Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File:                     O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier:          jAgM3CM2b5v6ow0owlz5NHQpVlhffqC5c9zTtuRB5+k=
Subject key identifier:   8E:DC:CA:1E:53:50:B4:6C:5F:94:9A:E8:36:2B:30:C5:66:83:86:B2
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer:       /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial:       01962F3DD892DFEAA8E70FEE63BAB429965C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: 3U1ZWgNoASiRwWRzOTs9a26_aSI.roa (hash: rfiPEMHu4Dy2ke39aiCtx6HNVMRJPDS81QuXHyTH8CQ=)
                          2: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: kWqYbzvoHs9+YezB3itavCjVmXpV5kK0vIEGBO9c5Ow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d8:92:df:ea:a8:e7:0f:ee:63:ba:b4:29:96:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=8edcca1e5350b46c5f949ae8362b30c5668386b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:bf:d4:be:a7:92:66:f7:cc:c3:b2:3b:83:
                    1b:0d:7a:0a:48:cf:f7:a2:0d:47:35:de:cf:5c:63:
                    ae:18:84:2c:c4:00:7d:1b:19:2e:fd:12:75:f1:c5:
                    5c:30:59:fc:f4:89:0c:46:83:d2:39:e1:ca:e6:fa:
                    01:45:b0:86:3a:e5:58:c3:15:72:8b:07:fa:47:46:
                    4b:08:91:38:f4:c1:67:d5:e1:55:e4:39:4e:f9:38:
                    ba:21:de:15:de:73:1c:88:b5:c8:9f:5c:13:f0:76:
                    e1:fe:71:49:95:a0:45:ac:52:14:7e:c9:01:68:6e:
                    60:fe:b3:c8:97:33:a5:89:f2:6f:24:28:00:9e:ee:
                    f6:bb:e2:e7:4e:b2:b5:9b:20:db:1c:4a:a5:f2:d8:
                    0d:11:ca:cd:13:12:4d:9c:8f:6a:1d:1b:10:7f:78:
                    e4:9b:e3:89:c3:c2:6c:73:6d:bd:da:f7:a1:18:9a:
                    84:94:45:76:63:b9:c8:13:fe:82:50:2f:7a:2a:d8:
                    b5:a9:c8:7b:26:3d:96:5d:fd:1d:6f:a8:1f:84:4d:
                    7b:02:d9:4a:23:66:7f:6e:47:cb:05:bd:dc:30:ba:
                    a3:88:e2:b5:9a:6e:18:cf:48:70:32:6b:d8:5d:29:
                    5f:b6:fb:62:b1:5f:b5:92:40:6b:00:4f:54:3b:e5:
                    56:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DC:CA:1E:53:50:B4:6C:5F:94:9A:E8:36:2B:30:C5:66:83:86:B2
            X509v3 Authority Key Identifier:
                keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0b:0e:e0:3c:16:7c:51:4c:d5:39:60:9e:e0:8d:cb:18:88:
         71:ed:8a:ef:3d:e4:e9:0d:71:c9:2a:70:67:60:69:c7:af:d9:
         29:8b:49:b5:47:cb:df:d5:71:d6:9b:99:af:45:b9:f1:b5:88:
         5e:f9:54:2e:90:bc:b2:3f:21:60:0e:c9:33:a7:87:27:38:40:
         0b:63:31:ef:a9:4f:e6:bf:45:f1:6c:0d:5f:f8:e4:ab:d1:e4:
         f5:fe:4f:22:d0:8e:ff:bc:99:b6:51:9a:f1:9b:9e:dd:7f:55:
         ae:36:ca:89:b4:02:65:d7:e8:12:94:56:42:31:6c:c2:e0:c4:
         61:a7:9b:8b:76:ac:17:44:ab:da:0c:74:78:77:2b:6c:0a:4c:
         cb:e0:3a:56:b0:80:aa:84:b4:3d:79:d2:26:fd:a1:cb:ee:b4:
         97:cc:df:f4:4a:92:3b:a7:16:dd:f8:08:d5:12:bc:b2:ad:cf:
         28:13:df:b2:20:8a:2b:7c:a2:77:36:3a:7a:25:28:fd:4c:24:
         9f:f5:fb:2f:d4:41:09:00:6a:92:89:ea:0c:60:c3:06:84:fb:
         59:f2:07:c8:c0:e6:e1:c1:73:0f:75:57:7f:4f:d4:89:eb:8d:
         9e:50:fa:1d:32:8e:cf:47:fd:2a:26:e3:c6:36:15:ec:c9:d9:
         f1:68:b6:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdiS3+qo5w/uY7q0KZZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmNjZDRhMDA0MjJjODY1ZjUwOTNiODViYjg2OGMyYmIz
MGM0NjkwHhcNMjUwNDEzMTMwMTQ0WhcNMjUwNDE0MTMwMTQ0WjAzMTEwLwYDVQQD
Eyg4ZWRjY2ExZTUzNTBiNDZjNWY5NDlhZTgzNjJiMzBjNTY2ODM4NmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWK/1L6nkmb3zMOyO4MbDXoKSM/3
og1HNd7PXGOuGIQsxAB9Gxku/RJ18cVcMFn89IkMRoPSOeHK5voBRbCGOuVYwxVy
iwf6R0ZLCJE49MFn1eFV5DlO+Ti6Id4V3nMciLXIn1wT8Hbh/nFJlaBFrFIUfskB
aG5g/rPIlzOlifJvJCgAnu72u+LnTrK1myDbHEql8tgNEcrNExJNnI9qHRsQf3jk
m+OJw8Jsc2292vehGJqElEV2Y7nIE/6CUC96Kti1qch7Jj2WXf0db6gfhE17AtlK
I2Z/bkfLBb3cMLqjiOK1mm4Yz0hwMmvYXSlftvtisV+1kkBrAE9UO+VW0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7cyh5TULRsX5Sa6DYrMMVmg4ayMB8GA1UdIwQY
MBaAFDv8zUoAQiyGX1CTuFu4aMK7MMRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYTcwZjItYjdhYy00MzQ2LTlkMDgt
NjNhZTBiZmMxNjlmLzEvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iYTcwZjItYjdhYy00MzQ2LTlkMDgtNjNhZTBiZmMxNjlm
LzEvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwsO4DwW
fFFM1TlgnuCNyxiIce2K7z3k6Q1xySpwZ2Bpx6/ZKYtJtUfL39Vx1puZr0W58bWI
XvlULpC8sj8hYA7JM6eHJzhAC2Mx76lP5r9F8WwNX/jkq9Hk9f5PItCO/7yZtlGa
8Zue3X9VrjbKibQCZdfoEpRWQjFswuDEYaebi3asF0Sr2gx0eHcrbApMy+A6VrCA
qoS0PXnSJv2hy+60l8zf9EqSO6cW3fgI1RK8sq3PKBPfsiCKK3yidzY6eiUo/Uwk
n/X7L9RBCQBqkonqDGDDBoT7WfIHyMDm4cFzD3VXf0/UieuNnlD6HTKOz0f9Kibj
xjYV7MnZ8Wi2cw==
-----END CERTIFICATE-----