Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
File:                     oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json)
Hash identifier:          3TfesnuO+KAXNwn3WvmWJg8iz42wI8MvO3jbKo/D+mg=
Subject key identifier:   F0:AB:2E:A9:F3:CA:73:A7:A9:88:78:1D:E8:79:B8:3D:C5:A3:26:A8
Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
Certificate issuer:       /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Certificate serial:       01962F74C82F504F0BDF9B09B564746EB61F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
Manifest number:          0D
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: BnZZFr8Nj/o11ieojkFaDfUMXWbuRMk0qLFpvyE8mmQ=)
                          2: sT1fnBcommpqYG28Wvu_VZnisuk.roa (hash: bgoEmCHH3xYPTJAnecz6TfwkrZtOdQNWaY0Or/vvOhw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c8:2f:50:4f:0b:df:9b:09:b5:64:74:6e:b6:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=f0ab2ea9f3ca73a7a988781de879b83dc5a326a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:71:27:fc:38:21:ce:8e:26:a7:83:28:61:18:
                    16:cd:2a:d0:54:bc:f5:0b:b2:6c:44:31:45:36:91:
                    07:95:a7:5f:0c:ad:b6:06:32:87:bc:91:ea:3c:e6:
                    63:d8:5d:f1:c1:91:dc:7b:ff:fb:07:50:bb:ef:a7:
                    3d:c8:88:08:20:f9:36:d5:bb:64:76:a8:3b:53:ba:
                    09:c1:cd:c9:c2:0d:92:2c:e0:d3:04:90:61:1e:eb:
                    55:68:fb:26:1e:59:90:d0:04:c7:45:69:48:bc:75:
                    52:7b:67:3b:9c:45:03:9d:3a:dd:6f:13:54:f8:37:
                    fc:a0:0d:02:b2:51:28:f1:70:4c:61:c8:96:22:7e:
                    2a:40:78:bb:50:14:db:22:b8:05:c4:f0:46:a7:ee:
                    e3:da:fd:04:28:1f:97:01:60:3c:c6:80:1d:22:fe:
                    bb:6b:a5:55:b9:de:6e:a8:4a:cc:75:1e:cd:c0:08:
                    f3:45:ca:a6:30:88:ae:5c:80:0a:35:09:71:02:d3:
                    63:05:fc:df:f9:02:80:7e:0c:9d:8a:16:eb:be:fd:
                    00:d0:c8:b5:2d:36:d8:9b:e0:45:95:3c:c5:d2:92:
                    02:4f:57:af:41:c8:1e:0c:b3:bb:19:d4:b8:a3:b3:
                    b6:c6:24:22:75:70:89:99:bb:1a:14:38:8b:63:eb:
                    d4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AB:2E:A9:F3:CA:73:A7:A9:88:78:1D:E8:79:B8:3D:C5:A3:26:A8
            X509v3 Authority Key Identifier:
                keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:1b:47:39:25:2a:77:6f:2e:12:7c:58:bb:08:ed:75:96:
         a9:d0:9f:8f:f5:5b:24:fd:1e:bf:48:0b:21:7f:b1:86:69:b5:
         3a:54:f7:91:ec:60:98:68:b4:56:7a:24:7c:0d:30:e2:45:f9:
         a7:fc:73:14:e0:bb:3f:22:5b:bd:a1:73:0d:1f:fb:a7:3c:24:
         04:29:75:ca:b5:7e:e5:db:05:53:cf:e2:ab:2c:7c:23:0d:ef:
         c8:d2:a7:32:37:0f:7d:d1:0d:ca:82:0f:dd:97:12:f7:57:c9:
         64:05:93:25:7f:0d:a5:98:a2:05:8d:af:a6:f5:84:2c:34:a3:
         15:03:73:22:bf:04:ac:10:4e:35:28:3f:a1:fa:9a:ff:06:b2:
         2c:e7:3f:21:e2:60:06:c9:b6:93:fe:68:31:4e:23:8f:08:8c:
         48:b9:5e:dd:3b:83:f6:ef:14:62:c5:d1:c1:a9:d1:84:9b:1c:
         52:c0:4d:45:49:b4:00:c9:84:0d:96:26:67:21:ae:91:ef:17:
         37:da:04:4a:48:5c:bf:30:fb:d3:86:6f:b4:0b:71:f1:f9:66:
         b4:b7:b8:88:e3:7c:85:e8:dc:2b:34:ea:01:3a:84:8b:eb:f0:
         3e:47:be:bf:27:69:c1:56:f0:47:65:a0:6c:d6:66:c7:27:5d:
         ae:58:4e:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMgvUE8L35sJtWR0brYfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmFhODBiMzEwYTRhZWVkMmMyMzNjZmU3ODJjNGYzNzlh
NjYyMDAwHhcNMjUwNDEzMTQwMTQ0WhcNMjUwNDE0MTQwMTQ0WjAzMTEwLwYDVQQD
EyhmMGFiMmVhOWYzY2E3M2E3YTk4ODc4MWRlODc5YjgzZGM1YTMyNmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73En/Dghzo4mp4MoYRgWzSrQVLz1
C7JsRDFFNpEHladfDK22BjKHvJHqPOZj2F3xwZHce//7B1C776c9yIgIIPk21btk
dqg7U7oJwc3Jwg2SLODTBJBhHutVaPsmHlmQ0ATHRWlIvHVSe2c7nEUDnTrdbxNU
+Df8oA0CslEo8XBMYciWIn4qQHi7UBTbIrgFxPBGp+7j2v0EKB+XAWA8xoAdIv67
a6VVud5uqErMdR7NwAjzRcqmMIiuXIAKNQlxAtNjBfzf+QKAfgydihbrvv0A0Mi1
LTbYm+BFlTzF0pICT1evQcgeDLO7GdS4o7O2xiQidXCJmbsaFDiLY+vUkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCrLqnzynOnqYh4Heh5uD3FoyaoMB8GA1UdIwQY
MBaAFKC6qAsxCkru0sIzz+eCxPN5pmIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ODg5MTUtNjk4Ny00MTAyLWFlNGQt
MDJkNTQ4MTJjYzZlLzEvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84ODg5MTUtNjk4Ny00MTAyLWFlNGQtMDJkNTQ4MTJjYzZl
LzEvb0xxb0N6RUtTdTdTd2pQUDU0TEU4M21tWWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAegbRzkl
KndvLhJ8WLsI7XWWqdCfj/VbJP0ev0gLIX+xhmm1OlT3kexgmGi0VnokfA0w4kX5
p/xzFOC7PyJbvaFzDR/7pzwkBCl1yrV+5dsFU8/iqyx8Iw3vyNKnMjcPfdENyoIP
3ZcS91fJZAWTJX8NpZiiBY2vpvWELDSjFQNzIr8ErBBONSg/ofqa/wayLOc/IeJg
Bsm2k/5oMU4jjwiMSLle3TuD9u8UYsXRwanRhJscUsBNRUm0AMmEDZYmZyGuke8X
N9oESkhcvzD704ZvtAtx8flmtLe4iON8hejcKzTqATqEi+vwPke+vydpwVbwR2Wg
bNZmxyddrlhORQ==
-----END CERTIFICATE-----