Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
File:                     OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft (raw, json)
Hash identifier:          PlReUa11yH3xXqwyTHU28ryqJ7jDgNclWN/q9HTeaFs=
Subject key identifier:   A3:FD:C8:33:85:E8:A1:72:23:32:7D:9C:D1:67:AF:7A:01:DD:1A:1E
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Certificate issuer:       /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial:       01962DF3E540AB750CE39A53A144879FC64E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
Manifest number:          0FFE
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: 4iN5nDTRDVV1CTGuGlGWY0Ybm9Y.roa (hash: EMh2tz4i0xV1ZX0fHy8PWh0LdLWVBXB/z2TGKHCydUo=)
                          2: OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl (hash: FabzSKwgP42ytEZBiM+dMEzUbl4ZEFSMwN8y410M/tY=)
                          3: lKnLzY94Z9zOTG6_1gzuoDIJ_5Y.roa (hash: veP44H4IXhWwV/CHwiAUB7r/bJ77LhyJozTjkioLQx0=)
                          4: rYkWvcE_3GQZ3jkaDTUiqjj986g.roa (hash: FOkCN5CJZuWhjjVzqhCAbEwhLO4+xpDqIO3h/0CpxnA=)
                          5: xvMwGEntPrsPSijtn7qckfPF1Lw.roa (hash: cfgqt0GeV7LUHA50FIbHHM6KEXg5Xmqps/DGbUwBUAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e5:40:ab:75:0c:e3:9a:53:a1:44:87:9f:c6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=a3fdc83385e8a17223327d9cd167af7a01dd1a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:de:46:52:70:7e:40:c7:50:0a:e6:fe:16:
                    02:06:9f:34:d9:60:46:bd:47:1f:86:e6:8a:52:5e:
                    a0:87:05:30:6b:32:93:b1:80:7e:55:dd:67:18:45:
                    74:05:12:4c:0d:bf:90:0f:d4:4f:a0:7f:ad:88:7b:
                    2c:6b:21:1d:c2:6f:c0:ce:79:92:04:b4:ff:c2:d0:
                    49:0c:b6:fb:bb:0c:24:55:91:aa:29:b2:99:75:f6:
                    ab:aa:1d:52:61:c6:7f:ec:72:39:ce:ba:e3:62:da:
                    74:9a:2c:e9:c4:2d:5a:9a:cf:c3:a1:d9:87:d5:bf:
                    e9:9d:9a:6a:56:ed:03:0a:0e:6e:25:ca:dd:8f:fa:
                    36:d1:19:0c:bf:cf:98:7c:18:5f:26:84:ff:3b:32:
                    e5:44:0e:7c:a5:7e:00:3f:e9:58:9f:f9:46:24:2a:
                    98:bc:bb:51:1d:13:12:6b:1e:18:fd:c5:7b:d4:a7:
                    4b:fe:d3:ae:08:dc:41:e9:83:48:3e:12:3b:08:a6:
                    e5:e5:f6:65:e8:00:f8:4f:be:05:63:ff:2b:74:54:
                    70:5a:b4:4c:df:b6:c8:f9:57:75:1a:d4:18:87:af:
                    f0:a6:23:69:63:fe:53:37:9b:0f:63:15:52:50:0c:
                    b3:89:af:84:fb:9f:f2:f5:2a:75:12:eb:9a:8e:92:
                    7f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FD:C8:33:85:E8:A1:72:23:32:7D:9C:D1:67:AF:7A:01:DD:1A:1E
            X509v3 Authority Key Identifier:
                keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9f:e7:8e:29:ae:22:65:49:97:ef:21:e0:3d:4f:41:ed:da:
         f2:e3:12:7e:17:69:10:01:d8:d6:1e:d4:18:ff:0b:63:b0:91:
         56:37:ff:54:32:27:e6:18:73:7d:cf:cf:23:9b:5c:20:2a:d2:
         a6:7c:8b:56:58:e6:02:43:7e:5e:38:ee:ad:40:bf:7d:4e:a5:
         81:be:62:1b:bd:86:34:ca:9e:6b:e0:0c:32:33:f6:80:91:5b:
         86:c7:58:3c:b2:9c:c8:b6:96:0b:a8:6f:1e:73:a9:b7:ae:ef:
         6a:47:54:95:8d:ae:7c:96:86:2b:a5:60:6e:49:d7:99:14:87:
         1f:aa:6e:d6:cb:9d:0d:ff:de:fb:06:28:9f:3c:a1:62:00:7a:
         e1:75:cf:b1:f5:95:69:e7:cd:35:ad:e9:1d:14:37:3e:93:57:
         12:c0:05:cb:1c:31:d5:54:8f:ec:d4:27:86:12:86:8d:87:2b:
         a7:9f:7d:76:7d:c9:20:94:85:61:53:b9:db:e9:62:2a:18:69:
         95:a5:fc:45:3d:05:23:7b:5b:ef:fa:d6:1f:c3:19:12:5a:1b:
         d8:28:c0:21:e4:10:f1:24:94:e4:94:02:2e:bc:84:3f:da:ca:
         33:76:e6:09:dc:1d:54:32:1a:ce:b4:87:f2:66:b8:90:8d:9c:
         be:fb:9f:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+VAq3UM45pToUSHn8ZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj
MzBhMjYwHhcNMjUwNDEzMDcwMTIwWhcNMjUwNDE0MDcwMTIwWjAzMTEwLwYDVQQD
EyhhM2ZkYzgzMzg1ZThhMTcyMjMzMjdkOWNkMTY3YWY3YTAxZGQxYTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ3eRlJwfkDHUArm/hYCBp802WBG
vUcfhuaKUl6ghwUwazKTsYB+Vd1nGEV0BRJMDb+QD9RPoH+tiHssayEdwm/AznmS
BLT/wtBJDLb7uwwkVZGqKbKZdfarqh1SYcZ/7HI5zrrjYtp0mizpxC1ams/DodmH
1b/pnZpqVu0DCg5uJcrdj/o20RkMv8+YfBhfJoT/OzLlRA58pX4AP+lYn/lGJCqY
vLtRHRMSax4Y/cV71KdL/tOuCNxB6YNIPhI7CKbl5fZl6AD4T74FY/8rdFRwWrRM
37bI+Vd1GtQYh6/wpiNpY/5TN5sPYxVSUAyzia+E+5/y9Sp1EuuajpJ/jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKP9yDOF6KFyIzJ9nNFnr3oB3RoeMB8GA1UdIwQY
MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct
NDY1MzhjYTUzODNjLzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj
LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJ/njimu
ImVJl+8h4D1PQe3a8uMSfhdpEAHY1h7UGP8LY7CRVjf/VDIn5hhzfc/PI5tcICrS
pnyLVljmAkN+XjjurUC/fU6lgb5iG72GNMqea+AMMjP2gJFbhsdYPLKcyLaWC6hv
HnOpt67vakdUlY2ufJaGK6VgbknXmRSHH6pu1sudDf/e+wYonzyhYgB64XXPsfWV
aefNNa3pHRQ3PpNXEsAFyxwx1VSP7NQnhhKGjYcrp599dn3JIJSFYVO52+liKhhp
laX8RT0FI3tb7/rWH8MZElob2CjAIeQQ8SSU5JQCLryEP9rKM3bmCdwdVDIazrSH
8ma4kI2cvvufkA==
-----END CERTIFICATE-----