Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
File:                     r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json)
Hash identifier:          1Ht3f/fjxUm2IOq17UUN+6AZOWzG3vji5sR63VOtarA=
Subject key identifier:   B9:39:5A:47:54:A9:2C:7D:23:00:48:97:F9:76:EF:C9:08:D7:E0:E3
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Certificate issuer:       /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial:       01962F74A94C3E1704EEC5388619C6556A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: YXk4VQ9w2ydeFfWUpTPAL38DI14.roa (hash: 63k2DxSPaDP/x2Jl3oeCNKnb4PXDg6/RYTgk7tLrZPw=)
                          2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: 6ieX3uHbsWyFl7LepoZgBOUKtLB16iplq1CssG0BAhs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a9:4c:3e:17:04:ee:c5:38:86:19:c6:55:6a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=b9395a4754a92c7d23004897f976efc908d7e0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c4:fe:5e:30:e3:5f:49:ed:6e:a5:ce:71:f3:
                    b6:10:77:4e:4e:f2:ca:f8:50:2e:7d:e6:46:3c:66:
                    28:09:c3:83:54:27:61:5d:9d:ee:23:74:2a:43:34:
                    b6:f4:fc:a1:c0:8e:b5:28:f0:22:df:ce:98:a9:68:
                    33:49:dc:3b:b1:5e:77:05:2b:02:1d:e7:36:16:01:
                    2b:c2:2b:0c:5c:19:ff:1e:7e:ef:a2:e2:46:91:16:
                    3a:98:07:3f:0c:63:48:61:75:c0:af:04:23:3f:49:
                    32:16:a7:93:0c:d4:87:c6:60:f7:e4:0f:44:c0:65:
                    e9:f0:9b:8a:1a:a1:34:07:18:1f:f6:c5:6d:f9:e3:
                    94:85:91:06:e5:ce:89:dc:fd:4a:bf:e5:46:23:9a:
                    0b:be:9b:86:ea:b1:04:b9:1c:0c:d5:ad:25:84:de:
                    72:57:a2:53:73:33:da:ed:da:f2:a0:c3:4c:16:de:
                    83:a0:b5:5e:37:1e:f0:cc:fa:33:d6:0f:2a:18:90:
                    00:61:fc:af:1f:8c:ee:6b:15:9a:aa:0f:e2:6c:be:
                    7d:c3:ef:ea:c6:ae:09:e0:eb:6f:c7:9b:89:a8:11:
                    0e:5d:10:fe:6a:d7:ec:46:8b:f8:40:50:eb:b1:cd:
                    ce:52:a8:05:1e:0e:38:9a:e4:91:99:4a:0c:91:8f:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:39:5A:47:54:A9:2C:7D:23:00:48:97:F9:76:EF:C9:08:D7:E0:E3
            X509v3 Authority Key Identifier:
                keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2c:b1:16:c7:8f:91:ec:2a:14:4c:96:17:c6:70:50:9b:9a:
         af:ef:06:10:9e:38:23:89:1c:9b:07:92:e1:ba:76:1e:49:cc:
         ec:61:ec:56:27:a0:f2:45:70:06:a4:e6:e9:fe:48:fd:fc:57:
         bb:f7:1b:12:01:f1:19:c4:0a:73:76:27:eb:ec:7c:73:5f:6d:
         fc:9e:30:87:ce:b6:e4:a2:41:e4:f7:f4:6a:e9:67:79:a9:26:
         89:5e:da:87:7d:a6:c7:0b:bf:fa:a8:ee:4e:b2:9d:aa:9c:ae:
         0d:5c:01:cc:80:30:04:86:bd:26:c4:ee:ee:f7:db:d1:22:b5:
         05:1e:22:52:42:6c:09:b1:0f:60:d5:0d:b6:a8:64:e7:12:21:
         2e:08:23:44:c7:32:b0:b6:33:1a:e4:df:ae:37:1f:54:48:d3:
         71:3e:9e:06:84:b4:85:dd:9f:77:6b:51:01:ac:b2:75:0a:ab:
         0f:e7:9b:43:c8:d3:c5:34:38:5f:81:6a:e8:53:98:11:e7:52:
         76:ec:02:12:2e:d2:77:4b:9e:6f:4f:48:57:99:09:d1:34:2a:
         5e:8a:b9:9a:32:58:04:fc:05:dc:31:ef:20:18:ad:45:1a:e4:
         6b:ab:34:b9:1c:85:e1:89:fb:2e:12:3b:d9:4d:78:49:d6:cf:
         34:6c:52:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKlMPhcE7sU4hhnGVWqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNjNhNDdhY2RiYThlYzFjZDg1ZDRkNzlmMzZiMzViNjk4
ZTVmODkwHhcNMjUwNDEzMTQwMTM2WhcNMjUwNDE0MTQwMTM2WjAzMTEwLwYDVQQD
EyhiOTM5NWE0NzU0YTkyYzdkMjMwMDQ4OTdmOTc2ZWZjOTA4ZDdlMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sT+XjDjX0ntbqXOcfO2EHdOTvLK
+FAufeZGPGYoCcODVCdhXZ3uI3QqQzS29PyhwI61KPAi386YqWgzSdw7sV53BSsC
Hec2FgErwisMXBn/Hn7vouJGkRY6mAc/DGNIYXXArwQjP0kyFqeTDNSHxmD35A9E
wGXp8JuKGqE0Bxgf9sVt+eOUhZEG5c6J3P1Kv+VGI5oLvpuG6rEEuRwM1a0lhN5y
V6JTczPa7dryoMNMFt6DoLVeNx7wzPoz1g8qGJAAYfyvH4zuaxWaqg/ibL59w+/q
xq4J4Otvx5uJqBEOXRD+atfsRov4QFDrsc3OUqgFHg44muSRmUoMkY+dNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLk5WkdUqSx9IwBIl/l278kI1+DjMB8GA1UdIwQY
MBaAFK9jpHrNuo7BzYXU1582s1tpjl+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jNGQ3YjAtNmViZi00Y2FjLWE4YWQt
ZmUzZTMxOGNhZTljLzEvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jNGQ3YjAtNmViZi00Y2FjLWE4YWQtZmUzZTMxOGNhZTlj
LzEvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCyxFseP
kewqFEyWF8ZwUJuar+8GEJ44I4kcmweS4bp2HknM7GHsVieg8kVwBqTm6f5I/fxX
u/cbEgHxGcQKc3Yn6+x8c19t/J4wh8625KJB5Pf0aulneakmiV7ah32mxwu/+qju
TrKdqpyuDVwBzIAwBIa9JsTu7vfb0SK1BR4iUkJsCbEPYNUNtqhk5xIhLggjRMcy
sLYzGuTfrjcfVEjTcT6eBoS0hd2fd2tRAayydQqrD+ebQ8jTxTQ4X4Fq6FOYEedS
duwCEi7Sd0ueb09IV5kJ0TQqXoq5mjJYBPwF3DHvIBitRRrka6s0uRyF4Yn7LhI7
2U14SdbPNGxSZg==
-----END CERTIFICATE-----