Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File:                     oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier:          iRTAFxKCJMnLgrKG2N+YqtqTsjU4p76RuT/A6fukDg4=
Subject key identifier:   8C:7E:58:FA:CF:68:40:62:96:A5:A9:5E:83:10:34:CB:A5:A3:7A:D2
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer:       /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial:       01962F065A3486EFC1184A469FA3A70013CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number:          042F
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
                          2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: KGXmI5Z10Ein+6EE7t12IPptORQba/VUN3okf0UTuXU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5a:34:86:ef:c1:18:4a:46:9f:a3:a7:00:13:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=8c7e58facf68406296a5a95e831034cba5a37ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:78:0e:95:df:fc:81:78:ea:e7:35:6a:3c:c6:
                    4a:da:86:c8:66:b1:ec:c4:83:a9:56:b6:b5:9c:ca:
                    e1:56:ae:e8:77:da:3a:8e:a5:3d:c3:17:6a:39:8d:
                    8a:fc:9d:a5:5a:8b:e4:05:5e:dc:e4:d3:9e:12:57:
                    12:79:0c:8b:45:08:bc:92:e8:c6:bd:87:a5:2f:52:
                    1c:bc:2b:a6:1d:e3:6f:d4:9e:1b:83:aa:1b:91:29:
                    8f:7c:78:97:39:7f:75:df:a4:1c:56:25:1c:c2:ed:
                    7f:d7:5d:ac:f8:f3:2b:07:b0:b3:06:64:75:de:9c:
                    3b:e5:ad:94:47:bc:7c:3b:81:51:ee:5b:90:00:e1:
                    77:08:29:33:ed:22:f0:3f:b2:21:93:fb:2d:c6:15:
                    a8:c0:ce:07:99:e8:5d:0f:81:0f:ef:55:df:69:d9:
                    16:c6:ab:5f:c5:13:95:bc:fe:5c:3f:53:ae:bc:df:
                    a6:ec:d1:74:f7:b1:72:46:1c:be:7f:95:ce:fa:fd:
                    b8:e0:95:a5:95:44:2f:e0:4d:d8:a6:b4:24:ec:0f:
                    55:dc:2e:23:9e:f7:91:4d:12:b7:5c:78:3d:e6:70:
                    78:3d:cc:70:fb:36:48:68:41:19:ee:fb:01:09:ea:
                    34:b0:c5:bf:30:eb:ac:33:65:56:61:b7:ae:34:f3:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7E:58:FA:CF:68:40:62:96:A5:A9:5E:83:10:34:CB:A5:A3:7A:D2
            X509v3 Authority Key Identifier:
                keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ff:73:e7:a9:24:a8:2b:bc:67:f5:14:8c:59:31:bd:6e:1b:
         6c:f5:c1:cd:9e:74:2b:70:cf:38:8d:82:36:c6:27:e4:25:f0:
         6f:da:de:81:75:e8:28:f8:42:8c:70:a9:fc:8a:3b:37:d2:f7:
         10:8b:d2:63:81:d8:66:d2:3a:e5:b0:20:10:43:34:02:c4:cc:
         0b:9e:3d:b9:27:a2:50:7b:b3:f3:1c:7b:fe:54:82:64:a9:39:
         79:f9:8e:a5:8d:94:b6:c1:af:db:86:db:5f:70:0f:7f:64:39:
         da:bd:4b:9b:4a:48:c1:85:63:40:68:fd:a1:fb:97:27:27:c0:
         fb:56:fb:dc:fd:ab:e3:0a:60:30:2e:01:4f:80:20:6a:d3:8a:
         23:18:3a:4a:f2:a7:2c:30:cc:89:47:e4:70:af:2a:f8:a8:9f:
         5f:0f:3a:4b:ba:66:25:10:f1:24:13:5c:b3:8b:9f:f0:75:09:
         8f:e0:88:f5:41:de:2a:01:2e:c6:e2:a6:ab:07:5e:5c:cd:97:
         8f:50:5d:88:b2:7d:df:56:4f:fa:e7:cb:8a:73:ef:89:6b:62:
         f5:1b:d0:02:ed:f8:71:41:d2:ab:e3:41:33:7a:d0:9e:a4:3a:
         cc:55:96:93:97:d2:6c:c3:28:68:52:a7:22:0d:46:fb:ae:81:
         33:62:59:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlo0hu/BGEpGn6OnABPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTU1YmYyODg4NzUzZTQ0Njc1YjYxZGRhMzAzOTRkOTAx
NTZjMGEwHhcNMjUwNDEzMTIwMTA3WhcNMjUwNDE0MTIwMTA3WjAzMTEwLwYDVQQD
Eyg4YzdlNThmYWNmNjg0MDYyOTZhNWE5NWU4MzEwMzRjYmE1YTM3YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3gOld/8gXjq5zVqPMZK2obIZrHs
xIOpVra1nMrhVq7od9o6jqU9wxdqOY2K/J2lWovkBV7c5NOeElcSeQyLRQi8kujG
vYelL1IcvCumHeNv1J4bg6obkSmPfHiXOX9136QcViUcwu1/112s+PMrB7CzBmR1
3pw75a2UR7x8O4FR7luQAOF3CCkz7SLwP7Ihk/stxhWowM4HmehdD4EP71XfadkW
xqtfxROVvP5cP1OuvN+m7NF097FyRhy+f5XO+v244JWllUQv4E3YprQk7A9V3C4j
nveRTRK3XHg95nB4Pcxw+zZIaEEZ7vsBCeo0sMW/MOusM2VWYbeuNPMX/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx+WPrPaEBilqWpXoMQNMulo3rSMB8GA1UdIwQY
MBaAFKGlW/KIh1PkRnW2HdowOU2QFWwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQt
MjdjOWQ5MTE0MjM4LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yZGFiMTgtN2JiNy00YWExLTk4YWQtMjdjOWQ5MTE0MjM4
LzEvb2FWYjhvaUhVLVJHZGJZZDJqQTVUWkFWYkFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARP9z56kk
qCu8Z/UUjFkxvW4bbPXBzZ50K3DPOI2CNsYn5CXwb9regXXoKPhCjHCp/Io7N9L3
EIvSY4HYZtI65bAgEEM0AsTMC549uSeiUHuz8xx7/lSCZKk5efmOpY2UtsGv24bb
X3APf2Q52r1Lm0pIwYVjQGj9ofuXJyfA+1b73P2r4wpgMC4BT4AgatOKIxg6SvKn
LDDMiUfkcK8q+KifXw86S7pmJRDxJBNcs4uf8HUJj+CI9UHeKgEuxuKmqwdeXM2X
j1BdiLJ931ZP+ufLinPviWti9RvQAu34cUHSq+NBM3rQnqQ6zFWWk5fSbMMoaFKn
Ig1G+66BM2JZlA==
-----END CERTIFICATE-----