Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
File:                     OwzUTrvj0NagcudRA_IxYGmV9qs.mft (raw, json)
Hash identifier:          SIrHFJG/F0thfAnGvwq9p1fHKijM/rTze2Fg751H7ng=
Subject key identifier:   26:A7:AB:84:82:47:8C:92:09:9C:E8:78:9A:AB:0F:82:B7:7F:C2:48
Authority key identifier: 3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB
Certificate issuer:       /CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
Certificate serial:       01962DF41E70B273FFB9FF5DB1FB9521B995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 1_qLHUdqm7sR0Q8q1colm3DejS0.roa (hash: EM08EWb/b5Ix5jQ35FhICifQx6j5GDireNgAsuw6f8M=)
                          2: OwzUTrvj0NagcudRA_IxYGmV9qs.crl (hash: nv0q3dEIRHjo98Kg7l+uSPwQKIGNmfVOxS6AXnEXyrM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1e:70:b2:73:ff:b9:ff:5d:b1:fb:95:21:b9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b0cd44ebbe3d0d6a072e75103f231606995f6ab
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=26a7ab8482478c92099ce8789aab0f82b77fc248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:98:1e:99:d8:f3:52:1c:61:2a:82:32:34:
                    0a:75:bd:c2:03:bd:cd:11:f7:9a:8a:47:6e:68:06:
                    a0:27:4f:28:02:a6:0e:16:11:28:3d:77:f9:49:cd:
                    31:88:9b:ef:7a:f4:a6:28:bd:06:ca:a9:cd:d7:09:
                    56:75:ad:0e:64:7d:54:f1:7a:ae:58:5a:c6:cc:80:
                    d0:1c:9f:83:b3:cd:07:60:98:23:f5:83:d5:84:32:
                    94:32:b2:ac:01:ba:16:80:a1:66:c3:8c:89:e6:11:
                    22:28:16:49:dd:20:36:4a:6f:0a:b2:d1:51:22:21:
                    5a:0b:6c:06:31:51:5e:5c:4a:73:39:ca:c7:d3:08:
                    02:a3:6c:40:ff:68:6f:d3:44:ad:3e:82:12:7d:30:
                    74:2c:7d:85:ed:58:68:ea:6f:2e:53:b0:7c:ac:31:
                    d8:fb:45:75:ee:5b:c7:67:c3:97:47:ee:eb:ef:f8:
                    aa:a6:df:cf:4b:62:9a:db:fe:78:bd:06:43:57:a1:
                    23:de:5a:db:d9:34:7c:37:23:88:34:a7:63:12:b5:
                    af:29:6a:ed:16:c9:dd:be:0e:f9:7b:71:d2:a1:32:
                    e7:1f:11:86:5d:75:5d:7d:2f:8a:c2:80:75:64:5a:
                    be:e4:7a:a5:38:f1:db:da:7f:97:95:e3:a9:0a:58:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A7:AB:84:82:47:8C:92:09:9C:E8:78:9A:AB:0F:82:B7:7F:C2:48
            X509v3 Authority Key Identifier:
