Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
File:                     OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft (raw, json)
Hash identifier:          +Dphoucz5dQiHZwnCwOzXx+Fo4nRKa09Xg0YdECcuIU=
Subject key identifier:   9B:CD:E7:2D:2B:E4:35:17:BB:18:B9:B2:3E:6A:03:2E:30:F0:AF:8C
Authority key identifier: 39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5
Certificate issuer:       /CN=39805a05b8d9f0dfc43834c664d624715439f0d5
Certificate serial:       01962F0670269937FF83601BA912CAF03252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl (hash: gZVnlWipC0aKJuwz3xkMDKp4Dgu0k9pix4Uf5lytJ8k=)
                          2: RsGZdVH4KWGZ4OCvnGaMXWv4oaQ.roa (hash: fuepCE8j+3Iy2fKvIdO+nibeCW6A9px2SfnOVg5ddX0=)
                          3: fYkfiykKnS8ZeTHGRB-UgiJB3G8.roa (hash: r/260Im8uYUydEHgzIf9ZOg2UlQ6MQMr6ct6EbwfvX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:70:26:99:37:ff:83:60:1b:a9:12:ca:f0:32:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39805a05b8d9f0dfc43834c664d624715439f0d5
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=9bcde72d2be43517bb18b9b23e6a032e30f0af8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:ce:a3:d9:15:ee:ea:22:db:75:f2:95:9a:
                    59:f2:85:f9:61:5b:96:4b:21:2a:cf:ef:77:50:62:
                    34:6a:16:6b:1c:f9:9f:a5:5e:af:f2:e5:a4:9f:d2:
                    35:35:87:a2:0f:68:1a:cd:1d:87:04:19:56:52:99:
                    83:90:89:d9:79:ac:f4:99:f1:d1:1b:c5:95:a0:c2:
                    0b:98:a6:63:01:a6:ba:0a:ad:9e:b2:56:46:f4:ed:
                    7f:0c:d7:56:33:1f:c1:f5:e0:9d:ba:c4:fc:80:37:
                    56:c7:4d:e3:a9:55:1f:f3:bd:67:d6:30:90:4a:dc:
                    09:d0:31:e7:40:fe:71:91:bf:e4:cb:1b:dc:49:4a:
                    a8:0a:d5:7d:91:62:a0:2f:0b:90:2b:1c:8f:7f:fe:
                    8e:dd:00:24:62:8c:92:26:93:24:10:f1:ac:18:e2:
                    25:96:5e:3f:70:2a:b4:b5:4a:fb:77:d9:91:12:b7:
                    bc:46:87:1c:d4:96:a8:0c:65:e6:f4:b7:ba:d9:22:
                    ac:f7:bd:fa:7d:5f:19:8f:eb:07:2b:e6:db:38:1c:
                    c4:9b:fb:d1:73:10:14:b8:23:43:5d:11:24:d2:c8:
                    41:68:dc:c7:c4:7d:5b:9d:ad:9b:88:e5:2d:75:14:
                    a5:5d:8b:ed:55:a8:78:87:c5:66:c0:e0:82:8d:39:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CD:E7:2D:2B:E4:35:17:BB:18:B9:B2:3E:6A:03:2E:30:F0:AF:8C
            X509v3 Authority Key Identifier:
                keyid:39:80:5A:05:B8:D9:F0:DF:C4:38:34:C6:64:D6:24:71:54:39:F0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYBaBbjZ8N_EODTGZNYkcVQ58NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b06942-afc8-4336-97ee-aee696f83903/1/OYBaBbjZ8N_EODTGZNYkcVQ58NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:59:43:d1:af:9a:7d:5c:6a:87:c3:01:ee:5a:0b:b3:1c:db:
