Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
File:                     iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft (raw, json)
Hash identifier:          nC2x3oaZxXjsJfB88ldrjAyjTIrjF5IYT+QMP/5cuuI=
Subject key identifier:   F0:01:0B:B5:A2:39:2A:7A:D0:68:B7:03:A3:9C:71:7A:E9:F2:0E:37
Authority key identifier: 88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28
Certificate issuer:       /CN=88e882bf964f7092c43cdcf7550de9562c26a028
Certificate serial:       01962ECF603F44665BDE3725932BEE5CF56E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft
Manifest number:          013A
Signing time:             Sun 13 Apr 2025 11:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:04 +0000
Files and hashes:         1: UZVUY94sqKLEh0icWoOQh0bntwI.roa (hash: vpvG9SY3H1VjvlXeI35sSNyZFm3fdFFooAVPM0TU2c0=)
                          2: iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl (hash: EMRcGd3bCbCWhTRITQ2PpNOhTRhuTz3ag8KQMWipeBo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:60:3f:44:66:5b:de:37:25:93:2b:ee:5c:f5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e882bf964f7092c43cdcf7550de9562c26a028
        Validity
            Not Before: Apr 13 11:01:04 2025 GMT
            Not After : Apr 14 11:01:04 2025 GMT
        Subject: CN=f0010bb5a2392a7ad068b703a39c717ae9f20e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:f1:a0:df:b9:73:c1:8d:96:32:80:b8:40:
                    14:02:e4:1e:12:3c:8e:2f:61:97:d5:ea:66:75:29:
                    e6:15:c7:18:ea:06:54:a0:4e:df:10:df:c2:c9:e0:
                    ae:c8:70:cd:eb:bb:d6:40:b5:ff:2f:21:3b:e6:ef:
                    b7:6b:bf:30:b3:b1:6b:09:bb:46:84:37:09:ff:a4:
                    99:39:b1:b2:66:5a:51:a8:4f:97:48:42:f4:10:f0:
                    eb:23:c5:1e:64:98:66:2f:52:f4:5d:4b:68:1c:00:
                    e3:d5:39:89:5b:99:87:e1:35:dd:38:30:e0:e8:93:
                    aa:6f:86:a9:73:8e:eb:4f:d4:63:c6:eb:12:e6:a0:
                    d3:56:91:ac:7c:65:d0:b7:5e:50:e6:61:f6:92:e2:
                    ea:04:9e:b7:09:0b:a6:d3:c4:74:45:3d:fa:f2:ec:
                    84:b1:24:96:4c:27:1a:5e:b3:89:a4:35:25:d4:78:
                    e2:f3:17:6f:4e:f7:4f:6d:7b:ef:f3:2a:cb:22:d1:
                    a4:ae:f4:6c:55:cd:a4:f2:b9:19:c6:9a:17:ae:13:
                    f6:8f:e2:09:5e:46:9a:5a:87:c0:60:5a:14:f4:e5:
                    c9:cb:8f:bb:09:2f:ac:00:50:3f:bf:9e:02:06:c6:
                    de:6b:cc:8e:88:6e:e3:31:02:5f:fc:06:9d:18:d3:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:01:0B:B5:A2:39:2A:7A:D0:68:B7:03:A3:9C:71:7A:E9:F2:0E:37
            X509v3 Authority Key Identifier:
