Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File:                     oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier:          mh2uCM1c5g7ofHjjWSTX+7hZAUbjixtcT1NPAEwqL9o=
Subject key identifier:   AB:CF:3A:4B:5C:9A:78:0A:D7:C4:4E:C9:F6:3D:A6:FC:E8:AC:2E:0B
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer:       /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial:       01962E987FB07677753EE925297E9DA8AD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:08 +0000
Files and hashes:         1: VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa (hash: E6B6Bl1mDcetd5EsaNvc0boHcTeWIhqXRqGoFPj9kUc=)
                          2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: JVfVpwk8JbgG2xzpb7jQ7x/OehX1lFy/+aNZUHCJlac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7f:b0:76:77:75:3e:e9:25:29:7e:9d:a8:ad:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
        Validity
            Not Before: Apr 13 10:01:08 2025 GMT
            Not After : Apr 14 10:01:08 2025 GMT
        Subject: CN=abcf3a4b5c9a780ad7c44ec9f63da6fce8ac2e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2b:0d:e3:d4:5d:81:9e:f1:c3:7c:27:7f:70:
                    51:cc:0f:e5:64:2f:b7:66:d3:50:90:e4:ee:1c:1c:
                    cc:70:3f:bb:d7:40:b7:06:20:b7:ea:8a:79:76:e6:
                    19:53:a8:db:6f:ac:4c:7c:bf:1d:d7:96:35:f2:07:
                    08:af:80:31:0a:ae:77:c5:f8:75:f1:ed:90:21:6d:
                    80:7d:ee:62:40:43:8a:14:ed:f7:2d:72:eb:7b:e0:
                    a0:43:c1:84:b0:34:4d:5c:f3:12:0b:03:6c:03:07:
                    9b:f0:be:61:a7:2a:26:9f:dd:91:57:ca:e1:af:19:
                    62:9b:4b:d4:52:3c:4f:64:ea:eb:b4:c5:4a:1e:ba:
                    e0:4e:46:60:e0:e9:8a:ee:40:d9:b4:c5:90:af:8b:
                    a4:65:48:b1:2f:62:24:65:21:3b:e4:f0:a3:ad:2a:
                    ab:84:7f:d5:6e:8d:c4:99:2c:0b:35:ef:3d:ec:19:
                    a1:ac:72:a7:ed:d4:02:4c:0a:33:2a:5e:51:28:45:
                    96:a0:ae:99:5e:b9:90:02:a5:84:22:3e:4b:13:68:
                    a5:a4:e8:f3:86:7a:77:26:83:25:46:ab:12:9a:d1:
                    fc:6b:92:7d:86:5f:69:30:8a:81:3b:45:d3:bb:f1:
                    91:ce:b0:24:46:95:0d:38:bd:9f:e9:5b:2e:d0:e2:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CF:3A:4B:5C:9A:78:0A:D7:C4:4E:C9:F6:3D:A6:FC:E8:AC:2E:0B
            X509v3 Authority Key Identifier:
                keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:88:39:3f:82:67:77:05:ee:30:57:50:a8:fb:b7:e0:80:ed:
         d7:17:3f:73:01:b8:fa:a1:45:af:25:99:64:8a:96:38:a0:89:
         3f:27:06:6d:28:2d:1f:cd:d0:98:0e:3e:e3:43:45:c6:f2:09:
         d4:ef:9a:bc:50:97:37:8b:06:b7:b2:41:aa:f0:a2:ce:4c:78:
         3f:5b:74:8e:57:b0:3f:16:07:da:b2:54:1e:79:ed:49:5a:7a:
         a6:19:37:9b:07:5f:cb:2d:b8:d5:27:f2:25:f8:35:bc:4c:88:
         31:23:1f:f5:84:4e:a7:d8:48:27:83:92:31:ac:7c:db:15:21:
         85:70:be:33:a0:9f:09:5c:b1:5b:12:ae:1b:3f:8d:27:07:3e:
         0f:55:25:71:48:31:5d:87:93:8e:e2:0e:ea:2a:af:62:2c:5b:
         2f:50:e6:f2:14:e9:31:59:c2:7e:15:33:64:81:0c:a3:a8:ca:
         80:94:75:5f:8a:a7:a1:9c:8f:ae:bb:6c:60:a3:19:6a:7e:b1:
         00:58:cc:c9:11:c4:f6:bc:41:6a:68:e5:02:bf:19:4a:15:cf:
         4f:31:f9:24:60:29:ca:64:d3:f6:94:02:d4:9a:b1:5a:d2:c0:
         27:c9:a5:09:c0:09:3b:9c:9f:27:ba:a6:32:3f:06:4a:de:0e:
         94:24:5a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumH+wdnd1PuklKX6dqK0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZjI3ZDRmMDY3NjE0YmNiYzI3MDM0NmZhMGQ0NGIxNWY4
MDUxNjMwHhcNMjUwNDEzMTAwMTA4WhcNMjUwNDE0MTAwMTA4WjAzMTEwLwYDVQQD
EyhhYmNmM2E0YjVjOWE3ODBhZDdjNDRlYzlmNjNkYTZmY2U4YWMyZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ysN49RdgZ7xw3wnf3BRzA/lZC+3
ZtNQkOTuHBzMcD+710C3BiC36op5duYZU6jbb6xMfL8d15Y18gcIr4AxCq53xfh1
8e2QIW2Afe5iQEOKFO33LXLre+CgQ8GEsDRNXPMSCwNsAweb8L5hpyomn92RV8rh
rxlim0vUUjxPZOrrtMVKHrrgTkZg4OmK7kDZtMWQr4ukZUixL2IkZSE75PCjrSqr
hH/Vbo3EmSwLNe897BmhrHKn7dQCTAozKl5RKEWWoK6ZXrmQAqWEIj5LE2ilpOjz
hnp3JoMlRqsSmtH8a5J9hl9pMIqBO0XTu/GRzrAkRpUNOL2f6Vsu0OIIGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvPOktcmngK18ROyfY9pvzorC4LMB8GA1UdIwQY
MBaAFKDyfU8GdhS8vCcDRvoNRLFfgFFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNzMyYTAtZGM2Mi00MzI2LTg1ZTIt
OTM2NTk4ZTAwY2ZlLzEvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mNzMyYTAtZGM2Mi00MzI2LTg1ZTItOTM2NTk4ZTAwY2Zl
LzEvb1BKOVR3WjJGTHk4SndORy1nMUVzVi1BVVdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4g5P4Jn
dwXuMFdQqPu34IDt1xc/cwG4+qFFryWZZIqWOKCJPycGbSgtH83QmA4+40NFxvIJ
1O+avFCXN4sGt7JBqvCizkx4P1t0jlewPxYH2rJUHnntSVp6phk3mwdfyy241Sfy
Jfg1vEyIMSMf9YROp9hIJ4OSMax82xUhhXC+M6CfCVyxWxKuGz+NJwc+D1UlcUgx
XYeTjuIO6iqvYixbL1Dm8hTpMVnCfhUzZIEMo6jKgJR1X4qnoZyPrrtsYKMZan6x
AFjMyRHE9rxBamjlAr8ZShXPTzH5JGApymTT9pQC1JqxWtLAJ8mlCcAJO5yfJ7qm
Mj8GSt4OlCRaqw==
-----END CERTIFICATE-----