71:ea:
                    0c:1e:cb:8d:ac:b9:9b:ef:af:a4:f2:77:f4:ea:c8:
                    3a:ee:cb:e7:c6:21:28:cb:49:21:92:1c:1a:72:00:
                    a6:a3:ea:be:6c:95:2f:b3:a9:c8:d7:f3:c8:12:41:
                    17:02:88:9e:da:04:23:b3:04:84:e9:d4:b6:1d:be:
                    37:10:24:a0:ac:8f:ce:ac:05:b6:b5:44:ce:75:01:
                    64:be:8c:45:34:b8:af:94:df:04:36:af:28:9f:d9:
                    4d:a4:47:ad:1c:54:1f:b2:6b:27:47:1a:73:dc:9c:
                    5a:db:73:1d:ca:1f:fa:db:89:ff:35:77:04:0a:4b:
                    1d:d6:bf:fd:9c:5c:46:e7:28:d2:7f:af:71:48:86:
                    fb:3f:c1:0e:3a:5e:f8:11:fb:58:30:f2:18:2e:0d:
                    30:d3:1f:20:f2:44:84:7c:20:dc:66:fb:e6:41:cd:
                    16:ae:82:3f:02:12:6e:2a:f0:eb:bc:2a:87:77:bb:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:97:CC:F7:BD:FD:B7:38:8B:7C:E4:08:0B:34:E4:C3:05:F3:82:86
            X509v3 Authority Key Identifier:
                keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:40:cd:4e:f5:a4:d3:1f:5f:88:b5:03:db:29:90:22:66:14:
         cc:a4:d1:6c:b2:31:52:aa:e3:b5:7a:77:3a:80:7f:4a:92:50:
         bd:df:c7:36:10:7d:f8:72:e3:6c:c0:5b:99:76:b7:91:e4:60:
         95:3c:d5:c0:13:d8:c3:1a:1d:ef:37:b6:c5:99:00:3c:23:82:
         57:35:ef:d0:54:32:dd:f0:82:85:33:2a:66:67:bf:8f:18:6c:
         89:49:8c:99:c1:82:c6:b2:fe:6c:dd:40:3f:4b:7f:61:c6:73:
         0b:b2:3c:49:a8:19:e9:b0:ff:f3:96:63:a3:1c:34:18:28:cd:
         b6:29:0c:0a:2a:6d:38:72:a5:a2:11:e4:d8:ca:f2:ff:b0:47:
         2c:07:35:6b:fa:e5:a2:55:dd:8e:7b:18:aa:50:73:73:33:d5:
         f1:3b:25:fc:8b:8b:02:2b:3a:36:e2:79:4f:8a:76:1f:e0:e7:
         43:63:7b:6d:58:ba:9f:88:0c:3d:0c:c8:bd:ef:a3:e1:b1:f2:
         ba:53:38:55:6f:ec:55:b9:aa:99:9e:f9:3d:07:b6:31:3b:de:
         63:37:8e:db:b7:0c:a8:28:45:5a:20:c1:5f:bc:12:17:17:3f:
         ef:97:85:59:7b:e1:01:54:fb:25:0d:9e:b5:09:9b:ee:3d:e6:
         67:aa:22:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBzdIEBMJCD6Xy+LvaYPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNDM5ZDk0MjQyNmZjNjczYjI3OWNjOThhYjM1ZmRiZDdl
YTk3ZjUwHhcNMjUwNDEzMTQwMTAwWhcNMjUwNDE0MTQwMTAwWjAzMTEwLwYDVQQD
EygzODk3Y2NmN2JkZmRiNzM4OGI3Y2U0MDgwYjM0ZTRjMzA1ZjM4Mjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6NCBUScrrVnKb5gh+oP2dtKxxXz
wa9bLEINoWMB8kpMgcnDKadLWhYtCzGV0omd9RxE2Eng8Sw6/aPCU0FbZHrLK/Zm
wHSUceoMHsuNrLmb76+k8nf06sg67svnxiEoy0khkhwacgCmo+q+bJUvs6nI1/PI
EkEXAoie2gQjswSE6dS2Hb43ECSgrI/OrAW2tUTOdQFkvoxFNLivlN8ENq8on9lN
pEetHFQfsmsnRxpz3Jxa23Mdyh/624n/NXcECksd1r/9nFxG5yjSf69xSIb7P8EO
Ol74EftYMPIYLg0w0x8g8kSEfCDcZvvmQc0WroI/AhJuKvDrvCqHd7sjBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiXzPe9/bc4i3zkCAs05MMF84KGMB8GA1UdIwQY
MBaAFH9DnZQkJvxnOyecyYqzX9vX6pf1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82OWEwOWYtNTgwOS00NjU2LWIzNTUt
MTQ2ZjI1NGFjMTMxLzEvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS82OWEwOWYtNTgwOS00NjU2LWIzNTUtMTQ2ZjI1NGFjMTMx
LzEvZjBPZGxDUW1fR2M3SjV6SmlyTmYyOWZxbF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUDNTvWk
0x9fiLUD2ymQImYUzKTRbLIxUqrjtXp3OoB/SpJQvd/HNhB9+HLjbMBbmXa3keRg
lTzVwBPYwxod7ze2xZkAPCOCVzXv0FQy3fCChTMqZme/jxhsiUmMmcGCxrL+bN1A
P0t/YcZzC7I8SagZ6bD/85Zjoxw0GCjNtikMCiptOHKlohHk2Mry/7BHLAc1a/rl
olXdjnsYqlBzczPV8Tsl/IuLAis6NuJ5T4p2H+DnQ2N7bVi6n4gMPQzIve+j4bHy
ulM4VW/sVbmqmZ75PQe2MTveYzeO27cMqChFWiDBX7wSFxc/75eFWXvhAVT7JQ2e
tQmb7j3mZ6oihg==
-----END CERTIFICATE-----