                keyid:88:E8:82:BF:96:4F:70:92:C4:3C:DC:F7:55:0D:E9:56:2C:26:A0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbff8f-0fcb-487d-8115-de7590f3f6b8/1/iOiCv5ZPcJLEPNz3VQ3pViwmoCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:cf:80:fa:1f:ed:87:e8:22:7a:7e:42:47:00:81:15:5b:14:
         b5:43:53:1f:af:a2:99:3f:3c:5f:f8:60:e6:32:c5:30:16:59:
         a9:27:e1:ce:93:50:48:c8:d5:2e:bc:01:8e:59:c0:bb:de:6d:
         79:72:6d:d4:54:02:bf:45:3c:03:d8:8d:5c:3c:4e:85:60:41:
         a7:b6:b2:74:75:d9:08:2e:63:5d:55:9f:62:ef:0c:7f:65:69:
         7e:ca:6e:97:7a:f9:ab:27:42:49:19:9e:fd:d9:e1:6a:db:21:
         26:30:be:70:f1:cf:57:39:1b:91:84:86:9e:1e:46:a0:aa:0f:
         59:1e:ea:93:a8:e3:20:e8:06:ff:0b:cc:2f:9e:52:7a:c4:46:
         74:c8:73:ec:61:a1:2c:d6:03:f2:42:f2:63:61:c5:ab:51:b6:
         34:b0:8e:0a:fc:c6:f2:2e:21:da:21:c7:68:f4:8b:e1:25:65:
         c4:3e:fb:a5:52:b6:75:55:fe:b0:de:77:32:0b:5b:f2:9a:4e:
         d3:fb:7f:2c:e8:ce:db:1b:ec:53:0c:e4:6e:53:94:c6:14:7d:
         8d:dd:19:7f:4d:1c:c5:f7:ef:4c:5b:bc:37:d5:a9:60:e9:e0:
         06:ba:34:2b:8c:61:81:91:c1:72:5c:2d:c5:05:bc:a1:63:bf:
         f3:25:34:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2A/RGZb3jclkyvuXPVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZTg4MmJmOTY0ZjcwOTJjNDNjZGNmNzU1MGRlOTU2MmMy
NmEwMjgwHhcNMjUwNDEzMTEwMTA0WhcNMjUwNDE0MTEwMTA0WjAzMTEwLwYDVQQD
EyhmMDAxMGJiNWEyMzkyYTdhZDA2OGI3MDNhMzljNzE3YWU5ZjIwZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywHxoN+5c8GNljKAuEAUAuQeEjyO
L2GX1epmdSnmFccY6gZUoE7fEN/CyeCuyHDN67vWQLX/LyE75u+3a78ws7FrCbtG
hDcJ/6SZObGyZlpRqE+XSEL0EPDrI8UeZJhmL1L0XUtoHADj1TmJW5mH4TXdODDg
6JOqb4apc47rT9RjxusS5qDTVpGsfGXQt15Q5mH2kuLqBJ63CQum08R0RT368uyE
sSSWTCcaXrOJpDUl1Hji8xdvTvdPbXvv8yrLItGkrvRsVc2k8rkZxpoXrhP2j+IJ
XkaaWofAYFoU9OXJy4+7CS+sAFA/v54CBsbea8yOiG7jMQJf/AadGNPgEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPABC7WiOSp60Gi3A6OccXrp8g43MB8GA1UdIwQY
MBaAFIjogr+WT3CSxDzc91UN6VYsJqAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9pQ3Y1WlBjSkxFUE56M1ZRM3BWaXdtb0NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYmZmOGYtMGZjYi00ODdkLTgxMTUt
ZGU3NTkwZjNmNmI4LzEvaU9pQ3Y1WlBjSkxFUE56M1ZRM3BWaXdtb0NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jYmZmOGYtMGZjYi00ODdkLTgxMTUtZGU3NTkwZjNmNmI4
LzEvaU9pQ3Y1WlBjSkxFUE56M1ZRM3BWaXdtb0NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATc+A+h/t
h+gien5CRwCBFVsUtUNTH6+imT88X/hg5jLFMBZZqSfhzpNQSMjVLrwBjlnAu95t
eXJt1FQCv0U8A9iNXDxOhWBBp7aydHXZCC5jXVWfYu8Mf2Vpfspul3r5qydCSRme
/dnhatshJjC+cPHPVzkbkYSGnh5GoKoPWR7qk6jjIOgG/wvML55SesRGdMhz7GGh
LNYD8kLyY2HFq1G2NLCOCvzG8i4h2iHHaPSL4SVlxD77pVK2dVX+sN53Mgtb8ppO
0/t/LOjO2xvsUwzkblOUxhR9jd0Zf00cxffvTFu8N9WpYOngBro0K4xhgZHBclwt
xQW8oWO/8yU0jQ==
-----END CERTIFICATE-----