Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File:                     u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier:          Jnjwk4rkB3xT2CCIYaE9YLqKFU8nAy64HJtVj5BDYp0=
Subject key identifier:   A8:5E:C6:24:3D:7C:5C:10:56:A8:0B:95:E1:54:0E:A5:E1:61:CB:39
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer:       /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial:       01962ECF979512B8BCDCA0393877BA67E4FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number:          1209
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
                          2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
                          3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: YIaRD82mnVOHUhiBbx6mQ1QMnlQ0CNrINzpMFgyPDbQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:97:95:12:b8:bc:dc:a0:39:38:77:ba:67:e4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=a85ec6243d7c5c1056a80b95e1540ea5e161cb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:b9:4d:d7:e3:e0:54:d6:b4:74:7d:a4:3f:
                    73:d3:84:df:ed:7a:4c:b5:3f:2e:22:bf:6a:29:14:
                    69:e8:5a:c9:3f:fa:79:76:27:c5:37:a3:c9:8b:bf:
                    74:2d:69:7e:70:08:3c:20:cc:db:b1:6b:8e:7e:b3:
                    c5:4a:4f:dd:57:d2:a1:2d:84:a1:ee:ee:7d:2c:ba:
                    1c:73:b3:00:e9:f7:44:ed:9f:cf:40:62:8a:3e:65:
                    7b:74:64:5c:44:28:82:e9:41:5e:6c:50:9e:e1:dd:
                    59:a8:e1:4a:0b:18:67:db:94:16:4d:f1:6c:32:58:
                    55:ce:97:13:5d:87:39:7a:19:1a:77:18:82:d9:1f:
                    41:6d:0a:9e:1e:33:d5:de:9f:bd:e5:30:14:3f:68:
                    12:d2:aa:33:22:65:5f:c8:a2:58:4f:ef:52:72:21:
                    21:93:d3:ea:d4:a6:c2:37:6d:29:69:e8:14:38:e5:
                    27:70:3c:bf:b2:e6:83:69:eb:9c:31:dd:f3:dd:33:
                    3d:08:ae:f2:a0:75:c0:74:ba:9a:1e:d1:b7:40:aa:
                    05:92:a6:1a:d7:3d:ef:8e:fc:74:db:16:f5:17:9a:
                    16:8e:56:c5:3e:4f:3f:1d:21:0a:34:4a:07:00:54:
                    ce:80:2f:cc:60:24:29:dd:4c:09:93:9f:ff:28:2d:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5E:C6:24:3D:7C:5C:10:56:A8:0B:95:E1:54:0E:A5:E1:61:CB:39
            X509v3 Authority Key Identifier:
                keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:c1:a7:6c:bb:89:dd:5f:05:78:ec:7e:9b:e6:f8:37:64:
         b6:a5:76:dc:a5:b0:ab:74:75:45:65:f5:c6:a6:eb:c6:d6:b9:
         c2:7f:f6:36:84:22:a9:d3:62:f9:f4:4e:f9:57:7e:ae:5a:5c:
         8b:c4:2e:59:43:44:e4:b2:42:a5:a7:2b:49:1d:94:3c:5a:ed:
         8f:5d:5f:dd:70:4c:e3:c3:0a:50:a6:0c:b5:31:49:a9:f2:a3:
         f9:f8:51:f5:e1:75:65:cb:cd:80:a6:29:5e:1e:48:87:19:cb:
         29:1b:70:fe:31:49:f6:f0:c0:35:55:a8:bc:9f:6f:80:d5:6e:
         f6:0a:39:64:09:f2:19:09:e5:6f:d5:d2:c4:04:f3:f9:3a:b8:
         9a:45:3e:70:12:ea:9f:0c:ac:00:4d:25:8d:98:7b:84:f3:aa:
         92:92:3d:31:6b:12:9d:b7:e1:f8:08:a0:a2:1b:9a:12:33:f1:
         a6:a2:57:87:30:ac:21:f9:ce:78:28:62:51:35:63:b0:7d:16:
         81:34:ed:25:c6:fa:8e:07:f2:69:6c:70:24:1b:d7:e8:b7:1c:
         76:64:2f:57:8c:b2:10:61:fe:00:1f:30:26:96:45:84:02:40:
         f5:03:5a:0f:42:97:dd:b5:c4:1b:f3:5b:63:43:7d:3f:e5:9b:
         49:75:bf:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5eVEri83KA5OHe6Z+T7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm
MmEwOTYwHhcNMjUwNDEzMTEwMTE4WhcNMjUwNDE0MTEwMTE4WjAzMTEwLwYDVQQD
EyhhODVlYzYyNDNkN2M1YzEwNTZhODBiOTVlMTU0MGVhNWUxNjFjYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0K5Tdfj4FTWtHR9pD9z04Tf7XpM
tT8uIr9qKRRp6FrJP/p5difFN6PJi790LWl+cAg8IMzbsWuOfrPFSk/dV9KhLYSh
7u59LLocc7MA6fdE7Z/PQGKKPmV7dGRcRCiC6UFebFCe4d1ZqOFKCxhn25QWTfFs
MlhVzpcTXYc5ehkadxiC2R9BbQqeHjPV3p+95TAUP2gS0qozImVfyKJYT+9SciEh
k9Pq1KbCN20paegUOOUncDy/suaDaeucMd3z3TM9CK7yoHXAdLqaHtG3QKoFkqYa
1z3vjvx02xb1F5oWjlbFPk8/HSEKNEoHAFTOgC/MYCQp3UwJk5//KC3q4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhexiQ9fFwQVqgLleFUDqXhYcs5MB8GA1UdIwQY
MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt
ZjIxMjY2NjcyNWI0LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0
LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjV7Bp2y7
id1fBXjsfpvm+DdktqV23KWwq3R1RWX1xqbrxta5wn/2NoQiqdNi+fRO+Vd+rlpc
i8QuWUNE5LJCpacrSR2UPFrtj11f3XBM48MKUKYMtTFJqfKj+fhR9eF1ZcvNgKYp
Xh5IhxnLKRtw/jFJ9vDANVWovJ9vgNVu9go5ZAnyGQnlb9XSxATz+Tq4mkU+cBLq
nwysAE0ljZh7hPOqkpI9MWsSnbfh+AigohuaEjPxpqJXhzCsIfnOeChiUTVjsH0W
gTTtJcb6jgfyaWxwJBvX6LccdmQvV4yyEGH+AB8wJpZFhAJA9QNaD0KX3bXEG/Nb
Y0N9P+WbSXW/ug==
-----END CERTIFICATE-----