Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File:                     O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier:          j7b5uVqK8ZAx147mtNd5/qNmHnZoBjVElpye21t6p1U=
Subject key identifier:   DC:4D:A1:EE:8B:56:03:A2:D1:AB:7D:31:58:5B:EF:A9:D0:44:99:D6
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer:       /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial:       01962ECF6463214BD0946F8F6C44DAD522B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: KAady5nIQ7goGP7Rcsy66F2FCTk.roa (hash: NabV/t+jGm2/Hy6psxEDHdFW8WsqCHu/S3YWHXIah24=)
                          2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: Vji2LsLgZVZcSVzFTLxXyUOdWwaloaZToHWeTgqrbnk=)
                          3: r-imVOZ1MKVCPTmznPktWbUEqW8.roa (hash: cRIVP2Lam6u4TX8QNidArFda2a92J/ptBDkcqev/q4k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:64:63:21:4b:d0:94:6f:8f:6c:44:da:d5:22:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=dc4da1ee8b5603a2d1ab7d31585befa9d04499d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:03:c6:92:57:a2:37:83:50:19:a3:83:79:
                    d7:8f:1d:60:00:dd:e3:d0:77:b4:cb:78:b7:b7:33:
                    30:24:57:0f:98:1b:9c:5d:9c:20:78:27:d9:ec:74:
                    f5:62:fc:e3:3f:cd:74:29:5e:13:bb:92:a8:4a:ff:
                    5a:34:4b:67:70:c1:13:ca:09:f0:e8:52:bd:78:e4:
                    8f:49:16:6a:e5:63:47:01:2c:87:78:14:70:7f:ed:
                    2e:62:6f:6f:8b:64:34:1e:de:16:2b:9c:96:2f:57:
                    54:ba:0d:95:53:94:ed:d1:2f:ce:d7:ab:d1:55:c5:
                    e3:ac:8d:5e:58:5e:40:88:5c:19:d2:dd:a5:29:98:
                    8a:a8:d8:63:4c:f5:10:2f:14:44:29:aa:82:92:26:
                    f2:c0:31:01:11:de:81:57:cb:74:ff:78:75:8d:86:
                    84:35:f2:41:f0:aa:a5:b1:50:a5:f9:73:c2:4b:17:
                    7e:20:3f:8a:46:5b:14:c9:7f:de:3c:db:d2:ec:6f:
                    fa:e5:24:1a:ae:c7:c2:9f:cb:4a:51:8d:95:5e:92:
                    fb:3f:22:96:f4:cb:44:ea:9f:35:6e:2f:ee:e1:9c:
                    6a:f3:1c:1e:fa:92:04:7b:e7:56:51:68:ca:c0:30:
                    bc:ed:2b:86:e2:14:30:15:e1:ec:a6:e9:57:bb:a4:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4D:A1:EE:8B:56:03:A2:D1:AB:7D:31:58:5B:EF:A9:D0:44:99:D6
            X509v3 Authority Key Identifier:
                keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:53:66:62:47:e2:f2:2e:aa:40:1b:0a:51:85:45:7e:02:f5:
         49:af:4d:bb:99:92:ba:8c:07:71:7c:35:b1:a7:5f:ec:0d:5e:
         8d:db:ab:58:5d:d6:9d:43:97:e1:01:55:c7:8b:10:fd:74:50:
         48:89:79:87:52:50:38:c6:a8:4a:67:29:91:30:28:0c:ab:de:
         59:bc:24:80:07:00:4c:9f:db:e3:73:61:df:82:e3:e3:3a:d4:
         15:ab:1d:cd:4b:c4:97:27:43:c8:be:0a:b7:52:23:79:3f:77:
         db:a0:72:31:5c:88:30:82:2b:01:36:ce:6f:7d:49:8f:8d:c8:
         dd:d2:b9:f0:71:d5:82:fa:73:f1:dc:8d:8b:93:16:b3:fa:26:
         9a:d5:1a:8a:ff:1f:91:98:e0:40:1b:bb:08:91:23:3f:e3:ec:
         4f:8c:be:1e:eb:b9:41:ad:f5:e7:ab:61:ca:47:e8:2b:69:b5:
         9a:e8:09:a3:24:28:02:80:de:bd:2e:7d:32:cf:cd:5c:24:bb:
         81:d3:43:fc:0f:3e:11:d3:1e:a8:81:46:69:95:3a:77:2b:72:
         b9:aa:25:d2:a6:27:b6:e1:80:0c:88:c5:ac:14:99:32:1f:a0:
         a8:f9:50:15:80:0a:3b:76:9e:a4:ef:9d:08:c6:18:4a:b8:1a:
         1f:c5:71:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2RjIUvQlG+PbETa1SK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc3YTYyNjA3ZmI5NGM4ZTIzYjVhMDYyYzc4ZDkzZGY5
Y2JkNjkwHhcNMjUwNDEzMTEwMTA1WhcNMjUwNDE0MTEwMTA1WjAzMTEwLwYDVQQD
EyhkYzRkYTFlZThiNTYwM2EyZDFhYjdkMzE1ODViZWZhOWQwNDQ5OWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQADxpJXojeDUBmjg3nXjx1gAN3j
0He0y3i3tzMwJFcPmBucXZwgeCfZ7HT1YvzjP810KV4Tu5KoSv9aNEtncMETygnw
6FK9eOSPSRZq5WNHASyHeBRwf+0uYm9vi2Q0Ht4WK5yWL1dUug2VU5Tt0S/O16vR
VcXjrI1eWF5AiFwZ0t2lKZiKqNhjTPUQLxREKaqCkibywDEBEd6BV8t0/3h1jYaE
NfJB8KqlsVCl+XPCSxd+ID+KRlsUyX/ePNvS7G/65SQarsfCn8tKUY2VXpL7PyKW
9MtE6p81bi/u4Zxq8xwe+pIEe+dWUWjKwDC87SuG4hQwFeHspulXu6SL3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxNoe6LVgOi0at9MVhb76nQRJnWMB8GA1UdIwQY
MBaAFDtHemJgf7lMjiO1oGLHjZPfnL1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMzMzNzktNjNkOS00ZjJiLThlNjUt
MzBhNmMzYWY5MDk1LzEvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9mMzMzNzktNjNkOS00ZjJiLThlNjUtMzBhNmMzYWY5MDk1
LzEvTzBkNlltQl91VXlPSTdXZ1lzZU5rOS1jdldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlNmYkfi
8i6qQBsKUYVFfgL1Sa9Nu5mSuowHcXw1sadf7A1ejdurWF3WnUOX4QFVx4sQ/XRQ
SIl5h1JQOMaoSmcpkTAoDKveWbwkgAcATJ/b43Nh34Lj4zrUFasdzUvElydDyL4K
t1IjeT9326ByMVyIMIIrATbOb31Jj43I3dK58HHVgvpz8dyNi5MWs/ommtUaiv8f
kZjgQBu7CJEjP+PsT4y+Huu5Qa3156thykfoK2m1mugJoyQoAoDevS59Ms/NXCS7
gdND/A8+EdMeqIFGaZU6dytyuaol0qYntuGADIjFrBSZMh+gqPlQFYAKO3aepO+d
CMYYSrgaH8VxgQ==
-----END CERTIFICATE-----