Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File:                     0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier:          cmEDf/BhJlazGSbFE4IurWmnwEeiuXaQrxqPb/0fGjE=
Subject key identifier:   33:B0:D3:78:13:76:AB:E5:CA:25:52:2A:35:D2:8C:E8:B9:9F:44:39
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer:       /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial:       01962FAB624E98AACCD465585B487074D042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number:          02D3
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: WdHjGG+swqrjHv/YAN02Xr7aBHnNkTvX6+FcVj9YoVY=)
                          2: NJkr6UX1dyZbz9hAAHSEva9N1dU.roa (hash: dH1+iQ8jrIWNeK4bcaaw6PWPrPpzci2xfb2T6H4KeWY=)
                          3: nh7sfAMY2Tccb18ce2fpxnrtx8Q.roa (hash: b96JAOO8n31SIeeTv1ll8vmQplePANc0Xbj3yOfw8j0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:62:4e:98:aa:cc:d4:65:58:5b:48:70:74:d0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=33b0d3781376abe5ca25522a35d28ce8b99f4439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:7e:be:9f:c0:b8:ee:48:62:93:4f:a2:29:
                    31:bd:26:81:66:17:e1:65:2c:88:a2:12:df:eb:02:
                    fa:85:5b:a3:4a:04:2e:5c:eb:31:48:d6:c6:4c:66:
                    a3:b9:d2:81:de:4a:fe:c9:3e:93:41:e4:7c:a6:54:
                    6a:8e:7b:af:26:79:69:f3:af:3d:7c:b1:95:31:dd:
                    e2:c8:75:19:ca:30:0c:28:ea:ab:f6:16:bb:96:d1:
                    32:f9:74:a9:e4:45:f7:91:5f:15:2e:ce:e1:c0:f8:
                    dc:45:7d:83:5f:e5:75:a8:a0:87:47:ff:2f:fa:dd:
                    e1:7c:03:aa:85:e1:6d:75:d5:32:76:c3:15:03:f8:
                    7a:54:8b:18:e5:e7:9a:fb:ec:2b:42:89:f0:65:f1:
                    f0:52:06:76:78:8d:2a:43:6c:72:d9:3f:b3:c2:b6:
                    38:3d:15:0c:a1:94:80:cc:fb:39:17:0b:0c:14:f0:
                    d3:4e:de:0f:e1:42:56:40:f2:dd:6d:e3:9a:02:9e:
                    63:e9:b2:03:7c:7b:09:86:ba:34:5f:ad:66:b4:1c:
                    29:46:ea:6c:c7:4b:7a:25:66:57:24:10:de:9f:85:
                    a3:61:52:3a:6e:3e:d3:1b:d5:35:95:8b:1a:53:a0:
                    c5:8a:b6:c7:92:05:f6:a9:5d:0d:ee:87:56:04:93:
                    5e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B0:D3:78:13:76:AB:E5:CA:25:52:2A:35:D2:8C:E8:B9:9F:44:39
            X509v3 Authority Key Identifier:
                keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:aa:e8:fb:b6:06:d8:3d:51:e2:40:d7:6a:ad:68:28:e0:da:
         08:0b:21:99:c6:e0:39:20:97:90:1a:94:2e:e8:90:9e:32:bf:
         16:9d:14:90:9a:34:81:06:f0:26:e0:f1:4e:84:81:3f:22:b3:
         87:9c:44:8c:0a:9e:16:45:b8:d1:af:70:74:69:7a:81:ee:94:
         79:b9:d4:69:7c:11:95:55:ee:ea:29:cf:72:25:91:3f:21:74:
         31:bc:a2:41:cc:a4:05:25:b3:61:6b:d5:df:d0:2e:ca:03:34:
         ae:71:00:4a:8c:a5:02:07:34:e5:b6:fa:ce:57:ec:01:d7:4f:
         b8:46:af:33:5a:a8:67:c9:53:a1:80:50:00:9c:6d:d3:60:4b:
         ee:d2:a8:84:51:9c:71:37:11:e1:5d:5c:0c:40:e9:85:46:1d:
         0a:59:9f:e8:94:60:77:cd:29:ba:f8:1d:f9:f6:f1:f1:4d:d2:
         17:4a:35:09:50:95:08:f9:93:e4:1f:c8:d1:bd:95:90:f2:82:
         84:09:fd:a8:96:2a:d6:48:8b:13:b3:4a:6e:33:cf:1f:1d:06:
         53:2b:56:2d:03:46:8e:f0:c3:03:77:6d:78:23:23:9d:b0:c2:
         41:f6:03:e8:9a:a7:cf:8a:f0:6c:f9:62:2f:d3:05:dc:c0:5b:
         a5:5b:8f:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq2JOmKrM1GVYW0hwdNBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmU0NTM4ZjFkZGVhNzdmNTczOTZiYjkzYjkwN2YxNTJk
ZjY5N2MwHhcNMjUwNDEzMTUwMTIyWhcNMjUwNDE0MTUwMTIyWjAzMTEwLwYDVQQD
EygzM2IwZDM3ODEzNzZhYmU1Y2EyNTUyMmEzNWQyOGNlOGI5OWY0NDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF9+vp/AuO5IYpNPoikxvSaBZhfh
ZSyIohLf6wL6hVujSgQuXOsxSNbGTGajudKB3kr+yT6TQeR8plRqjnuvJnlp8689
fLGVMd3iyHUZyjAMKOqr9ha7ltEy+XSp5EX3kV8VLs7hwPjcRX2DX+V1qKCHR/8v
+t3hfAOqheFtddUydsMVA/h6VIsY5eea++wrQonwZfHwUgZ2eI0qQ2xy2T+zwrY4
PRUMoZSAzPs5FwsMFPDTTt4P4UJWQPLdbeOaAp5j6bIDfHsJhro0X61mtBwpRups
x0t6JWZXJBDen4WjYVI6bj7TG9U1lYsaU6DFirbHkgX2qV0N7odWBJNekwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOw03gTdqvlyiVSKjXSjOi5n0Q5MB8GA1UdIwQY
MBaAFNJuRTjx3ep39XOWu5O5B/FS32l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2Qt
NWRlOTlhNTJhYTM5LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2QtNWRlOTlhNTJhYTM5
LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqro+7YG
2D1R4kDXaq1oKODaCAshmcbgOSCXkBqULuiQnjK/Fp0UkJo0gQbwJuDxToSBPyKz
h5xEjAqeFkW40a9wdGl6ge6UebnUaXwRlVXu6inPciWRPyF0MbyiQcykBSWzYWvV
39AuygM0rnEASoylAgc05bb6zlfsAddPuEavM1qoZ8lToYBQAJxt02BL7tKohFGc
cTcR4V1cDEDphUYdClmf6JRgd80puvgd+fbx8U3SF0o1CVCVCPmT5B/I0b2VkPKC
hAn9qJYq1kiLE7NKbjPPHx0GUytWLQNGjvDDA3dteCMjnbDCQfYD6Jqnz4rwbPli
L9MF3MBbpVuP8Q==
-----END CERTIFICATE-----