Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
File:                     OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft (raw, json)
Hash identifier:          dKpl6+YGZYtNc/AAhFgEbT1UEBr2WK9SqFzdeoYLHJg=
Subject key identifier:   A3:B4:80:C3:12:3F:5E:FA:C8:E6:AC:49:4E:31:80:F4:E6:C4:BF:2A
Authority key identifier: 38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
Certificate issuer:       /CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Certificate serial:       01962E9975B9B6581BA95136AEC042956938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
Manifest number:          0561
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: 96NgLEHRtKxUiimE9cBg6xhscpQ.roa (hash: mk1oEXhjeJbAg6bVncPiZm7XaZ/iA+I0QEGuQUH1ZeM=)
                          2: OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl (hash: yPKY4+37ZstvGLqDBoM0YSa1chc/vkfBXRMR7G+2bFs=)
                          3: auApMcvT0ghtABN_47-F8XLxrNw.roa (hash: XofAinsDeuW+LGI1qiG7UWKXoZIw8N+n+gNQOT5w3Kk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:75:b9:b6:58:1b:a9:51:36:ae:c0:42:95:69:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=a3b480c3123f5efac8e6ac494e3180f4e6c4bf2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:db:49:a3:f0:8e:4f:26:a0:83:da:88:cd:e7:
                    63:8c:5f:b1:de:27:3a:2f:ee:c3:58:ea:c4:bb:b1:
                    56:23:a1:b3:99:e5:07:24:f5:c5:1b:79:c6:68:f1:
                    63:db:8d:21:ff:43:97:60:96:dd:01:e4:4e:fa:93:
                    f3:d2:73:f0:ec:ed:0b:da:14:4e:8e:c2:32:a6:5a:
                    de:31:50:88:a5:78:51:0a:54:c0:cb:7e:6f:74:43:
                    5d:a7:8f:e0:b2:12:32:7c:10:90:bf:a7:ff:e4:a2:
                    1f:a1:00:83:9c:61:7a:6f:58:96:dc:76:fc:3d:d9:
                    d7:62:5f:a3:df:57:e9:08:f0:24:1b:bb:8c:68:71:
                    36:03:51:6e:46:b8:41:fd:18:78:d7:2c:d1:87:8a:
                    bd:ed:b1:b6:88:80:73:3f:f6:a2:b7:8c:0c:96:be:
                    22:41:b9:10:41:6f:8c:f3:32:a9:c2:13:fc:6f:35:
                    95:0a:a4:62:37:e3:58:d2:98:53:4d:56:ad:23:00:
                    24:1d:3a:f9:2e:b3:6b:90:05:29:5b:ef:26:01:19:
                    64:5c:0c:42:c6:8d:38:46:5b:d2:91:99:4c:7e:03:
                    68:59:50:cc:a0:23:d0:d7:e5:d2:70:99:dc:dc:99:
                    63:97:52:80:7c:01:df:24:89:5d:03:1f:93:fa:cd:
                    d4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B4:80:C3:12:3F:5E:FA:C8:E6:AC:49:4E:31:80:F4:E6:C4:BF:2A
            X509v3 Authority Key Identifier:
                keyid:38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:cf:bf:e8:d2:10:32:dc:89:67:cf:67:c3:d6:6b:09:c8:14:
         7c:1c:31:fe:3f:95:37:e1:bf:34:9f:d2:1d:94:79:29:cf:f1:
         58:3e:af:ec:21:a4:3f:9e:38:73:ee:70:b5:b9:67:d8:a9:fe:
         6c:a1:a2:17:c5:ad:bd:94:07:89:3f:07:18:2b:2c:3d:e8:01:
         3d:29:c1:67:98:de:92:26:9e:aa:1d:1d:dd:67:25:d9:11:c0:
         fc:c1:9e:28:23:77:33:45:dc:cc:70:a3:3c:44:28:61:e7:d0:
         25:f6:01:b2:4c:ac:36:53:d9:60:66:d2:3e:18:06:48:92:eb:
         6d:a8:dd:ad:0d:bb:a5:77:4c:88:c0:b2:3b:30:dc:5a:43:ba:
         76:ac:3d:30:1c:1e:58:28:eb:ae:15:77:c6:e3:ae:2e:cb:70:
         89:a7:41:ef:53:b1:05:03:4f:b2:41:15:79:ca:d0:eb:2c:62:
         ef:48:71:ff:71:ee:2c:4a:cd:38:23:1e:1f:0f:18:33:a6:41:
         92:77:26:9c:23:a7:ff:5f:ac:08:aa:f3:17:c6:2a:fb:a9:6a:
         01:69:10:a9:98:78:50:d8:2d:03:9a:56:c1:9e:72:68:ac:c7:
         b9:28:5a:05:b3:30:03:76:f8:bc:77:92:fc:cb:b5:ea:99:19:
         af:9a:86:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumXW5tlgbqVE2rsBClWk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDgzMDQ0ZmI2YzQzYmZmYWQ1ZmQ1NGIwN2QyY2M3YzAw
ZDFiZDMwHhcNMjUwNDEzMTAwMjExWhcNMjUwNDE0MTAwMjExWjAzMTEwLwYDVQQD
EyhhM2I0ODBjMzEyM2Y1ZWZhYzhlNmFjNDk0ZTMxODBmNGU2YzRiZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9tJo/COTyagg9qIzedjjF+x3ic6
L+7DWOrEu7FWI6GzmeUHJPXFG3nGaPFj240h/0OXYJbdAeRO+pPz0nPw7O0L2hRO
jsIyplreMVCIpXhRClTAy35vdENdp4/gshIyfBCQv6f/5KIfoQCDnGF6b1iW3Hb8
PdnXYl+j31fpCPAkG7uMaHE2A1FuRrhB/Rh41yzRh4q97bG2iIBzP/ait4wMlr4i
QbkQQW+M8zKpwhP8bzWVCqRiN+NY0phTTVatIwAkHTr5LrNrkAUpW+8mARlkXAxC
xo04RlvSkZlMfgNoWVDMoCPQ1+XScJnc3Jljl1KAfAHfJIldAx+T+s3UswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKO0gMMSP176yOasSU4xgPTmxL8qMB8GA1UdIwQY
MBaAFDgIMET7bEO/+tX9VLB9LMfADRvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fnd1JQdHNRN182MWYxVXNIMHN4OEFORzlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85NGE2YjgtMzlkMy00Zjc5LWFlMjUt
YTk1NTExYmE0ZDQ2LzEvT0Fnd1JQdHNRN182MWYxVXNIMHN4OEFORzlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85NGE2YjgtMzlkMy00Zjc5LWFlMjUtYTk1NTExYmE0ZDQ2
LzEvT0Fnd1JQdHNRN182MWYxVXNIMHN4OEFORzlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjM+/6NIQ
MtyJZ89nw9ZrCcgUfBwx/j+VN+G/NJ/SHZR5Kc/xWD6v7CGkP544c+5wtbln2Kn+
bKGiF8WtvZQHiT8HGCssPegBPSnBZ5jekiaeqh0d3Wcl2RHA/MGeKCN3M0XczHCj
PEQoYefQJfYBskysNlPZYGbSPhgGSJLrbajdrQ27pXdMiMCyOzDcWkO6dqw9MBwe
WCjrrhV3xuOuLstwiadB71OxBQNPskEVecrQ6yxi70hx/3HuLErNOCMeHw8YM6ZB
kncmnCOn/1+sCKrzF8Yq+6lqAWkQqZh4UNgtA5pWwZ5yaKzHuShaBbMwA3b4vHeS
/Mu16pkZr5qGtQ==
-----END CERTIFICATE-----