Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
File:                     dlOpinSeVpdEoe3iyUDy5DPEQIo.mft (raw, json)
Hash identifier:          viuqtIH7sAGKLsUHyA4e7zYlykWLEDY8WdZelqr9yp8=
Subject key identifier:   B5:BD:C8:7E:9D:A0:80:5D:02:AE:61:63:89:38:BD:2D:02:14:A0:1C
Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
Certificate issuer:       /CN=7653a98a749e569744a1ede2c940f2e433c4408a
Certificate serial:       01962E995F60B287DD6A88F9F5AEC514DDC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
Manifest number:          087A
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: dlOpinSeVpdEoe3iyUDy5DPEQIo.crl (hash: Iv0pSwwPxVxEDEH76TnDhLTmj1GCSkjtEVvfvCUkUhU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5f:60:b2:87:dd:6a:88:f9:f5:ae:c5:14:dd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=b5bdc87e9da0805d02ae61638938bd2d0214a01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:8e:9a:ec:db:28:3a:34:06:f2:9d:7b:ab:
                    30:44:65:b7:ca:16:18:bc:96:37:25:a6:4e:99:41:
                    5e:e3:41:c6:4c:1d:80:10:5b:b4:b1:71:0b:fc:e5:
                    8a:c4:04:d4:dc:3a:d2:70:85:6e:1c:08:ce:9d:48:
                    ca:b6:ab:c0:26:ee:3a:da:aa:c2:b0:ec:b3:60:a8:
                    00:c9:fc:c2:5f:57:40:0c:57:0b:57:17:5b:cb:ad:
                    e6:d8:70:db:90:a2:db:6c:01:d3:ac:81:2b:e3:1e:
                    b5:97:23:09:8b:19:ce:ad:18:1f:13:18:dc:1f:b8:
                    83:55:8c:85:be:e4:84:6d:66:37:11:8d:1f:1b:ac:
                    b8:2d:79:1f:19:ec:c0:58:fe:34:43:84:af:84:02:
                    cb:36:26:1b:50:c4:05:9a:28:67:15:dc:41:e7:03:
                    9a:b5:d8:43:74:f9:f3:e3:99:32:bb:92:a4:c6:03:
                    0c:71:51:0d:07:db:4d:7d:0d:f3:5a:81:05:90:b9:
                    b8:68:ab:0e:58:e5:d5:d7:07:d5:9c:dc:02:f5:2a:
                    df:b5:e4:36:70:47:ef:95:29:57:fb:36:97:1d:69:
                    13:aa:ba:bb:fe:ac:c9:e2:7c:27:4e:ce:d5:2c:63:
                    ce:1e:a5:b5:56:aa:bb:56:0c:be:d1:08:34:01:01:
                    7a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BD:C8:7E:9D:A0:80:5D:02:AE:61:63:89:38:BD:2D:02:14:A0:1C
            X509v3 Authority Key Identifier:
                keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fe:99:30:4d:4b:6a:6e:9c:d9:34:06:49:26:79:c8:08:4c:
         17:42:5f:e0:dc:f6:04:55:b6:0d:37:db:17:a3:93:81:33:f1:
         c9:93:ce:d3:6d:7d:0d:25:ce:0a:f3:e6:ef:b0:6e:7e:47:e2:
         29:15:2e:d9:1b:f6:36:76:c6:58:4e:c5:e6:d4:7c:77:7c:6a:
         ee:32:c2:b7:e4:4f:b2:ec:41:ac:74:b6:8c:55:29:ef:f2:f8:
         3e:bb:05:43:9a:2d:61:18:fa:a5:a7:e9:a4:6b:b5:f7:2f:a8:
         58:6e:3f:0e:bb:4d:b6:94:0c:d6:43:1b:12:54:3c:5f:9f:a9:
         42:52:1a:68:b7:86:42:64:6f:a7:e0:5f:85:71:07:f0:e5:e2:
         5c:c6:10:d1:bf:92:3b:e8:e6:b2:d7:dc:d8:67:05:e8:f3:cd:
         ed:88:7d:f9:bc:13:04:28:1b:fd:1a:19:89:4e:c5:d8:93:40:
         ea:0d:ba:f7:c8:fd:f4:bc:87:fe:bb:af:18:ab:ae:01:ed:e7:
         1e:d0:8d:de:a2:6c:f8:2e:20:64:cd:9f:19:11:e1:0c:15:cd:
         0c:b9:b3:13:bf:8a:92:53:40:b9:47:e7:48:fd:27:a8:8e:45:
         2f:a5:d4:e6:ff:3c:4a:e9:72:42:b0:00:9a:22:66:50:af:1c:
         86:87:1b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumV9gsofdaoj59a7FFN3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NTNhOThhNzQ5ZTU2OTc0NGExZWRlMmM5NDBmMmU0MzNj
NDQwOGEwHhcNMjUwNDEzMTAwMjA1WhcNMjUwNDE0MTAwMjA1WjAzMTEwLwYDVQQD
EyhiNWJkYzg3ZTlkYTA4MDVkMDJhZTYxNjM4OTM4YmQyZDAyMTRhMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00WOmuzbKDo0BvKde6swRGW3yhYY
vJY3JaZOmUFe40HGTB2AEFu0sXEL/OWKxATU3DrScIVuHAjOnUjKtqvAJu462qrC
sOyzYKgAyfzCX1dADFcLVxdby63m2HDbkKLbbAHTrIEr4x61lyMJixnOrRgfExjc
H7iDVYyFvuSEbWY3EY0fG6y4LXkfGezAWP40Q4SvhALLNiYbUMQFmihnFdxB5wOa
tdhDdPnz45kyu5KkxgMMcVENB9tNfQ3zWoEFkLm4aKsOWOXV1wfVnNwC9SrfteQ2
cEfvlSlX+zaXHWkTqrq7/qzJ4nwnTs7VLGPOHqW1Vqq7Vgy+0Qg0AQF6zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLW9yH6doIBdAq5hY4k4vS0CFKAcMB8GA1UdIwQY
MBaAFHZTqYp0nlaXRKHt4slA8uQzxECKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NjE1OTItYjFjMi00OTVmLWI1YTEt
YjlkYzJmMmIwMDJjLzEvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84NjE1OTItYjFjMi00OTVmLWI1YTEtYjlkYzJmMmIwMDJj
LzEvZGxPcGluU2VWcGRFb2UzaXlVRHk1RFBFUUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/6ZME1L
am6c2TQGSSZ5yAhMF0Jf4Nz2BFW2DTfbF6OTgTPxyZPO0219DSXOCvPm77Bufkfi
KRUu2Rv2NnbGWE7F5tR8d3xq7jLCt+RPsuxBrHS2jFUp7/L4PrsFQ5otYRj6pafp
pGu19y+oWG4/DrtNtpQM1kMbElQ8X5+pQlIaaLeGQmRvp+BfhXEH8OXiXMYQ0b+S
O+jmstfc2GcF6PPN7Yh9+bwTBCgb/RoZiU7F2JNA6g2698j99LyH/ruvGKuuAe3n
HtCN3qJs+C4gZM2fGRHhDBXNDLmzE7+KklNAuUfnSP0nqI5FL6XU5v88SulyQrAA
miJmUK8chocbQQ==
-----END CERTIFICATE-----