Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
File:                     oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft (raw, json)
Hash identifier:          U4EFLfC5v//P/VL3vE3CuY2kNDDr5PoIMvk6iG+H2mM=
Subject key identifier:   20:3D:21:E3:C3:7C:D7:76:B0:64:17:1E:59:61:F2:21:56:54:42:EB
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Certificate issuer:       /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial:       01962F74E1D694AD095D3CFB6769C4C8090C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
Manifest number:          032F
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: WacUruZTE83WEEePnyB3KKF0YFU.roa (hash: IGW0uLOK6yIPDXD8+jDEju++6EJZMklynz//i9x70Jo=)
                          2: oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl (hash: bkeHRGHaR1rFiqN5dhe1FQEqrNP6NcE8TsPW8ZzO050=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e1:d6:94:ad:09:5d:3c:fb:67:69:c4:c8:09:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=203d21e3c37cd776b064171e5961f221565442eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c4:02:7c:78:42:08:c9:38:04:6b:39:41:c4:
                    28:3e:00:9e:41:7e:60:a8:0b:58:9c:02:19:ca:c2:
                    75:60:db:79:14:15:b9:ab:95:c4:ef:44:3c:4f:85:
                    1c:6e:34:1d:49:4f:b4:f3:4b:d3:39:0b:5e:b7:fe:
                    f5:44:b9:a0:44:f8:40:2c:7f:bf:1e:d5:70:ff:a0:
                    02:f7:c1:36:c4:81:2d:20:fe:4f:c5:64:63:16:f8:
                    d4:c0:e7:59:6c:db:14:f0:ff:41:0b:b5:ba:5a:9c:
                    de:da:a9:48:db:bb:d5:46:a3:c9:f6:d9:0b:af:67:
                    4f:4d:ce:8b:51:e8:d2:f9:d7:78:a5:6e:de:83:25:
                    c5:8d:f7:42:fb:dd:ad:76:98:d3:eb:2d:d8:c8:62:
                    41:42:f0:d6:a4:44:0d:ed:d1:c8:df:fc:d0:1b:ee:
                    4b:f4:e9:82:08:12:51:d9:ff:65:b4:8d:54:f2:5c:
                    ac:4b:24:a9:2d:3f:db:2e:8e:ec:15:5b:36:dd:d0:
                    54:0d:da:e9:5a:8d:ab:61:66:33:c4:25:78:6b:af:
                    e9:60:1f:8a:54:ac:d5:4a:04:59:2a:bf:68:b3:cc:
                    c4:7f:7f:97:c1:fe:5e:22:b8:7e:23:72:9c:1b:2c:
                    90:28:a1:16:83:dd:c3:3d:8b:65:f1:64:93:7a:52:
                    ed:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3D:21:E3:C3:7C:D7:76:B0:64:17:1E:59:61:F2:21:56:54:42:EB
            X509v3 Authority Key Identifier:
                keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c5:c5:b1:85:78:60:cb:86:5e:64:7d:41:e0:a4:ff:89:0d:
         39:53:55:36:1f:60:20:1d:c0:bb:b0:c3:17:e5:14:22:61:09:
         8a:c1:ab:31:1e:83:f3:41:34:6d:12:3f:ca:d0:b9:d7:93:02:
         a9:0b:d0:84:ce:5f:5d:80:0a:cd:31:24:13:b3:5e:b3:7c:1e:
         77:1b:a4:d3:75:7b:76:dd:44:1b:06:91:e2:2c:c3:67:e7:1e:
         8c:b9:4c:33:e0:6b:c2:e5:21:b3:4a:6d:3d:1a:7f:6d:5c:53:
         9d:ac:2d:54:65:ce:c3:d3:67:de:9a:e6:38:a4:d5:6d:9c:73:
         29:54:3b:c0:d0:0d:f5:6b:e2:d0:a0:fc:bf:1e:87:ab:40:da:
         25:d0:7d:6a:e8:d9:6f:c1:cb:7e:22:82:68:74:ae:17:24:ac:
         f7:eb:ec:c8:3e:ae:0d:78:56:40:96:60:b3:d7:29:17:63:ee:
         7d:1e:9e:70:fa:c2:7d:72:a7:84:83:f1:b3:e7:bb:da:8c:ff:
         ba:0b:f1:d2:20:05:cf:d6:01:13:71:2e:b8:a1:42:c6:95:38:
         17:1b:88:96:0d:4c:0a:e5:ac:ec:a6:e8:1b:a1:a5:94:21:89:
         8b:61:8a:8f:39:b5:ce:c0:9e:d9:f1:6d:c8:f3:b7:b2:82:85:
         1c:fe:14:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOHWlK0JXTz7Z2nEyAkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWQ5NTk2YjdhNWVmMDg4OWE3Mzk3MTAwMGQxMjYzMGRh
Y2E5YTYwHhcNMjUwNDEzMTQwMTUxWhcNMjUwNDE0MTQwMTUxWjAzMTEwLwYDVQQD
EygyMDNkMjFlM2MzN2NkNzc2YjA2NDE3MWU1OTYxZjIyMTU2NTQ0MmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cQCfHhCCMk4BGs5QcQoPgCeQX5g
qAtYnAIZysJ1YNt5FBW5q5XE70Q8T4UcbjQdSU+080vTOQtet/71RLmgRPhALH+/
HtVw/6AC98E2xIEtIP5PxWRjFvjUwOdZbNsU8P9BC7W6Wpze2qlI27vVRqPJ9tkL
r2dPTc6LUejS+dd4pW7egyXFjfdC+92tdpjT6y3YyGJBQvDWpEQN7dHI3/zQG+5L
9OmCCBJR2f9ltI1U8lysSySpLT/bLo7sFVs23dBUDdrpWo2rYWYzxCV4a6/pYB+K
VKzVSgRZKr9os8zEf3+Xwf5eIrh+I3KcGyyQKKEWg93DPYtl8WSTelLtWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCA9IePDfNd2sGQXHllh8iFWVELrMB8GA1UdIwQY
MBaAFKFdlZa3pe8Iiac5cQANEmMNrKmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1YyVmxyZWw3d2lKcHpseEFBMFNZdzJzcWFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jZjU0MGYtOTdkNi00MTQyLWI2MDMt
MzExMjQ2N2JiYzg4LzEvb1YyVmxyZWw3d2lKcHpseEFBMFNZdzJzcWFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jZjU0MGYtOTdkNi00MTQyLWI2MDMtMzExMjQ2N2JiYzg4
LzEvb1YyVmxyZWw3d2lKcHpseEFBMFNZdzJzcWFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8XFsYV4
YMuGXmR9QeCk/4kNOVNVNh9gIB3Au7DDF+UUImEJisGrMR6D80E0bRI/ytC515MC
qQvQhM5fXYAKzTEkE7Nes3wedxuk03V7dt1EGwaR4izDZ+cejLlMM+BrwuUhs0pt
PRp/bVxTnawtVGXOw9Nn3prmOKTVbZxzKVQ7wNAN9Wvi0KD8vx6Hq0DaJdB9aujZ
b8HLfiKCaHSuFySs9+vsyD6uDXhWQJZgs9cpF2PufR6ecPrCfXKnhIPxs+e72oz/
ugvx0iAFz9YBE3EuuKFCxpU4FxuIlg1MCuWs7KboG6GllCGJi2GKjzm1zsCe2fFt
yPO3soKFHP4UyA==
-----END CERTIFICATE-----