Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
File:                     O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json)
Hash identifier:          RyVfVQLpvL/QorF0XSmh1HQv+ztwSH0Osh2U1HZSfqI=
Subject key identifier:   AB:B0:CC:5F:BE:EA:EC:8B:FB:08:63:75:A9:20:32:16:52:D0:C3:AA
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Certificate issuer:       /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial:       01962DF3A0B218AA8905C45BA41DB984B5A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
Manifest number:          0922
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: ZY3p1AfvQhEVX40RbKkTDqFc2SZD8zo9dh3b0xJ6jKY=)
                          2: w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa (hash: Ogtb5a6VjW8bSqLn3V6UgYjH3Wl670+DPbn1H5LtdUE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a0:b2:18:aa:89:05:c4:5b:a4:1d:b9:84:b5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=abb0cc5fbeeaec8bfb086375a920321652d0c3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:87:ab:2c:fd:00:42:2b:ad:f3:40:9f:d8:73:
                    78:e0:c2:16:d2:38:d8:67:fa:fb:0a:0a:c4:d1:f0:
                    96:9b:3d:a8:00:c8:7f:45:4c:67:1a:f3:fc:99:7f:
                    e9:46:b9:39:e3:2b:9d:99:1c:c0:a4:6c:6c:37:16:
                    d4:b7:f6:74:5f:d8:45:98:f4:18:ab:fd:bc:f8:5d:
                    e5:7e:96:8c:43:69:f9:30:8b:ca:e9:27:51:6d:73:
                    be:86:d5:04:f9:b5:ef:3c:07:e9:26:c6:53:52:af:
                    57:ed:45:83:6d:0d:2b:88:53:48:71:c1:88:18:75:
                    37:99:31:e5:b1:9b:fd:a3:ba:94:1a:67:bf:ee:b1:
                    e8:d7:42:85:64:d5:92:fd:db:42:f4:3f:9a:81:29:
                    aa:0a:b4:54:f6:1a:be:57:c4:ae:73:c6:c0:38:a3:
                    2e:a0:04:82:4e:0a:c6:22:1d:03:6d:1e:6c:b9:c2:
                    76:8c:7f:4d:be:b3:da:d1:6d:9f:2e:b8:94:a1:3e:
                    71:cf:5f:ce:b1:91:53:30:73:4d:60:d5:11:29:28:
                    33:79:c4:47:63:f4:b2:b5:65:71:bb:e3:1a:09:ed:
                    63:6f:c4:c1:8b:da:f7:a7:77:68:70:40:75:1e:a2:
                    e2:9b:cf:21:db:38:9a:c8:80:32:27:98:98:d3:b1:
                    a2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B0:CC:5F:BE:EA:EC:8B:FB:08:63:75:A9:20:32:16:52:D0:C3:AA
            X509v3 Authority Key Identifier:
                keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ea:cf:67:59:97:52:75:9f:bf:ac:fe:70:03:38:3a:b4:09:
         8d:91:ce:b2:27:97:a6:3b:a3:92:63:03:d1:2a:59:6d:69:ee:
         d3:b2:0c:ee:57:ae:90:89:e4:4a:df:ee:2a:32:49:0b:8a:c4:
         56:fc:91:de:d9:28:35:9d:aa:2c:28:2c:a4:eb:29:a3:42:ce:
         6d:1a:4c:4b:5f:e6:db:bc:ea:1e:20:56:38:18:03:46:cf:dd:
         fd:97:03:c4:5c:15:90:85:2a:37:45:15:da:45:97:0b:bf:b6:
         bd:c4:10:9e:90:0a:43:16:e2:63:be:d1:97:74:72:bc:da:16:
         63:85:fb:17:4c:73:fc:e7:93:59:ff:b2:6e:9c:90:58:23:b3:
         0c:11:35:9a:34:bb:43:5f:a9:6f:fa:d3:96:a0:7a:46:52:65:
         76:9f:27:8c:9a:c6:f9:05:7f:aa:70:b4:0d:9b:fd:fb:ca:06:
         24:37:1a:4e:53:2a:58:f2:c4:9d:ca:39:15:ac:bf:39:18:49:
         48:a5:e3:51:41:8f:94:d8:e0:57:ef:89:7f:55:33:14:25:61:
         9b:f6:43:db:c3:aa:34:6f:de:36:af:64:49:e4:c7:5e:43:ae:
         27:10:3d:a1:8f:39:13:93:3f:73:db:bf:fe:3b:84:b2:12:f7:
         37:4a:53:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86CyGKqJBcRbpB25hLWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZWQwMjEzNjY5ODcwMWY3NGM0OWY4YTJhOWU3M2U4NGVj
OTgxYjYwHhcNMjUwNDEzMDcwMTAzWhcNMjUwNDE0MDcwMTAzWjAzMTEwLwYDVQQD
EyhhYmIwY2M1ZmJlZWFlYzhiZmIwODYzNzVhOTIwMzIxNjUyZDBjM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIerLP0AQiut80Cf2HN44MIW0jjY
Z/r7CgrE0fCWmz2oAMh/RUxnGvP8mX/pRrk54yudmRzApGxsNxbUt/Z0X9hFmPQY
q/28+F3lfpaMQ2n5MIvK6SdRbXO+htUE+bXvPAfpJsZTUq9X7UWDbQ0riFNIccGI
GHU3mTHlsZv9o7qUGme/7rHo10KFZNWS/dtC9D+agSmqCrRU9hq+V8Suc8bAOKMu
oASCTgrGIh0DbR5sucJ2jH9NvrPa0W2fLriUoT5xz1/OsZFTMHNNYNURKSgzecRH
Y/SytWVxu+MaCe1jb8TBi9r3p3docEB1HqLim88h2ziayIAyJ5iY07GigQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuwzF++6uyL+whjdakgMhZS0MOqMB8GA1UdIwQY
MBaAFDvtAhNmmHAfdMSfiiqec+hOyYG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMt
ZWQ5OWVmNjRhZGJmLzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMtZWQ5OWVmNjRhZGJm
LzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOrPZ1mX
UnWfv6z+cAM4OrQJjZHOsieXpjujkmMD0SpZbWnu07IM7leukInkSt/uKjJJC4rE
VvyR3tkoNZ2qLCgspOspo0LObRpMS1/m27zqHiBWOBgDRs/d/ZcDxFwVkIUqN0UV
2kWXC7+2vcQQnpAKQxbiY77Rl3RyvNoWY4X7F0xz/OeTWf+ybpyQWCOzDBE1mjS7
Q1+pb/rTlqB6RlJldp8njJrG+QV/qnC0DZv9+8oGJDcaTlMqWPLEnco5Fay/ORhJ
SKXjUUGPlNjgV++Jf1UzFCVhm/ZD28OqNG/eNq9kSeTHXkOuJxA9oY85E5M/c9u/
/juEshL3N0pTcw==
-----END CERTIFICATE-----