Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/620577-dfd8-4f23-a650-83be418aa7f4/1/OExBksVwSp65aPXPUzuaH3pmYa0.mft
File:                     OExBksVwSp65aPXPUzuaH3pmYa0.mft (raw, json)
Hash identifier:          a2sr/21IRd07ysvmm4E0qj+U9kH3KdEkFaA6Z3c4TYI=
Subject key identifier:   2F:22:7C:DD:86:14:B0:19:F5:2E:4E:AB:D1:CF:7D:75:0A:E3:52:39
Authority key identifier: 38:4C:41:92:C5:70:4A:9E:B9:68:F5:CF:53:3B:9A:1F:7A:66:61:AD
Certificate issuer:       /CN=384c4192c5704a9eb968f5cf533b9a1f7a6661ad
Certificate serial:       01962E2AD9584140F6478C91168C8F9247A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OExBksVwSp65aPXPUzuaH3pmYa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/620577-dfd8-4f23-a650-83be418aa7f4/1/OExBksVwSp65aPXPUzuaH3pmYa0.mft
Manifest number:          C3
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: OExBksVwSp65aPXPUzuaH3pmYa0.crl (hash: iBLINg6WyjmrHfgyI4ZHKjWmjKqTfkkv7j33QPqPXvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d9:58:41:40:f6:47:8c:91:16:8c:8f:92:47:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384c4192c5704a9eb968f5cf533b9a1f7a6661ad
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=2f227cdd8614b019f52e4eabd1cf7d750ae35239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:76:77:4a:f7:c5:82:bc:63:06:67:64:e7:97:
                    7b:d7:60:b8:3b:da:98:87:41:6a:24:6d:49:91:e0:
                    5e:cc:51:02:8c:19:50:05:c6:72:f3:3f:a3:eb:84:
                    7a:70:d2:53:9a:89:e6:cd:48:86:9f:d5:82:9b:ee:
                    8d:b8:b3:20:c5:52:ea:10:ea:4d:e0:ca:0b:b5:c5:
                    d3:43:2c:af:5e:be:10:a6:cf:e0:e7:41:7f:2b:3a:
                    74:0f:77:d5:e7:72:aa:da:96:17:8c:99:3f:09:ff:
                    4f:e0:5c:e5:7a:8a:dc:6f:4c:42:90:8b:85:7f:11:
                    ff:55:43:23:de:27:ce:33:a2:f5:07:ab:b2:a5:aa:
                    87:cd:33:48:8f:8f:f1:43:63:10:ad:c9:ff:5d:5f:
                    d0:7c:c0:86:ef:2f:da:f9:68:0a:91:8c:4d:bd:d5:
                    c8:6b:36:1a:50:31:2c:04:a2:f6:49:2b:e9:27:87:
                    aa:95:08:a6:0b:0b:f6:cd:5e:54:4b:63:ad:8a:f8:
                    a3:0e:7b:02:07:dd:95:3e:db:54:dc:7a:36:61:94:
                    42:4a:d8:f3:85:38:4b:91:a7:80:aa:12:a1:c3:0b:
                    fc:fa:bf:51:c7:2b:32:40:56:22:c8:20:64:71:2c:
                    63:2e:79:5f:d6:26:d5:96:42:e9:80:4f:d9:e0:34:
                    01:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:22:7C:DD:86:14:B0:19:F5:2E:4E:AB:D1:CF:7D:75:0A:E3:52:39
            X509v3 Authority Key Identifier:
