Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File:                     ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier:          TLNQbL1ez00pmYLqCahhrXT6v9SCdApxn8GOoP/iWj4=
Subject key identifier:   32:20:6E:4F:82:B4:FB:12:38:D4:4A:70:AA:33:3E:D4:3F:E6:E4:4D
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer:       /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial:       01962F0682FF74AA38FEC9445C1A29553209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: cdMOuRF7uOMr3eiWtLluBITicTo.roa (hash: 2zf3i/TaVgEDUbWisH1c3bo8xEvWjGA35Bw+WbjbFqQ=)
                          2: gPmJ919io92zLM0qUcMa5dmkecM.roa (hash: m1AiD3SH7JRse/Y0z+yKore/EQyRkJUXQ2NtfWymxSY=)
                          3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=)
                          4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: 9685ONC0CzEV2o+CS7qrXwUcd0FskpAFwD9vCz5tNTQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:82:ff:74:aa:38:fe:c9:44:5c:1a:29:55:32:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=32206e4f82b4fb1238d44a70aa333ed43fe6e44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:9e:fe:9f:09:fc:fa:7b:68:5b:bf:f8:b1:
                    28:48:39:d7:50:e9:0e:70:00:4e:ab:84:9e:57:57:
                    9c:e5:80:a8:1a:2c:55:de:ff:e1:1a:e9:e3:90:7a:
                    28:7b:73:78:5e:fe:18:48:09:47:7b:8d:76:89:f0:
                    f4:43:b9:93:72:0b:48:99:ba:88:0c:7b:7c:09:16:
                    12:4a:7d:be:3a:95:97:ff:31:e1:3e:89:9c:6f:ef:
                    63:f8:78:d0:9b:4d:79:19:a4:0e:6b:ee:27:20:b5:
                    40:25:74:24:6c:69:c9:64:e7:1f:84:37:0f:71:97:
                    45:58:0d:73:23:a2:77:78:40:18:80:d2:d8:27:d1:
                    3d:44:a5:b3:05:1c:a6:f3:42:9c:79:c3:41:e1:f7:
                    49:d4:f8:5d:60:4f:78:40:0a:11:fb:a0:91:98:c9:
                    63:0d:75:60:7f:6d:c3:d7:1c:25:68:fd:b6:2c:1b:
                    9c:8e:45:42:73:80:63:61:75:d2:c2:d5:0a:b7:d9:
                    9e:9c:3a:5d:db:4c:05:6f:60:bb:e1:35:05:8f:65:
                    13:54:b9:bb:cf:b8:30:55:11:e0:2e:01:59:c0:1d:
                    97:9f:70:34:a4:d8:65:d4:f5:a0:39:4e:81:2f:c8:
                    74:dc:8a:3e:b0:fe:1a:ae:9f:6d:fb:7b:5c:4c:49:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:20:6E:4F:82:B4:FB:12:38:D4:4A:70:AA:33:3E:D4:3F:E6:E4:4D
            X509v3 Authority Key Identifier:
                keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:24:fb:0a:16:bb:ac:67:50:eb:e7:51:1a:0d:99:20:f8:31:
         ce:43:84:16:a6:17:43:fa:9a:16:c5:72:34:7a:a7:d4:4e:51:
         2a:91:1c:58:94:cb:83:89:ff:d7:41:71:bd:e9:57:77:1f:56:
         96:0f:5a:d7:3f:68:7d:19:b5:fe:66:d3:a3:a7:12:c7:b8:d5:
         68:8f:a0:1a:e8:4e:21:9c:4f:20:73:69:49:41:64:23:4d:60:
         03:6c:46:4e:a6:6b:1b:bd:dc:fd:f1:61:0a:30:15:d8:66:0f:
         4f:54:88:e1:d3:36:36:e4:94:b9:bc:67:c6:60:7d:cc:4e:a8:
         60:e3:8f:93:e2:74:b2:b9:5e:11:12:33:32:3d:4b:0d:32:87:
         83:cc:2b:38:a9:e1:0b:81:ed:2e:5f:00:8a:8c:05:73:12:f0:
         11:95:17:a0:d7:a1:6f:03:0a:e7:c3:4d:0a:22:e4:16:46:ba:
         ec:07:6a:6d:87:8d:32:a8:08:0a:0b:87:78:ea:22:e9:57:c5:
         8c:58:67:de:ea:e1:a4:af:a9:75:cb:9d:34:8f:89:15:ef:12:
         11:f0:29:70:b3:44:e5:d1:c0:5d:7a:d6:4d:b6:22:1d:14:1d:
         41:05:2f:08:5c:2d:c0:41:55:9c:cc:3c:db:79:d9:c0:86:b2:
         f3:d9:34:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBoL/dKo4/slEXBopVTIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyODkzYTRiMjg0YWNiNWQ4YTQxNjQyODkwNDU0OTIxMDk1
MTE2ODgwHhcNMjUwNDEzMTIwMTE3WhcNMjUwNDE0MTIwMTE3WjAzMTEwLwYDVQQD
EygzMjIwNmU0ZjgyYjRmYjEyMzhkNDRhNzBhYTMzM2VkNDNmZTZlNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykye/p8J/Pp7aFu/+LEoSDnXUOkO
cABOq4SeV1ec5YCoGixV3v/hGunjkHooe3N4Xv4YSAlHe412ifD0Q7mTcgtImbqI
DHt8CRYSSn2+OpWX/zHhPomcb+9j+HjQm015GaQOa+4nILVAJXQkbGnJZOcfhDcP
cZdFWA1zI6J3eEAYgNLYJ9E9RKWzBRym80KcecNB4fdJ1PhdYE94QAoR+6CRmMlj
DXVgf23D1xwlaP22LBucjkVCc4BjYXXSwtUKt9menDpd20wFb2C74TUFj2UTVLm7
z7gwVRHgLgFZwB2Xn3A0pNhl1PWgOU6BL8h03Io+sP4arp9t+3tcTEm04QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIgbk+CtPsSONRKcKozPtQ/5uRNMB8GA1UdIwQY
MBaAFKKJOksoSstdikFkKJBFSSEJURaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgt
YTVkM2NiOTE4MjA2LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgtYTVkM2NiOTE4MjA2
LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiT7Cha7
rGdQ6+dRGg2ZIPgxzkOEFqYXQ/qaFsVyNHqn1E5RKpEcWJTLg4n/10FxvelXdx9W
lg9a1z9ofRm1/mbTo6cSx7jVaI+gGuhOIZxPIHNpSUFkI01gA2xGTqZrG73c/fFh
CjAV2GYPT1SI4dM2NuSUubxnxmB9zE6oYOOPk+J0srleERIzMj1LDTKHg8wrOKnh
C4HtLl8AiowFcxLwEZUXoNehbwMK58NNCiLkFka67AdqbYeNMqgICguHeOoi6VfF
jFhn3urhpK+pdcudNI+JFe8SEfApcLNE5dHAXXrWTbYiHRQdQQUvCFwtwEFVnMw8
23nZwIay89k0FQ==
-----END CERTIFICATE-----