         02:50:38:ab:41:32:eb:1f:c8:40:84:8c:0d:46:01:9d:40:6e:
         8c:19:15:45:0b:6f:c4:db:b1:bc:47:57:08:23:88:27:63:79:
         01:50:95:bb:c1:d1:62:d6:d1:56:ca:5c:d6:1c:da:77:5e:e8:
         8f:8a:47:79:a9:d4:be:8c:c3:9f:ee:4e:70:54:e4:79:d6:12:
         4f:f4:96:39:ba:46:01:7c:86:11:51:12:88:73:df:75:28:94:
         5e:6d:3e:8c:c6:03:e3:56:cd:f2:8e:fd:22:f7:b7:46:a0:53:
         60:09:74:ca:f6:9e:87:ab:06:92:d0:98:27:0d:01:b1:23:fb:
         41:b0:de:05:40:1c:58:37:7c:ab:05:9c:dc:f5:ee:49:91:cd:
         c7:39:98:2e:8d:28:c8:fb:4f:ec:d6:48:fd:72:f6:8e:8c:67:
         45:6e:a6:2c:20:79:01:9e:ff:72:25:62:23:56:c3:d7:c5:81:
         4f:cd:1b:46:83:b7:d3:1f:a9:05:d6:0b:14:ec:13:5f:69:9a:
         f6:37:44:2f:2a:48:67:16:ab:87:c5:06:c9:30:ab:2c:7a:c0:
         72:ac:d3:40:61:15:f8:1a:1c:56:b0:43:e5:02:40:a9:35:73:
         c9:63:1b:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnAmmTf/g2AbqRLK8DJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ODA1YTA1YjhkOWYwZGZjNDM4MzRjNjY0ZDYyNDcxNTQz
OWYwZDUwHhcNMjUwNDEzMTIwMTEyWhcNMjUwNDE0MTIwMTEyWjAzMTEwLwYDVQQD
Eyg5YmNkZTcyZDJiZTQzNTE3YmIxOGI5YjIzZTZhMDMyZTMwZjBhZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXfOo9kV7uoi23XylZpZ8oX5YVuW
SyEqz+93UGI0ahZrHPmfpV6v8uWkn9I1NYeiD2gazR2HBBlWUpmDkInZeaz0mfHR
G8WVoMILmKZjAaa6Cq2eslZG9O1/DNdWMx/B9eCdusT8gDdWx03jqVUf871n1jCQ
StwJ0DHnQP5xkb/kyxvcSUqoCtV9kWKgLwuQKxyPf/6O3QAkYoySJpMkEPGsGOIl
ll4/cCq0tUr7d9mREre8Rocc1JaoDGXm9Le62SKs9736fV8Zj+sHK+bbOBzEm/vR
cxAUuCNDXREk0shBaNzHxH1bna2biOUtdRSlXYvtVah4h8VmwOCCjTnILQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvN5y0r5DUXuxi5sj5qAy4w8K+MMB8GA1UdIwQY
MBaAFDmAWgW42fDfxDg0xmTWJHFUOfDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1lCYUJialo4Tl9FT0RUR1pOWWtjVlE1OE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMDY5NDItYWZjOC00MzM2LTk3ZWUt
YWVlNjk2ZjgzOTAzLzEvT1lCYUJialo4Tl9FT0RUR1pOWWtjVlE1OE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMDY5NDItYWZjOC00MzM2LTk3ZWUtYWVlNjk2ZjgzOTAz
LzEvT1lCYUJialo4Tl9FT0RUR1pOWWtjVlE1OE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUllD0a+a
fVxqh8MB7loLsxzbAlA4q0Ey6x/IQISMDUYBnUBujBkVRQtvxNuxvEdXCCOIJ2N5
AVCVu8HRYtbRVspc1hzad17oj4pHeanUvozDn+5OcFTkedYST/SWObpGAXyGEVES
iHPfdSiUXm0+jMYD41bN8o79Ive3RqBTYAl0yvaeh6sGktCYJw0BsSP7QbDeBUAc
WDd8qwWc3PXuSZHNxzmYLo0oyPtP7NZI/XL2joxnRW6mLCB5AZ7/ciViI1bD18WB
T80bRoO30x+pBdYLFOwTX2ma9jdELypIZxarh8UGyTCrLHrAcqzTQGEV+BocVrBD
5QJAqTVzyWMbvg==
-----END CERTIFICATE-----