Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File:                     OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier:          6M5PYYys8YT6YJowMSPvHcN7QQbvtNl9AUir/rz2UPE=
Subject key identifier:   EA:5F:AD:AF:3A:C6:FC:DB:D6:4D:59:BD:3B:0E:9D:A0:28:71:86:FB
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer:       /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial:       01962E98A568D0720060303977833B3650F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: XWi/ZxfYGeMApyc1LH4MCmDymYMKjHbDZ6qzV6M79Bw=)
                          2: qGclPxhfh32KtuLneyqN4qho8W0.roa (hash: Hhh+blGm68/K3Y0iK4idov3LXxMurIpuJKDKpXuGS98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a5:68:d0:72:00:60:30:39:77:83:3b:36:50:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=ea5fadaf3ac6fcdbd64d59bd3b0e9da0287186fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:eb:0b:7a:e8:31:70:ff:18:81:07:b3:53:a6:
                    de:5d:89:6e:74:1d:87:af:3b:5a:46:78:7e:f1:a2:
                    0a:70:69:fe:7f:e3:2e:02:73:f8:0b:f9:af:b5:64:
                    e0:7f:dd:37:d4:33:ac:0b:18:58:66:66:af:8c:0c:
                    7c:6d:ec:39:c7:b3:79:00:3c:5c:34:b4:5b:77:49:
                    d2:92:a3:e2:d0:0d:8d:62:0e:26:03:1c:87:c7:58:
                    af:e5:8f:07:15:95:cf:a6:40:80:13:25:09:c3:a5:
                    d2:2b:a2:1d:b9:d8:51:b0:94:75:89:4a:bf:26:f0:
                    54:4f:af:84:ad:42:d0:f1:22:e6:1d:7e:6f:1c:0a:
                    0a:b8:b1:07:a7:85:7a:e5:23:17:57:58:45:55:1e:
                    1c:89:3e:05:ac:c1:fa:cf:c5:e3:02:ec:72:f7:3f:
                    31:f3:ef:6d:a0:ed:eb:43:8b:4a:5c:82:13:fd:0d:
                    9e:2e:f5:fb:95:f2:f1:b2:ae:8c:ab:05:b7:7b:b5:
                    0c:67:f4:19:a0:3a:dc:45:bf:11:53:b5:31:80:76:
                    5d:a0:ef:c7:6b:01:f1:5a:a7:a6:c1:5a:93:ba:3c:
                    39:4d:38:d6:f5:ce:8a:cd:b8:d2:29:ec:36:8e:16:
                    05:64:57:ee:13:e9:d6:df:32:2a:d4:20:11:fb:20:
                    1e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5F:AD:AF:3A:C6:FC:DB:D6:4D:59:BD:3B:0E:9D:A0:28:71:86:FB
            X509v3 Authority Key Identifier:
                keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:5e:b7:ad:06:95:85:f4:b8:4b:39:54:33:6f:b2:bf:e1:
         0c:e5:2b:c2:99:f1:c5:1a:78:85:87:dd:94:bb:0c:24:d3:c6:
         68:64:87:be:59:97:c3:1f:4f:12:44:52:10:8f:94:97:c4:a6:
         04:47:07:52:9c:23:ca:8d:95:c8:fd:42:b6:f0:a8:5a:36:69:
         00:d9:2f:69:75:84:ae:a4:7c:c8:74:d5:2f:07:d6:87:05:d4:
         87:c9:9d:75:42:84:fc:f5:f2:68:d9:d4:e7:69:44:f6:2d:46:
         2d:1e:78:df:a8:83:f7:b1:38:f4:0a:57:86:2d:b8:40:2c:27:
         f2:77:1c:a7:5e:b9:48:b9:21:c9:ec:4c:be:e6:ed:37:15:9e:
         02:3c:02:da:13:99:d5:16:c4:62:4c:02:41:51:17:93:c4:f5:
         ca:22:93:0c:78:7a:4b:d5:78:c6:df:b4:87:ee:6a:30:56:0a:
         98:0b:bd:61:fd:63:b5:d8:cf:6f:e1:74:ff:bb:6e:da:e0:2f:
         be:4a:79:cf:bf:f5:93:9d:b0:5c:5c:47:a3:0c:d4:fa:83:ce:
         92:76:24:45:d6:b2:77:ad:24:e2:f7:5e:1b:d6:ba:07:1a:c5:
         c8:21:ea:58:f3:7d:f0:3c:be:c7:5a:ec:23:67:5d:cd:fb:b2:
         0d:a3:6c:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKVo0HIAYDA5d4M7NlD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy
NGIyOGQwHhcNMjUwNDEzMTAwMTE3WhcNMjUwNDE0MTAwMTE3WjAzMTEwLwYDVQQD
EyhlYTVmYWRhZjNhYzZmY2RiZDY0ZDU5YmQzYjBlOWRhMDI4NzE4NmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6usLeugxcP8YgQezU6beXYludB2H
rztaRnh+8aIKcGn+f+MuAnP4C/mvtWTgf9031DOsCxhYZmavjAx8bew5x7N5ADxc
NLRbd0nSkqPi0A2NYg4mAxyHx1iv5Y8HFZXPpkCAEyUJw6XSK6IdudhRsJR1iUq/
JvBUT6+ErULQ8SLmHX5vHAoKuLEHp4V65SMXV1hFVR4ciT4FrMH6z8XjAuxy9z8x
8+9toO3rQ4tKXIIT/Q2eLvX7lfLxsq6MqwW3e7UMZ/QZoDrcRb8RU7UxgHZdoO/H
awHxWqemwVqTujw5TTjW9c6KzbjSKew2jhYFZFfuE+nW3zIq1CAR+yAezQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpfra86xvzb1k1ZvTsOnaAocYb7MB8GA1UdIwQY
MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt
ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw
LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwxet60G
lYX0uEs5VDNvsr/hDOUrwpnxxRp4hYfdlLsMJNPGaGSHvlmXwx9PEkRSEI+Ul8Sm
BEcHUpwjyo2VyP1CtvCoWjZpANkvaXWErqR8yHTVLwfWhwXUh8mddUKE/PXyaNnU
52lE9i1GLR5436iD97E49ApXhi24QCwn8nccp165SLkhyexMvubtNxWeAjwC2hOZ
1RbEYkwCQVEXk8T1yiKTDHh6S9V4xt+0h+5qMFYKmAu9Yf1jtdjPb+F0/7tu2uAv
vkp5z7/1k52wXFxHowzU+oPOknYkRdayd60k4vdeG9a6BxrFyCHqWPN98Dy+x1rs
I2ddzfuyDaNsGg==
-----END CERTIFICATE-----