                keyid:3B:0C:D4:4E:BB:E3:D0:D6:A0:72:E7:51:03:F2:31:60:69:95:F6:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwzUTrvj0NagcudRA_IxYGmV9qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/971f08-e57c-408a-b776-f7da3b8732bf/1/OwzUTrvj0NagcudRA_IxYGmV9qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:09:4f:fb:4f:53:0a:eb:ed:6a:5b:f6:cb:24:2d:5f:d9:8a:
         03:92:ac:00:94:a5:e4:e4:76:c1:2f:45:9f:d3:1f:35:59:f0:
         d3:90:0f:ab:e0:12:c8:67:d9:56:20:54:37:b9:8c:a6:c1:52:
         f4:7b:a4:71:be:ee:11:d1:d7:80:f6:15:7d:c8:03:98:86:94:
         04:51:a7:d8:be:c8:74:bf:cc:c6:b1:6c:a8:31:77:36:05:b0:
         83:13:e8:18:8f:80:a7:31:27:3b:20:ed:45:2b:a5:66:d5:dc:
         b7:5c:c2:03:68:85:fd:8f:a3:8e:c6:5e:7a:f2:b2:30:d6:1c:
         3e:28:b6:fd:6d:c3:95:3c:97:42:84:d4:fd:9b:89:1d:6c:86:
         83:45:95:20:d4:f3:80:44:10:ab:c3:79:0e:c7:7c:60:d2:0e:
         52:92:99:2f:4f:0e:04:3f:45:30:e6:90:57:d9:73:6f:46:29:
         f7:b5:5c:8c:f9:92:b0:77:db:cf:8a:4b:04:24:b8:9e:0e:bf:
         c2:27:18:6a:86:63:90:21:9d:77:4d:27:5b:cd:03:eb:ec:28:
         80:c6:a5:e8:23:ab:9f:80:7d:5c:e6:f3:ba:b9:41:2c:ec:29:
         9c:bd:2f:cc:b6:f9:ad:44:fc:f7:d3:29:b6:1e:5b:c6:b9:d8:
         e4:30:50:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9B5wsnP/uf9dsfuVIbmVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGNkNDRlYmJlM2QwZDZhMDcyZTc1MTAzZjIzMTYwNjk5
NWY2YWIwHhcNMjUwNDEzMDcwMTM1WhcNMjUwNDE0MDcwMTM1WjAzMTEwLwYDVQQD
EygyNmE3YWI4NDgyNDc4YzkyMDk5Y2U4Nzg5YWFiMGY4MmI3N2ZjMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpOYHpnY81IcYSqCMjQKdb3CA73N
EfeaikduaAagJ08oAqYOFhEoPXf5Sc0xiJvvevSmKL0GyqnN1wlWda0OZH1U8Xqu
WFrGzIDQHJ+Ds80HYJgj9YPVhDKUMrKsAboWgKFmw4yJ5hEiKBZJ3SA2Sm8KstFR
IiFaC2wGMVFeXEpzOcrH0wgCo2xA/2hv00StPoISfTB0LH2F7Vho6m8uU7B8rDHY
+0V17lvHZ8OXR+7r7/iqpt/PS2Ka2/54vQZDV6Ej3lrb2TR8NyOINKdjErWvKWrt
Fsndvg75e3HSoTLnHxGGXXVdfS+KwoB1ZFq+5HqlOPHb2n+XleOpClhKGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCanq4SCR4ySCZzoeJqrD4K3f8JIMB8GA1UdIwQY
MBaAFDsM1E6749DWoHLnUQPyMWBplfarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYt
ZjdkYTNiODczMmJmLzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85NzFmMDgtZTU3Yy00MDhhLWI3NzYtZjdkYTNiODczMmJm
LzEvT3d6VVRydmowTmFnY3VkUkFfSXhZR21WOXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwlP+09T
Cuvtalv2yyQtX9mKA5KsAJSl5OR2wS9Fn9MfNVnw05APq+ASyGfZViBUN7mMpsFS
9Hukcb7uEdHXgPYVfcgDmIaUBFGn2L7IdL/MxrFsqDF3NgWwgxPoGI+ApzEnOyDt
RSulZtXct1zCA2iF/Y+jjsZeevKyMNYcPii2/W3DlTyXQoTU/ZuJHWyGg0WVINTz
gEQQq8N5Dsd8YNIOUpKZL08OBD9FMOaQV9lzb0Yp97VcjPmSsHfbz4pLBCS4ng6/
wicYaoZjkCGdd00nW80D6+wogMal6COrn4B9XObzurlBLOwpnL0vzLb5rUT899Mp
th5bxrnY5DBQkg==
-----END CERTIFICATE-----