Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File:                     o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier:          Fps2sFRmFaapmiKcE6fUOO9rh7XIxbs7U7rFw5Q08Q0=
Subject key identifier:   3E:2A:19:24:D6:39:F9:FC:40:CF:69:AD:1D:AF:28:E8:39:57:EC:CF
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer:       /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial:       01962F06648A0FCBF41D1EC651FA51BEC106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number:          1185
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
                          2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
                          3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: C65AB+SizPLlTMf5+OA4WS6GvGrL/pnQUPt3/qdc2Tw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:64:8a:0f:cb:f4:1d:1e:c6:51:fa:51:be:c1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=3e2a1924d639f9fc40cf69ad1daf28e83957eccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:60:fd:e6:98:21:02:37:e4:64:25:38:c1:
                    51:08:9b:ae:e2:e4:5a:e2:65:df:c7:5c:20:73:0a:
                    8a:b9:72:0d:35:ef:54:ce:c0:a9:1c:64:a5:6c:e4:
                    cc:0a:bc:26:db:47:6b:9c:3a:80:bb:61:40:e9:14:
                    cf:4c:80:bb:11:c1:7d:3c:80:13:cd:98:b6:63:66:
                    9f:4b:26:3f:b7:45:60:a9:7e:9e:1a:96:54:4b:a8:
                    af:99:90:91:36:be:1f:54:06:54:07:59:7e:25:7e:
                    1e:0e:4e:64:21:26:9a:07:1d:ed:09:52:77:6f:8d:
                    45:d2:4f:1f:42:77:f1:e6:e0:90:42:b0:6b:b6:50:
                    f9:7d:f3:f2:43:e6:3d:a0:bd:e6:3c:77:bc:92:bb:
                    73:08:7a:b6:76:71:81:d2:6a:37:e9:6c:57:9f:9f:
                    be:56:65:a9:0e:61:23:82:53:cc:a9:4a:42:6e:3c:
                    4e:03:cc:ad:ae:c4:d4:da:be:99:f2:98:83:4c:e2:
                    94:51:77:56:f5:bf:b9:ab:d3:b6:c8:59:6e:24:b8:
                    fd:57:8b:2a:08:45:c2:61:d0:c8:75:18:e7:b5:52:
                    6c:11:82:bd:2d:83:4b:35:ab:e4:c1:58:12:2b:a7:
                    0a:5d:80:04:e6:6d:05:0f:d2:b0:72:08:7f:ed:ad:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2A:19:24:D6:39:F9:FC:40:CF:69:AD:1D:AF:28:E8:39:57:EC:CF
            X509v3 Authority Key Identifier:
                keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:a9:6e:d8:12:02:95:a7:ae:9f:3b:2f:0a:9b:44:b7:ac:34:
         f9:87:c1:94:d1:ee:d9:91:77:df:f1:99:f2:3e:07:76:12:06:
         25:3a:6a:c3:e2:be:76:36:86:af:d1:2a:17:81:a0:a3:c9:0a:
         22:47:56:74:df:1a:f9:b0:58:22:5c:bd:64:e2:67:64:1a:f2:
         6b:59:1d:8f:aa:18:05:29:c3:35:d0:29:28:68:17:d9:2f:cb:
         59:60:b1:bd:c8:43:da:e2:88:37:96:cd:f2:1a:28:1f:82:36:
         86:8d:15:c9:39:36:6b:21:51:38:b7:0d:91:2e:0c:53:c3:4f:
         3b:f2:72:4f:4a:c1:52:b0:aa:80:8e:04:78:a6:85:36:71:3a:
         d6:14:7d:f5:09:9e:60:1a:ac:69:9a:85:97:7b:69:82:c7:a9:
         34:78:f9:ee:c1:08:c2:6c:8e:b2:7a:ed:bd:bb:2b:94:35:e6:
         1d:d5:38:ea:fe:8d:78:09:4d:df:28:4b:92:3c:36:64:e4:a1:
         cc:30:ce:60:8f:12:7c:e6:33:f3:14:fc:96:a6:27:37:5a:0c:
         49:7c:61:ff:a0:c6:92:5f:0e:7b:c1:3e:00:d5:8b:f9:b8:85:
         e6:75:6c:b6:3b:37:89:7b:68:5f:d0:85:77:e1:09:78:5b:70:
         46:f7:a7:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmSKD8v0HR7GUfpRvsEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYjg1ZmUyYjJjMjY5OTFiMWYzMWM2NmZjNjdhYzBjOGEx
MDk3NDYwHhcNMjUwNDEzMTIwMTEwWhcNMjUwNDE0MTIwMTEwWjAzMTEwLwYDVQQD
EygzZTJhMTkyNGQ2MzlmOWZjNDBjZjY5YWQxZGFmMjhlODM5NTdlY2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXtg/eaYIQI35GQlOMFRCJuu4uRa
4mXfx1wgcwqKuXINNe9UzsCpHGSlbOTMCrwm20drnDqAu2FA6RTPTIC7EcF9PIAT
zZi2Y2afSyY/t0VgqX6eGpZUS6ivmZCRNr4fVAZUB1l+JX4eDk5kISaaBx3tCVJ3
b41F0k8fQnfx5uCQQrBrtlD5ffPyQ+Y9oL3mPHe8krtzCHq2dnGB0mo36WxXn5++
VmWpDmEjglPMqUpCbjxOA8ytrsTU2r6Z8piDTOKUUXdW9b+5q9O2yFluJLj9V4sq
CEXCYdDIdRjntVJsEYK9LYNLNavkwVgSK6cKXYAE5m0FD9Kwcgh/7a2fwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4qGSTWOfn8QM9prR2vKOg5V+zPMB8GA1UdIwQY
MBaAFKO4X+KywmmRsfMcZvxnrAyKEJdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEt
NzZiYjcxZWIwYTVhLzEvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9lOTkwODItNjU5ZS00OWUyLWFkOTEtNzZiYjcxZWIwYTVh
LzEvbzdoZjRyTENhWkd4OHh4bV9HZXNESW9RbDBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6lu2BIC
laeunzsvCptEt6w0+YfBlNHu2ZF33/GZ8j4HdhIGJTpqw+K+djaGr9EqF4Ggo8kK
IkdWdN8a+bBYIly9ZOJnZBrya1kdj6oYBSnDNdApKGgX2S/LWWCxvchD2uKIN5bN
8hooH4I2ho0VyTk2ayFROLcNkS4MU8NPO/JyT0rBUrCqgI4EeKaFNnE61hR99Qme
YBqsaZqFl3tpgsepNHj57sEIwmyOsnrtvbsrlDXmHdU46v6NeAlN3yhLkjw2ZOSh
zDDOYI8SfOYz8xT8lqYnN1oMSXxh/6DGkl8Oe8E+ANWL+biF5nVstjs3iXtoX9CF
d+EJeFtwRvencQ==
-----END CERTIFICATE-----