Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
File:                     o05gF-H-A5MnjChZ9DBDsx7myJo.mft (raw, json)
Hash identifier:          QESebWUcuV82FV60hcZ0psudVXEs/4Mq+bWv+PMxf9s=
Subject key identifier:   86:8F:88:0D:45:C0:FF:91:22:E8:00:BD:02:C3:E6:FA:1B:64:9B:B9
Authority key identifier: A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A
Certificate issuer:       /CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
Certificate serial:       01962E61D2536FBEE83C426DA2348A4EE2AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft
Manifest number:          01AE
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: IThQt7fbZjTxBPjVToQUiBMJLfw.roa (hash: oQVD23q0+FFPZozW7epeAMXOc9QR32sT9Z0RYH7NZss=)
                          2: o05gF-H-A5MnjChZ9DBDsx7myJo.crl (hash: NKxwBviWYxXU1WKbAqpLlWKlZLhZ6p3XTSg5kDmAI38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d2:53:6f:be:e8:3c:42:6d:a2:34:8a:4e:e2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a34e6017e1fe0393278c2859f43043b31ee6c89a
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=868f880d45c0ff9122e800bd02c3e6fa1b649bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:dc:d4:d6:3b:1d:0c:1c:cf:ee:80:7e:6d:
                    66:ab:4d:ae:65:27:5a:75:07:80:b0:51:6c:42:45:
                    a0:51:a7:f2:1c:33:ae:44:25:6d:64:2b:1c:e6:15:
                    7d:62:db:45:46:d5:c5:75:78:06:63:fb:14:c3:2b:
                    38:37:d2:05:f6:7b:95:2e:c3:fa:89:3d:22:d3:86:
                    dd:71:6e:71:1a:8d:e3:9c:b7:5a:6b:76:28:75:bf:
                    56:2c:57:3c:b7:3d:ec:3b:ff:87:9f:b1:24:e5:90:
                    93:c8:ff:9c:5e:52:e5:8b:c2:ef:11:0d:c3:97:de:
                    b2:31:f3:ac:15:82:92:a5:da:e0:76:ed:23:f5:11:
                    04:36:69:62:12:8a:dd:da:34:5b:52:60:9a:64:e9:
                    bb:6d:2c:64:05:3e:8f:30:a7:08:0a:54:71:56:0c:
                    ce:05:e5:5e:03:5c:80:67:67:24:7c:69:ab:2c:c9:
                    cb:14:e5:79:d7:bb:4a:5e:2c:5e:ce:94:c4:e2:d2:
                    63:5b:07:50:70:1f:0f:3a:f8:1c:65:2d:86:1e:fd:
                    68:b2:b4:b1:ef:d1:ae:4a:35:43:10:1e:83:f1:3c:
                    dd:6e:10:61:ca:25:6e:52:a7:b8:2b:21:95:b1:98:
                    d2:9f:5e:ac:e7:29:a9:5e:4f:a3:03:c5:69:5e:0c:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8F:88:0D:45:C0:FF:91:22:E8:00:BD:02:C3:E6:FA:1B:64:9B:B9
            X509v3 Authority Key Identifier:
