Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File:                     oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier:          bmM3B7G4urYmFw00rwmY53hQOYcL4nQxPeTOXCsA010=
Subject key identifier:   F4:57:50:3D:C7:44:73:E3:73:CB:98:4E:20:98:9C:3A:B8:89:E7:64
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer:       /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial:       01962FAB5314B39999301D9AF285C594DB56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number:          0EB2
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: _RMv1Q7O2CnoWhcrAcn90ZX5USk.roa (hash: I2FYErDanPUJADaKO92Q6jyRK2EK15cN4Qdxt/bs9vQ=)
                          2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: 4oGfRXZdLwZoTt/MSV/DlPv1MKu/5+LCQFw+h34oy40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:53:14:b3:99:99:30:1d:9a:f2:85:c5:94:db:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=f457503dc74473e373cb984e20989c3ab889e764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:2f:9c:d7:6e:36:45:2f:9a:f6:c4:65:2a:
                    98:3f:ab:76:3c:d7:19:58:9f:74:3a:95:09:c6:ce:
                    b3:ed:e1:36:ef:00:7e:81:06:5f:ee:d1:b1:dc:02:
                    fc:b2:4d:ec:cb:b8:1a:c9:42:70:b7:5b:8d:24:25:
                    56:20:75:68:25:32:cc:5e:9f:2e:f6:11:6c:a1:44:
                    0a:25:e2:58:98:be:a1:51:c5:b8:84:a1:07:0c:8c:
                    2f:85:d9:75:80:86:a1:75:a9:29:74:18:a8:17:21:
                    52:fa:e3:c3:8b:60:0e:28:f5:1e:a7:11:cb:66:15:
                    5f:c5:b5:9f:93:1c:a6:5f:37:57:a6:20:8c:1e:f7:
                    8f:b8:b5:71:6f:98:03:29:19:c5:ca:66:86:84:80:
                    c8:9c:5e:7c:89:2e:58:2a:1a:e8:63:46:84:8e:b4:
                    ac:52:65:da:5b:52:1b:5c:c3:9b:89:e2:fa:33:7d:
                    a0:96:64:e3:ee:26:d8:80:d7:60:53:25:fa:a0:55:
                    53:32:06:f0:b4:38:20:38:a9:7e:71:f5:c2:c2:35:
                    ad:05:e8:af:4a:83:f4:a0:aa:8e:fc:4a:59:a7:3f:
                    24:b1:66:e5:9f:be:0c:3b:2c:65:5b:10:28:7c:b0:
                    47:52:07:d4:64:1a:1b:bd:77:5d:45:b7:9c:10:3c:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:57:50:3D:C7:44:73:E3:73:CB:98:4E:20:98:9C:3A:B8:89:E7:64
            X509v3 Authority Key Identifier:
                keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:75:0a:40:ba:ef:fd:e5:23:ad:92:32:6d:28:ce:cf:33:d6:
         25:3b:06:c3:39:e7:18:3e:33:09:e8:49:40:39:37:67:73:46:
         6a:b7:57:ca:e1:89:6e:14:4a:34:59:95:d0:75:10:00:52:71:
         ad:dc:90:2f:29:cb:26:cb:8d:b1:65:b0:fe:e6:68:fd:57:0e:
         b0:fc:bb:38:9a:d2:7a:67:5c:cb:68:d1:89:a7:1a:53:4f:fc:
         31:09:9b:ff:d4:d4:a7:fd:ec:49:c2:dc:b1:7b:b8:73:67:21:
         f7:a0:b4:24:ee:e7:8b:d9:30:15:15:67:0b:bd:69:1e:11:35:
         ca:f0:2b:ce:fc:c7:23:67:38:95:88:8d:38:8c:55:0c:9a:c8:
         f7:58:30:d5:e6:88:49:da:42:9c:9e:a6:67:ad:2f:d0:e3:1e:
         8f:13:f6:ce:22:2c:46:bc:67:80:99:bf:f4:b6:fd:e5:3e:67:
         48:4a:2b:cd:c4:d0:19:24:7d:59:0c:10:65:89:ae:41:c3:78:
         03:ad:f6:ad:17:82:ab:e8:fe:92:9a:7a:0a:a4:61:d0:24:96:
         c4:37:82:be:3d:34:14:14:45:8e:7f:b8:ad:7e:45:e6:f9:aa:
         f2:87:91:b4:1e:87:2a:86:83:84:e8:25:ca:1b:6f:3b:3a:3c:
         b6:ad:0f:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1MUs5mZMB2a8oXFlNtWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNzE1NzFjOGUxMGI0MTlkN2EzYmYzNmUxMDg1ZmZkNWNk
NzhhOTgwHhcNMjUwNDEzMTUwMTE5WhcNMjUwNDE0MTUwMTE5WjAzMTEwLwYDVQQD
EyhmNDU3NTAzZGM3NDQ3M2UzNzNjYjk4NGUyMDk4OWMzYWI4ODllNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO0vnNduNkUvmvbEZSqYP6t2PNcZ
WJ90OpUJxs6z7eE27wB+gQZf7tGx3AL8sk3sy7gayUJwt1uNJCVWIHVoJTLMXp8u
9hFsoUQKJeJYmL6hUcW4hKEHDIwvhdl1gIahdakpdBioFyFS+uPDi2AOKPUepxHL
ZhVfxbWfkxymXzdXpiCMHvePuLVxb5gDKRnFymaGhIDInF58iS5YKhroY0aEjrSs
UmXaW1IbXMObieL6M32glmTj7ibYgNdgUyX6oFVTMgbwtDggOKl+cfXCwjWtBeiv
SoP0oKqO/EpZpz8ksWbln74MOyxlWxAofLBHUgfUZBobvXddRbecEDybwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRXUD3HRHPjc8uYTiCYnDq4iedkMB8GA1UdIwQY
MBaAFKBxVxyOELQZ16O/NuEIX/1c14qYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2Yt
MGMxZjY5YjdhZWU3LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9jMjgyOWYtYjNlZC00NGQzLWE1Y2YtMGMxZjY5YjdhZWU3
LzEvb0hGWEhJNFF0Qm5Ybzc4MjRRaGZfVnpYaXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXUKQLrv
/eUjrZIybSjOzzPWJTsGwznnGD4zCehJQDk3Z3NGardXyuGJbhRKNFmV0HUQAFJx
rdyQLynLJsuNsWWw/uZo/VcOsPy7OJrSemdcy2jRiacaU0/8MQmb/9TUp/3sScLc
sXu4c2ch96C0JO7ni9kwFRVnC71pHhE1yvArzvzHI2c4lYiNOIxVDJrI91gw1eaI
SdpCnJ6mZ60v0OMejxP2ziIsRrxngJm/9Lb95T5nSEorzcTQGSR9WQwQZYmuQcN4
A632rReCq+j+kpp6CqRh0CSWxDeCvj00FBRFjn+4rX5F5vmq8oeRtB6HKoaDhOgl
yhtvOzo8tq0Pkg==
-----END CERTIFICATE-----