Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File:                     olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier:          3AvpfgJaf40WKZSixhRpjkXZfXejWCYIgQzcGUTOAhY=
Subject key identifier:   A7:F8:EF:D1:2A:3E:B1:81:93:21:FC:6B:02:06:BB:1D:06:2A:B3:D1
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer:       /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial:       01962ECFD1DF42CFD4FADC7A2242BE55CAE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: WROr11iKIkUFKhX46Vqg8x+h/ts4twg3JPGK85SOd88=)
                          2: qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa (hash: 5MeTBfSySavyHPFSKNwiy3eNDAshSqCWYE/J6aXln9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d1:df:42:cf:d4:fa:dc:7a:22:42:be:55:ca:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=a7f8efd12a3eb1819321fc6b0206bb1d062ab3d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b3:49:95:76:cd:54:e4:9d:62:ae:15:0b:f8:
                    cd:e5:07:4e:9d:c4:8d:e4:da:ea:41:f2:a7:10:8c:
                    be:ab:4b:a4:2f:88:10:72:39:68:68:76:10:0d:41:
                    b4:df:58:da:52:f0:08:85:13:41:66:92:96:fb:36:
                    36:da:ab:05:52:77:ef:09:2a:58:6d:55:b5:60:90:
                    eb:5b:51:ee:81:5b:e2:5b:ce:09:f8:68:56:d2:d0:
                    8f:b8:cf:01:10:24:95:db:e8:b2:18:b5:07:7e:df:
                    68:aa:37:3d:6a:4d:f3:4e:e0:e1:88:91:cd:29:de:
                    85:ff:24:41:b6:d6:40:ba:4f:18:47:22:24:a1:65:
                    71:4f:ec:7e:b2:51:56:ec:b0:81:a5:78:58:59:d5:
                    90:36:34:fa:93:f3:08:97:3a:e5:f8:34:56:58:c4:
                    59:29:a2:b8:f3:91:b1:bf:6d:70:38:59:c2:10:c6:
                    fa:55:6f:d4:d1:73:21:78:99:4e:2c:d4:e7:0a:27:
                    52:1b:44:22:7a:3f:9b:ab:62:12:2d:e2:29:27:34:
                    ff:51:69:98:46:75:9b:0d:28:62:3b:c6:49:bd:3e:
                    3f:29:b3:cf:f7:42:ef:09:71:dc:47:d6:3d:6a:8a:
                    67:7b:88:2a:d2:4b:aa:9d:ba:51:29:66:0e:e7:a1:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F8:EF:D1:2A:3E:B1:81:93:21:FC:6B:02:06:BB:1D:06:2A:B3:D1
            X509v3 Authority Key Identifier:
                keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a5:2d:76:45:ea:0b:53:8f:53:42:4f:39:47:06:f9:0d:f5:
         da:ea:8f:56:62:ff:5e:d3:96:41:82:68:c2:fd:03:1a:4c:be:
         34:f7:4c:d0:6c:db:10:90:c6:c1:a9:c9:87:bd:c3:e6:e9:11:
         a0:a5:15:e3:b8:6e:8d:36:4e:df:58:eb:29:56:31:ec:94:14:
         c2:0e:74:93:3f:e5:22:96:0f:ee:d1:1a:de:af:29:d2:22:5d:
         4b:8a:d1:e9:60:54:60:f9:e4:67:c1:0d:53:99:1e:bb:6f:54:
         f2:c3:ec:c8:b0:bd:64:5e:89:f0:9c:c5:ac:dd:46:f7:ba:c4:
         79:1f:85:1b:93:7a:8a:68:b3:4c:fe:bb:b5:1d:31:02:16:2c:
         a5:1d:3a:15:d2:c6:ce:97:5d:a1:0d:aa:30:20:a1:7f:39:0a:
         6c:74:8f:3e:21:cf:cd:92:ce:ef:bd:44:ac:12:32:60:3b:9b:
         28:e3:74:6a:24:96:b6:8c:cd:8f:0d:9c:ad:b4:23:04:9b:5f:
         90:81:c5:c1:9b:c3:34:66:55:78:b6:e5:7e:41:dd:e4:e2:cb:
         6a:5a:11:6a:65:d6:d3:c2:0c:c1:94:f1:d7:32:1e:56:e1:65:
         95:4e:32:29:1f:7a:d1:78:a9:fe:6c:05:62:a4:2b:04:3b:94:
         15:b1:c8:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9HfQs/U+tx6IkK+VcrjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTEwMjc5YmUxMzhjNDJjZGVmNjI3MThmMGY2YWZhY2Fl
MTgxOWUwHhcNMjUwNDEzMTEwMTMzWhcNMjUwNDE0MTEwMTMzWjAzMTEwLwYDVQQD
EyhhN2Y4ZWZkMTJhM2ViMTgxOTMyMWZjNmIwMjA2YmIxZDA2MmFiM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7NJlXbNVOSdYq4VC/jN5QdOncSN
5NrqQfKnEIy+q0ukL4gQcjloaHYQDUG031jaUvAIhRNBZpKW+zY22qsFUnfvCSpY
bVW1YJDrW1HugVviW84J+GhW0tCPuM8BECSV2+iyGLUHft9oqjc9ak3zTuDhiJHN
Kd6F/yRBttZAuk8YRyIkoWVxT+x+slFW7LCBpXhYWdWQNjT6k/MIlzrl+DRWWMRZ
KaK485Gxv21wOFnCEMb6VW/U0XMheJlOLNTnCidSG0Qiej+bq2ISLeIpJzT/UWmY
RnWbDShiO8ZJvT4/KbPP90LvCXHcR9Y9aopne4gq0kuqnbpRKWYO56EsOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf479EqPrGBkyH8awIGux0GKrPRMB8GA1UdIwQY
MBaAFKJRAnm+E4xCze9icY8PavrK4YGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yMTQ2Y2EtZTAyNi00MDJjLWE1NmUt
ODZhZjUyZmI0ZWViLzEvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8yMTQ2Y2EtZTAyNi00MDJjLWE1NmUtODZhZjUyZmI0ZWVi
LzEvb2xFQ2ViNFRqRUxONzJKeGp3OXEtc3JoZ1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARqUtdkXq
C1OPU0JPOUcG+Q312uqPVmL/XtOWQYJowv0DGky+NPdM0GzbEJDGwanJh73D5ukR
oKUV47hujTZO31jrKVYx7JQUwg50kz/lIpYP7tEa3q8p0iJdS4rR6WBUYPnkZ8EN
U5keu29U8sPsyLC9ZF6J8JzFrN1G97rEeR+FG5N6imizTP67tR0xAhYspR06FdLG
zpddoQ2qMCChfzkKbHSPPiHPzZLO771ErBIyYDubKON0aiSWtozNjw2crbQjBJtf
kIHFwZvDNGZVeLblfkHd5OLLaloRamXW08IMwZTx1zIeVuFllU4yKR960Xip/mwF
YqQrBDuUFbHI4g==
-----END CERTIFICATE-----