                keyid:A3:4E:60:17:E1:FE:03:93:27:8C:28:59:F4:30:43:B3:1E:E6:C8:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o05gF-H-A5MnjChZ9DBDsx7myJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6d625c-7e60-4523-9491-d112299ff695/1/o05gF-H-A5MnjChZ9DBDsx7myJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f6:df:b6:72:75:53:be:8b:f1:e5:62:fa:a9:de:6d:d8:01:
         25:fe:14:0e:da:f6:01:0b:22:d8:88:10:4a:bf:be:4d:27:75:
         c4:fb:66:24:f7:b8:b4:32:35:07:66:12:7c:bd:fc:81:28:79:
         56:1d:c9:e9:b5:06:1c:19:90:21:f0:3a:1b:db:ce:a4:f2:96:
         1d:d9:29:f0:41:2a:b6:6c:5f:5c:8c:b5:04:a8:8b:3a:56:e9:
         ab:c8:b5:cb:a7:10:e3:55:ef:cd:46:ce:a9:d7:e9:f4:f7:a5:
         7f:db:42:96:66:93:47:9f:11:1a:b8:a0:3c:a7:34:78:7d:16:
         45:cb:a6:88:6f:b6:6f:8b:d8:43:c3:6b:7f:52:9d:0c:d5:15:
         6a:5f:28:b0:06:0c:23:8e:94:f5:4c:0d:8f:d1:ba:9a:d3:47:
         f4:c5:4e:2c:d7:08:9d:6d:9e:e4:7b:79:bf:26:2b:23:aa:31:
         75:d8:f5:45:71:1c:6a:a0:41:59:23:fd:3f:c6:e8:2e:c4:f2:
         e5:d6:df:06:0b:69:6a:9c:00:bb:fe:47:57:a0:b7:d4:d4:60:
         6a:6a:83:c3:79:3c:85:ff:2c:dc:cc:4f:af:74:50:38:5e:8c:
         97:38:e7:44:4b:b3:8f:2a:44:b6:57:70:f8:81:81:1f:3c:a5:
         31:8f:39:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdJTb77oPEJtojSKTuKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNGU2MDE3ZTFmZTAzOTMyNzhjMjg1OWY0MzA0M2IzMWVl
NmM4OWEwHhcNMjUwNDEzMDkwMTI0WhcNMjUwNDE0MDkwMTI0WjAzMTEwLwYDVQQD
Eyg4NjhmODgwZDQ1YzBmZjkxMjJlODAwYmQwMmMzZTZmYTFiNjQ5YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+jc1NY7HQwcz+6Afm1mq02uZSda
dQeAsFFsQkWgUafyHDOuRCVtZCsc5hV9YttFRtXFdXgGY/sUwys4N9IF9nuVLsP6
iT0i04bdcW5xGo3jnLdaa3Yodb9WLFc8tz3sO/+Hn7Ek5ZCTyP+cXlLli8LvEQ3D
l96yMfOsFYKSpdrgdu0j9REENmliEord2jRbUmCaZOm7bSxkBT6PMKcIClRxVgzO
BeVeA1yAZ2ckfGmrLMnLFOV517tKXixezpTE4tJjWwdQcB8POvgcZS2GHv1osrSx
79GuSjVDEB6D8TzdbhBhyiVuUqe4KyGVsZjSn16s5ympXk+jA8VpXgxkFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaPiA1FwP+RIugAvQLD5vobZJu5MB8GA1UdIwQY
MBaAFKNOYBfh/gOTJ4woWfQwQ7Me5siaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEt
ZDExMjI5OWZmNjk1LzEvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC82ZDYyNWMtN2U2MC00NTIzLTk0OTEtZDExMjI5OWZmNjk1
LzEvbzA1Z0YtSC1BNU1uakNoWjlEQkRzeDdteUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfbftnJ1
U76L8eVi+qnebdgBJf4UDtr2AQsi2IgQSr++TSd1xPtmJPe4tDI1B2YSfL38gSh5
Vh3J6bUGHBmQIfA6G9vOpPKWHdkp8EEqtmxfXIy1BKiLOlbpq8i1y6cQ41XvzUbO
qdfp9Pelf9tClmaTR58RGrigPKc0eH0WRcumiG+2b4vYQ8Nrf1KdDNUVal8osAYM
I46U9UwNj9G6mtNH9MVOLNcInW2e5Ht5vyYrI6oxddj1RXEcaqBBWSP9P8boLsTy
5dbfBgtpapwAu/5HV6C31NRgamqDw3k8hf8s3MxPr3RQOF6MlzjnREuzjypEtldw
+IGBHzylMY85sQ==
-----END CERTIFICATE-----