Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
File:                     OcqgvSVNGof0uzDbO1E_25r2JfY.mft (raw, json)
Hash identifier:          JAHFRWljgQKik9oAlv/NLTrVC54ehAQrC8wphfevp50=
Subject key identifier:   53:EE:49:AC:0E:20:76:F8:88:0E:72:D2:DC:86:6E:85:92:20:94:28
Authority key identifier: 39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
Certificate issuer:       /CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Certificate serial:       01962DF3D165E7DC8B830392F6792923D403
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
Manifest number:          06FB
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: OcqgvSVNGof0uzDbO1E_25r2JfY.crl (hash: 53Jcpf3of2+bkDw+/wL7uO13kHs2kMHzRzYMpVeLkC8=)
                          2: _QTwS8nAMSFeKK0ZzzPsIxYgPqo.roa (hash: Q/O46iBV3y1aR3ABGTzdA2RTNwov3wLVP1w6lO4+h/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d1:65:e7:dc:8b:83:03:92:f6:79:29:23:d4:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=53ee49ac0e2076f8880e72d2dc866e8592209428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:f6:d4:5d:fc:8d:ea:f7:99:0d:26:c1:42:
                    09:43:fc:68:59:18:5f:e9:33:70:7a:34:f6:8e:0e:
                    20:c2:b4:1d:08:37:4f:75:84:11:eb:b9:0a:97:17:
                    6a:ce:cc:37:1d:87:e9:c5:cf:fc:0f:78:5f:e0:fe:
                    e7:66:f7:3a:05:ee:85:d5:a4:ea:fe:69:8a:cd:4e:
                    55:8a:b6:01:a9:96:2b:c2:b8:4c:32:9a:dc:f6:5d:
                    6f:da:ba:0a:d1:51:bc:c7:4c:f9:98:12:e5:28:c7:
                    7a:9f:99:4e:42:f0:7c:25:4e:d6:f4:d7:51:ef:0b:
                    58:be:dc:d7:ca:71:2b:91:fa:09:3d:6d:f2:59:e5:
                    2f:d3:a5:81:26:e6:ac:04:d5:8a:64:b1:f0:68:a9:
                    82:d0:cf:12:f0:7a:25:ba:98:53:c5:ba:cb:2e:8a:
                    66:8b:f5:bd:b9:d5:33:b2:fe:fb:a1:d4:2b:45:63:
                    15:59:18:78:59:d1:7b:74:ed:16:0e:73:43:4b:9d:
                    4b:9c:9e:13:de:46:5f:fe:55:07:22:fc:9b:b2:ef:
                    0a:86:56:3b:05:90:f2:fd:63:1e:9f:32:70:3f:44:
                    cf:38:b4:18:db:ae:b5:8d:6e:f8:ac:90:1f:2f:79:
                    b0:4c:72:78:1e:80:28:9f:69:c1:8e:69:5c:28:b7:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EE:49:AC:0E:20:76:F8:88:0E:72:D2:DC:86:6E:85:92:20:94:28
            X509v3 Authority Key Identifier:
                keyid:39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:82:2b:63:fd:2d:04:ef:ce:dc:1d:c3:d9:ae:83:0f:45:
         43:83:84:37:c6:80:c6:64:f5:b1:3e:3a:58:36:c1:ee:21:27:
         43:18:e8:f5:a5:81:fe:d6:33:b3:b6:12:ab:19:32:f7:a5:21:
         23:50:d7:45:6b:51:a3:05:52:7a:28:ad:d2:cf:de:8c:05:49:
         ad:33:62:50:dc:44:7c:d8:08:ba:b0:9b:33:3a:d4:20:b6:9c:
         bc:b7:2a:7b:52:af:58:02:b3:b7:bf:3b:76:e1:38:95:d2:26:
         ad:6f:df:d9:1c:89:9e:24:2e:60:b8:ab:8e:7f:af:d1:12:6c:
         83:b7:d3:04:b4:99:dc:c8:9f:7d:b3:df:98:4f:66:6c:70:7d:
         37:82:d8:f3:d8:45:cc:21:5e:07:da:25:1f:22:2d:9d:66:48:
         bd:35:d8:3a:a7:67:96:cd:da:1b:1b:1e:bc:ec:9d:f4:13:5c:
         14:a3:45:b3:05:87:2c:55:68:d0:00:dc:35:3d:e7:3f:ba:d4:
         3c:c8:4d:73:ac:e8:92:b0:24:ef:84:8f:15:a2:5f:a4:aa:01:
         99:2a:b8:0f:1e:a0:09:e1:a2:a1:03:67:61:87:1e:ee:e0:5f:
         e5:90:e3:0d:74:89:b3:df:8b:e8:84:4a:3a:0d:17:62:c5:d8:
         b1:85:33:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt89Fl59yLgwOS9nkpI9QDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Y2FhMGJkMjU0ZDFhODdmNGJiMzBkYjNiNTEzZmRiOWFm
NjI1ZjYwHhcNMjUwNDEzMDcwMTE1WhcNMjUwNDE0MDcwMTE1WjAzMTEwLwYDVQQD
Eyg1M2VlNDlhYzBlMjA3NmY4ODgwZTcyZDJkYzg2NmU4NTkyMjA5NDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS721F38jer3mQ0mwUIJQ/xoWRhf
6TNwejT2jg4gwrQdCDdPdYQR67kKlxdqzsw3HYfpxc/8D3hf4P7nZvc6Be6F1aTq
/mmKzU5VirYBqZYrwrhMMprc9l1v2roK0VG8x0z5mBLlKMd6n5lOQvB8JU7W9NdR
7wtYvtzXynErkfoJPW3yWeUv06WBJuasBNWKZLHwaKmC0M8S8HoluphTxbrLLopm
i/W9udUzsv77odQrRWMVWRh4WdF7dO0WDnNDS51LnJ4T3kZf/lUHIvybsu8KhlY7
BZDy/WMenzJwP0TPOLQY2661jW74rJAfL3mwTHJ4HoAon2nBjmlcKLeCAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPuSawOIHb4iA5y0tyGboWSIJQoMB8GA1UdIwQY
MBaAFDnKoL0lTRqH9Lsw2ztRP9ua9iX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2NxZ3ZTVk5Hb2YwdXpEYk8xRV8yNXIySmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xZjA5NTUtNGQ2Mi00MzNiLWIxOGMt
N2MzN2U2MzliZjBmLzEvT2NxZ3ZTVk5Hb2YwdXpEYk8xRV8yNXIySmZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xZjA5NTUtNGQ2Mi00MzNiLWIxOGMtN2MzN2U2MzliZjBm
LzEvT2NxZ3ZTVk5Hb2YwdXpEYk8xRV8yNXIySmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAI6CK2P9
LQTvztwdw9mugw9FQ4OEN8aAxmT1sT46WDbB7iEnQxjo9aWB/tYzs7YSqxky96Uh
I1DXRWtRowVSeiit0s/ejAVJrTNiUNxEfNgIurCbMzrUILacvLcqe1KvWAKzt787
duE4ldImrW/f2RyJniQuYLirjn+v0RJsg7fTBLSZ3MiffbPfmE9mbHB9N4LY89hF
zCFeB9olHyItnWZIvTXYOqdnls3aGxsevOyd9BNcFKNFswWHLFVo0ADcNT3nP7rU
PMhNc6zokrAk74SPFaJfpKoBmSq4Dx6gCeGioQNnYYce7uBf5ZDjDXSJs9+L6IRK
Og0XYsXYsYUzmw==
-----END CERTIFICATE-----