                keyid:38:4C:41:92:C5:70:4A:9E:B9:68:F5:CF:53:3B:9A:1F:7A:66:61:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExBksVwSp65aPXPUzuaH3pmYa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/620577-dfd8-4f23-a650-83be418aa7f4/1/OExBksVwSp65aPXPUzuaH3pmYa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/620577-dfd8-4f23-a650-83be418aa7f4/1/OExBksVwSp65aPXPUzuaH3pmYa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:68:06:43:08:22:10:a3:88:87:cc:96:16:71:7f:74:89:08:
         24:11:f3:d5:7b:e1:f8:18:35:22:2f:4e:a8:52:6b:2f:e6:e9:
         59:e5:0d:1c:80:13:73:dd:5a:27:68:22:7f:d9:41:6c:44:ca:
         6c:7b:c5:15:ef:63:35:94:79:8a:c0:d3:47:9a:fe:6d:9c:d1:
         59:16:5b:43:e5:7c:eb:75:25:6b:a8:a0:31:5d:fa:94:99:48:
         27:3f:ac:41:1e:c7:c7:4b:20:10:28:47:15:b4:95:f9:ec:e8:
         9d:ba:24:e5:86:d8:2d:2c:53:74:d1:84:93:3b:af:28:25:a2:
         07:20:99:c4:af:b2:5c:16:4d:c4:3f:87:d3:c5:8c:13:d6:3d:
         db:92:00:6e:d0:da:00:49:6f:da:53:9f:e6:c9:1b:25:19:01:
         e9:98:74:0c:b4:a7:60:9c:d8:18:04:e9:ac:0c:2e:e8:8f:cb:
         c5:20:d4:54:5c:17:5a:a0:f2:46:51:2b:af:53:2c:c9:f9:e5:
         03:be:6a:a9:67:be:56:6f:64:67:b0:9b:73:3b:57:c1:40:d7:
         eb:99:2f:51:63:9c:52:8a:a9:77:31:01:65:3d:b9:ba:c7:f0:
         37:63:57:69:3d:16:e0:a1:b0:ca:5d:5f:d8:e8:25:f6:14:72:
         55:f3:a2:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtlYQUD2R4yRFoyPkkemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NGM0MTkyYzU3MDRhOWViOTY4ZjVjZjUzM2I5YTFmN2E2
NjYxYWQwHhcNMjUwNDEzMDgwMTIyWhcNMjUwNDE0MDgwMTIyWjAzMTEwLwYDVQQD
EygyZjIyN2NkZDg2MTRiMDE5ZjUyZTRlYWJkMWNmN2Q3NTBhZTM1MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XZ3SvfFgrxjBmdk55d712C4O9qY
h0FqJG1JkeBezFECjBlQBcZy8z+j64R6cNJTmonmzUiGn9WCm+6NuLMgxVLqEOpN
4MoLtcXTQyyvXr4Qps/g50F/Kzp0D3fV53Kq2pYXjJk/Cf9P4Fzleorcb0xCkIuF
fxH/VUMj3ifOM6L1B6uypaqHzTNIj4/xQ2MQrcn/XV/QfMCG7y/a+WgKkYxNvdXI
azYaUDEsBKL2SSvpJ4eqlQimCwv2zV5US2OtivijDnsCB92VPttU3Ho2YZRCStjz
hThLkaeAqhKhwwv8+r9RxysyQFYiyCBkcSxjLnlf1ibVlkLpgE/Z4DQBaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC8ifN2GFLAZ9S5Oq9HPfXUK41I5MB8GA1UdIwQY
MBaAFDhMQZLFcEqeuWj1z1M7mh96ZmGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0V4QmtzVndTcDY1YVBYUFV6dWFIM3BtWWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MjA1NzctZGZkOC00ZjIzLWE2NTAt
ODNiZTQxOGFhN2Y0LzEvT0V4QmtzVndTcDY1YVBYUFV6dWFIM3BtWWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82MjA1NzctZGZkOC00ZjIzLWE2NTAtODNiZTQxOGFhN2Y0
LzEvT0V4QmtzVndTcDY1YVBYUFV6dWFIM3BtWWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGgGQwgi
EKOIh8yWFnF/dIkIJBHz1Xvh+Bg1Ii9OqFJrL+bpWeUNHIATc91aJ2gif9lBbETK
bHvFFe9jNZR5isDTR5r+bZzRWRZbQ+V863Ula6igMV36lJlIJz+sQR7Hx0sgEChH
FbSV+ezonbok5YbYLSxTdNGEkzuvKCWiByCZxK+yXBZNxD+H08WME9Y925IAbtDa
AElv2lOf5skbJRkB6Zh0DLSnYJzYGATprAwu6I/LxSDUVFwXWqDyRlErr1Msyfnl
A75qqWe+Vm9kZ7CbcztXwUDX65kvUWOcUoqpdzEBZT25usfwN2NXaT0W4KGwyl1f
2Ogl9hRyVfOiiA==
-----END CERTIFICATE-----