Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File:                     rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier:          i+jjquT2jzRKtDPLigcGzabb3U31vGwXfDQVY8l1H58=
Subject key identifier:   14:65:FD:E6:72:11:4D:E3:A7:24:20:28:89:B6:8F:5F:82:7E:66:8F
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer:       /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial:       01962F74697FADD8A38DDA98A8DD990BDB3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number:          010D
Signing time:             Sun 13 Apr 2025 14:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:20 +0000
Files and hashes:         1: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (hash: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=)
                          2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: y/uPIPSnEAyhJmKnpbEzFPSB+dKb+sXcE1QBq6P+Ld4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:69:7f:ad:d8:a3:8d:da:98:a8:dd:99:0b:db:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
        Validity
            Not Before: Apr 13 14:01:20 2025 GMT
            Not After : Apr 14 14:01:20 2025 GMT
        Subject: CN=1465fde672114de3a724202889b68f5f827e668f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:98:eb:b4:b7:2d:88:95:d8:c2:74:11:16:7e:
                    15:08:fe:bd:7e:85:76:4d:06:7e:cf:de:fb:a1:92:
                    20:83:84:f3:c2:d4:a8:3e:67:d7:14:2d:fe:6b:82:
                    2b:59:3d:49:95:c3:82:53:38:1d:6f:f6:cf:2c:d8:
                    fd:68:19:f8:a9:41:4c:d8:ed:e7:4e:2c:af:8d:39:
                    fc:3a:e4:50:82:70:d7:e7:42:a9:51:49:92:d1:bb:
                    43:59:21:aa:cc:71:1d:1f:0a:77:9d:35:51:4b:0d:
                    84:9a:f2:87:1a:57:38:b9:57:2f:50:a8:8e:5f:ef:
                    be:83:7f:07:e1:f1:3f:b1:4c:e1:01:11:99:d4:f9:
                    5c:fb:fd:97:96:f1:95:3b:68:63:cc:9c:73:b5:ad:
                    15:6b:d0:01:4b:7b:b1:e0:e5:05:4f:5c:43:f6:d6:
                    47:1c:db:a7:b5:48:60:67:ca:76:97:8b:8f:e2:96:
                    f2:f9:d6:c5:87:b1:e6:85:0e:3c:90:9b:29:0b:01:
                    f3:6e:9b:17:62:2f:b3:a7:3f:02:a2:a1:4a:67:8f:
                    65:f0:b9:d4:e4:0f:fe:ea:5c:27:60:23:a3:7e:97:
                    e9:95:22:de:cf:ee:54:2e:9a:fa:1e:bf:eb:37:a6:
                    c6:77:b2:34:52:69:7b:4d:6e:b8:25:8d:cb:b4:11:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:65:FD:E6:72:11:4D:E3:A7:24:20:28:89:B6:8F:5F:82:7E:66:8F
            X509v3 Authority Key Identifier:
                keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:89:34:08:9c:8d:e1:0d:c9:69:20:77:7d:a9:ee:fa:33:10:
         bc:33:6c:ae:9b:46:18:1b:ae:ad:77:f0:80:bd:39:18:00:96:
         df:6e:6d:7f:81:34:0f:4d:11:cd:14:38:26:59:64:32:b1:9e:
         f6:4e:67:0f:69:cc:2f:75:63:c0:8f:3b:0d:24:98:68:a4:25:
         35:7a:ae:5d:a3:42:d3:db:83:75:aa:f3:c7:01:4c:53:52:d0:
         73:61:58:ea:dd:aa:92:1a:3a:b6:e8:14:e0:41:a7:e1:72:b2:
         e5:d9:7a:86:b9:00:37:b4:a5:4b:4c:cd:dc:a0:e3:e0:40:3e:
         e7:7a:c4:38:86:6a:4b:4d:e0:7a:95:a7:d1:13:e5:98:d4:0f:
         67:8e:60:0a:0a:0b:ff:92:8d:2e:b0:ac:e9:0f:e9:3f:c7:ea:
         38:5b:f5:92:a9:4d:e7:bd:2f:8b:13:e6:d6:13:f2:24:9c:be:
         f8:35:06:70:2e:8e:b6:60:89:6a:57:b3:22:6f:3f:49:d2:12:
         b7:39:c3:80:6b:a0:8f:8b:69:cc:b5:1d:d8:8d:74:a0:ea:af:
         5d:ae:3b:0c:19:69:ad:a4:85:48:65:4a:4a:a9:f6:92:a7:08:
         fb:38:4b:6a:32:bb:c8:63:95:ae:c9:bd:69:11:46:0e:75:ac:
         22:5d:6a:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdGl/rdijjdqYqN2ZC9s7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWNmMDliODVkOTFjZDY4MmIwNjc0M2NiNmM1OTMwZTFm
YzU1MWMwHhcNMjUwNDEzMTQwMTIwWhcNMjUwNDE0MTQwMTIwWjAzMTEwLwYDVQQD
EygxNDY1ZmRlNjcyMTE0ZGUzYTcyNDIwMjg4OWI2OGY1ZjgyN2U2NjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZjrtLctiJXYwnQRFn4VCP69foV2
TQZ+z977oZIgg4TzwtSoPmfXFC3+a4IrWT1JlcOCUzgdb/bPLNj9aBn4qUFM2O3n
TiyvjTn8OuRQgnDX50KpUUmS0btDWSGqzHEdHwp3nTVRSw2EmvKHGlc4uVcvUKiO
X+++g38H4fE/sUzhARGZ1Plc+/2XlvGVO2hjzJxzta0Va9ABS3ux4OUFT1xD9tZH
HNuntUhgZ8p2l4uP4pby+dbFh7HmhQ48kJspCwHzbpsXYi+zpz8CoqFKZ49l8LnU
5A/+6lwnYCOjfpfplSLez+5ULpr6Hr/rN6bGd7I0Uml7TW64JY3LtBHwEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRl/eZyEU3jpyQgKIm2j1+CfmaPMB8GA1UdIwQY
MBaAFKzs8JuF2RzWgrBnQ8tsWTDh/FUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEt
ZjE4ZDc4MThmODRhLzEvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNWY0ZjQtYTU0Ny00MjM4LWExZGEtZjE4ZDc4MThmODRh
LzEvck96d200WFpITmFDc0dkRHkyeFpNT0g4VlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALok0CJyN
4Q3JaSB3fanu+jMQvDNsrptGGBuurXfwgL05GACW325tf4E0D00RzRQ4JllkMrGe
9k5nD2nML3VjwI87DSSYaKQlNXquXaNC09uDdarzxwFMU1LQc2FY6t2qkho6tugU
4EGn4XKy5dl6hrkAN7SlS0zN3KDj4EA+53rEOIZqS03gepWn0RPlmNQPZ45gCgoL
/5KNLrCs6Q/pP8fqOFv1kqlN570vixPm1hPyJJy++DUGcC6OtmCJalezIm8/SdIS
tznDgGugj4tpzLUd2I10oOqvXa47DBlpraSFSGVKSqn2kqcI+zhLajK7yGOVrsm9
aRFGDnWsIl1qAw==
-----END CERTIFICATE-----