Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File:                     1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier:          PxK79r7ZL6JEIJniG2Xwlx7kGERUzH89i5UG6Qdz0MU=
Subject key identifier:   22:2D:AE:E7:5C:0E:2D:11:43:C3:C9:E3:C4:2A:76:F2:F5:39:D1:C8
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer:       /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial:       01962E98A68EAC3941B0BAC780B4AB1947C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number:          78
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: Iv14M8h3+N6vecn/TZ+HNKeOapDJoiF+dvX/8ZsyUsw=)
                          2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=)
                          3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a6:8e:ac:39:41:b0:ba:c7:80:b4:ab:19:47:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=222daee75c0e2d1143c3c9e3c42a76f2f539d1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:0e:1d:56:99:b4:cf:66:63:d1:c3:14:bc:
                    6a:3f:96:64:11:06:91:61:79:53:d6:33:38:57:5c:
                    30:33:47:31:d6:56:fe:90:41:e1:80:2c:5a:ed:46:
                    e6:51:04:4a:49:4f:0d:07:e4:9d:e9:16:e8:55:75:
                    6c:2e:5b:b7:2a:20:50:aa:b8:bb:47:5e:a4:d5:83:
                    25:2b:0e:e5:01:61:5a:97:05:96:77:de:b8:68:4e:
                    92:14:6d:fe:42:7f:d7:af:6f:f7:a2:49:79:a0:3b:
                    3e:b1:32:4d:e5:69:03:9d:4e:a1:fa:40:34:81:28:
                    37:4a:6d:bf:dc:cf:95:cf:91:74:16:4b:80:65:5f:
                    64:39:d1:2e:a9:c9:47:ae:9b:ed:77:24:12:63:2f:
                    6a:51:ed:85:ac:ed:63:6c:7a:e8:00:bf:ce:8d:dc:
                    09:f3:b3:70:fd:35:97:c9:2a:9e:bb:3c:ed:28:d8:
                    a6:a7:0d:6b:30:96:76:8e:ce:f1:95:00:12:33:ab:
                    94:9c:d1:47:99:cd:11:45:b2:65:64:13:39:1c:cb:
                    42:75:c5:5b:d1:0a:2b:fa:fd:19:ac:2f:90:6d:72:
                    11:28:e3:c6:f7:a4:27:39:86:fe:fe:75:b5:de:49:
                    ff:33:fd:40:b6:07:10:fe:9c:cc:2c:b7:53:2d:8f:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2D:AE:E7:5C:0E:2D:11:43:C3:C9:E3:C4:2A:76:F2:F5:39:D1:C8
            X509v3 Authority Key Identifier:
                keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:30:ff:ec:4d:b8:e4:a4:4c:aa:b8:99:ed:fd:2f:7d:0d:ca:
         00:cb:f9:91:b7:27:2f:72:10:a5:3d:02:5d:9a:1e:ca:45:9c:
         e5:2c:7d:b4:65:78:68:98:41:32:95:9e:1a:50:63:c5:c0:51:
         ed:2c:fe:db:e8:50:d9:d1:80:5c:3b:8a:f6:21:2f:ff:30:79:
         f9:32:6b:df:99:24:40:4a:f7:86:85:64:ae:f0:bc:f4:ed:d4:
         1d:2b:e6:85:2b:a9:eb:28:b4:6e:39:92:05:28:e2:f5:32:3f:
         0d:5b:c5:c5:11:62:25:85:d5:77:f8:c1:cd:c2:86:a7:62:34:
         bb:a7:f9:5b:19:c3:21:c7:c4:6e:f2:1e:92:1c:6b:06:96:f5:
         92:d4:bf:f6:12:ba:0b:82:fe:3f:ba:c6:0f:59:26:8f:25:ee:
         e6:e6:5f:09:8b:6b:c7:47:54:28:10:db:dc:f9:ce:ca:e0:ca:
         dd:c5:21:96:0e:c8:54:df:8e:8c:72:dc:c0:42:33:64:a9:73:
         8a:26:4e:5c:bd:58:4f:b3:92:f1:4d:15:a3:25:a0:22:f2:5d:
         ef:28:48:57:f5:f7:28:2e:8f:a7:89:74:6d:1e:91:18:90:4d:
         d0:9c:93:1b:3e:0c:7f:30:e0:20:0f:92:15:88:2d:a8:ca:43:
         16:46:87:d3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYumKaOrDlBsLrHgLSrGUfJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw
NDRmNTcwHhcNMjUwNDEzMTAwMTE4WhcNMjUwNDE0MTAwMTE4WjAzMTEwLwYDVQQD
EygyMjJkYWVlNzVjMGUyZDExNDNjM2M5ZTNjNDJhNzZmMmY1MzlkMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU4OHVaZtM9mY9HDFLxqP5ZkEQaR
YXlT1jM4V1wwM0cx1lb+kEHhgCxa7UbmUQRKSU8NB+Sd6RboVXVsLlu3KiBQqri7
R16k1YMlKw7lAWFalwWWd964aE6SFG3+Qn/Xr2/3okl5oDs+sTJN5WkDnU6h+kA0
gSg3Sm2/3M+Vz5F0FkuAZV9kOdEuqclHrpvtdyQSYy9qUe2FrO1jbHroAL/OjdwJ
87Nw/TWXySqeuzztKNimpw1rMJZ2js7xlQASM6uUnNFHmc0RRbJlZBM5HMtCdcVb
0Qor+v0ZrC+QbXIRKOPG96QnOYb+/nW13kn/M/1AtgcQ/pzMLLdTLY92fQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCItrudcDi0RQ8PJ48QqdvL1OdHIMB8GA1UdIwQY
MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw
LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw
NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDD/
7E245KRMqriZ7f0vfQ3KAMv5kbcnL3IQpT0CXZoeykWc5Sx9tGV4aJhBMpWeGlBj
xcBR7Sz+2+hQ2dGAXDuK9iEv/zB5+TJr35kkQEr3hoVkrvC89O3UHSvmhSup6yi0
bjmSBSji9TI/DVvFxRFiJYXVd/jBzcKGp2I0u6f5WxnDIcfEbvIekhxrBpb1ktS/
9hK6C4L+P7rGD1kmjyXu5uZfCYtrx0dUKBDb3PnOyuDK3cUhlg7IVN+OjHLcwEIz
ZKlziiZOXL1YT7OS8U0VoyWgIvJd7yhIV/X3KC6Pp4l0bR6RGJBN0JyTGz4MfzDg
IA+SFYgtqMpDFkaH0w==
-----END CERTIFICATE-----