Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File:                     o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier:          Zbfi9L5oGXfdJ4TrazDVlmFjcFknslOcOdeAbAist3w=
Subject key identifier:   E1:A8:F1:87:29:3D:8D:4E:5C:8B:4D:19:B5:B7:C0:CA:15:73:6E:EA
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer:       /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial:       01962E987F66CD765D2D00C0D056209C8583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: vsQlySr90ArCQ/iY7B2t2t8Y0hlFjO9drjqJyYbsUBc=)
                          2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7f:66:cd:76:5d:2d:00:c0:d0:56:20:9c:85:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=e1a8f187293d8d4e5c8b4d19b5b7c0ca15736eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c5:f3:1d:ae:fd:65:dd:a6:b4:07:47:1f:a0:
                    53:6e:9c:16:74:ba:f3:cd:74:2f:44:58:f4:67:62:
                    78:54:51:89:a6:6b:25:f0:0a:e9:50:d1:c4:45:4d:
                    11:a9:5f:e8:2b:e3:d9:57:65:99:8a:99:88:45:77:
                    0a:38:94:15:29:28:72:e6:2a:ee:a6:a2:fd:f4:48:
                    d9:d6:6a:e2:eb:fa:b9:11:0c:70:18:8e:3c:30:9f:
                    6d:87:0d:66:9b:1b:85:c8:98:0e:5f:e2:36:6e:81:
                    df:d1:43:9a:ab:28:7a:b2:10:8c:43:5a:fb:56:29:
                    e7:51:ea:b2:f7:bc:8f:c5:0a:51:cc:da:a2:79:25:
                    c7:ec:c4:04:e0:b0:9e:ec:92:00:32:ad:ea:f4:50:
                    00:ec:9a:0e:ad:a3:fa:10:10:e8:fd:62:81:a2:c1:
                    52:27:6b:ed:df:ee:68:9b:b8:8b:a2:0a:a8:5e:a3:
                    ec:0e:d8:f8:db:2e:e7:0b:2d:6c:b9:8f:7b:e3:97:
                    88:c4:21:10:da:f8:9b:12:23:b6:e2:e2:48:b4:e4:
                    09:06:f0:bb:12:13:a0:a7:17:83:a2:f2:13:17:20:
                    f2:c4:20:53:ed:98:31:46:43:28:50:e1:1d:f6:3b:
                    d3:74:26:60:ff:09:ef:8a:06:3a:c1:b0:f0:8c:7a:
                    2c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A8:F1:87:29:3D:8D:4E:5C:8B:4D:19:B5:B7:C0:CA:15:73:6E:EA
            X509v3 Authority Key Identifier:
                keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:da:7c:65:17:41:1b:37:59:b3:2e:7f:c4:98:0e:ba:75:d6:
         3d:72:ce:0f:73:10:68:dc:78:6c:d1:90:dd:ae:7b:38:ba:0b:
         68:ff:cc:75:60:62:ea:58:0f:ff:80:22:b8:c0:05:63:ab:48:
         25:3a:bb:87:ce:f7:71:40:cc:89:91:8a:73:60:d3:65:73:cf:
         a3:30:8a:f4:12:d6:20:83:53:66:ea:d5:6e:7e:7e:0a:3b:7a:
         f8:77:55:23:2d:41:5d:1f:85:ba:d6:da:1d:43:2e:73:9e:14:
         e6:2c:9b:ea:91:d2:e1:b2:e8:7d:4f:f8:d2:5c:2e:82:8f:26:
         1f:81:e7:5c:94:bf:f2:54:ce:59:7a:e6:bb:26:d5:e4:d6:89:
         da:57:6e:a8:c6:34:97:da:0d:56:e3:72:5d:41:02:24:1e:2f:
         0d:2e:07:ce:e2:6d:ea:53:1e:7b:e8:a9:cd:82:b9:d3:89:7c:
         73:5e:0a:de:c0:95:c8:37:95:a9:41:d9:37:b2:f1:c9:5c:90:
         26:da:47:79:5d:ea:4f:b5:54:a0:d5:1a:cb:c1:dc:1e:07:dd:
         5f:b4:f7:0d:79:c7:82:c7:ae:85:56:c1:ac:ec:0c:53:f8:01:
         27:e8:40:af:01:be:d9:eb:df:23:6b:fa:b5:ba:89:d8:6c:f6:
         56:88:4f:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumH9mzXZdLQDA0FYgnIWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNDkxMWU5ZDJiYmVhNjZhNmMyNDAzMTlkZGUzMDdiM2Rl
ZjQ4YzEwHhcNMjUwNDEzMTAwMTA3WhcNMjUwNDE0MTAwMTA3WjAzMTEwLwYDVQQD
EyhlMWE4ZjE4NzI5M2Q4ZDRlNWM4YjRkMTliNWI3YzBjYTE1NzM2ZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8XzHa79Zd2mtAdHH6BTbpwWdLrz
zXQvRFj0Z2J4VFGJpmsl8ArpUNHERU0RqV/oK+PZV2WZipmIRXcKOJQVKShy5iru
pqL99EjZ1mri6/q5EQxwGI48MJ9thw1mmxuFyJgOX+I2boHf0UOaqyh6shCMQ1r7
VinnUeqy97yPxQpRzNqieSXH7MQE4LCe7JIAMq3q9FAA7JoOraP6EBDo/WKBosFS
J2vt3+5om7iLogqoXqPsDtj42y7nCy1suY9745eIxCEQ2vibEiO24uJItOQJBvC7
EhOgpxeDovITFyDyxCBT7ZgxRkMoUOEd9jvTdCZg/wnvigY6wbDwjHosQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGo8YcpPY1OXItNGbW3wMoVc27qMB8GA1UdIwQY
MBaAFKNJEenSu+pmpsJAMZ3eMHs970jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEt
MTVjZGM5YThjMzhmLzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEtMTVjZGM5YThjMzhm
LzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtp8ZRdB
GzdZsy5/xJgOunXWPXLOD3MQaNx4bNGQ3a57OLoLaP/MdWBi6lgP/4AiuMAFY6tI
JTq7h873cUDMiZGKc2DTZXPPozCK9BLWIINTZurVbn5+Cjt6+HdVIy1BXR+Futba
HUMuc54U5iyb6pHS4bLofU/40lwugo8mH4HnXJS/8lTOWXrmuybV5NaJ2lduqMY0
l9oNVuNyXUECJB4vDS4HzuJt6lMee+ipzYK504l8c14K3sCVyDeVqUHZN7LxyVyQ
JtpHeV3qT7VUoNUay8HcHgfdX7T3DXnHgseuhVbBrOwMU/gBJ+hArwG+2evfI2v6
tbqJ2Gz2VohPXw==
-----END CERTIFICATE-----