Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File:                     OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier:          CcIlDDhrY3ZPwOk5v0LSJoo2EBbW5vSplYkoj2CSgBc=
Subject key identifier:   2F:8A:51:7A:C7:58:2E:55:82:40:68:70:F8:11:BB:50:23:77:E5:EE
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer:       /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial:       01962E61AEFEB54AECDF47F2CAB7BE6BEDAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: 3QmpaDK9iL/qi3A+6hpzTskmjpCP2nl8XRtSeOCeMus=)
                          2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ae:fe:b5:4a:ec:df:47:f2:ca:b7:be:6b:ed:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=2f8a517ac7582e5582406870f811bb502377e5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:12:28:24:6f:e8:92:cd:64:d8:40:03:b2:
                    b3:0c:12:c6:07:ce:84:61:20:b2:79:89:ef:3e:d2:
                    97:6f:0e:4a:ec:55:39:84:fd:03:ca:5f:b2:53:7a:
                    11:12:a1:01:25:f4:df:92:d0:a6:bf:30:ac:12:96:
                    c8:e8:2c:5f:3b:bf:d3:91:df:d1:14:ae:12:35:56:
                    ec:ef:c2:9c:87:1a:23:7b:6f:83:2e:2e:f8:ca:fb:
                    a5:f7:2e:3a:7e:1b:e0:1c:6f:54:db:52:e7:31:9b:
                    4d:13:0d:37:93:0d:40:7f:b5:b9:bf:51:f4:9f:ee:
                    5a:98:28:86:ca:81:66:23:cb:19:3c:48:7e:c2:33:
                    6a:0d:b8:b2:8d:bd:32:2e:73:f8:9f:5a:79:6c:e6:
                    5b:16:d5:8f:56:63:86:71:4a:5a:ba:d4:77:f8:01:
                    79:1a:0a:46:09:67:92:45:16:22:8b:d9:0b:fa:a1:
                    16:83:2b:83:4e:cb:e4:76:60:b1:9d:47:25:3c:d5:
                    1a:1f:2a:bb:96:03:77:c9:ea:dd:f0:b3:a3:86:bf:
                    e1:8e:7c:8e:e9:26:71:b8:63:e1:33:b8:24:58:28:
                    98:81:c0:57:42:cb:10:6c:bd:c5:8e:eb:39:a4:50:
                    06:e1:45:5d:17:1b:2c:25:a1:7d:62:e9:22:64:1d:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:51:7A:C7:58:2E:55:82:40:68:70:F8:11:BB:50:23:77:E5:EE
            X509v3 Authority Key Identifier:
                keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:09:20:9a:d9:06:e0:ed:e7:8e:35:05:8e:31:68:8a:94:e3:
         d5:1f:a9:97:8e:4b:4f:b3:49:4e:88:bf:b4:dd:bb:93:f9:db:
         61:94:76:24:cb:1e:39:6d:73:29:86:ab:f9:c4:27:79:5c:04:
         1a:85:09:26:88:f9:10:44:71:e4:18:2c:ca:d6:e6:07:34:ef:
         1e:d9:14:6e:3b:ef:88:35:f8:77:01:25:fa:2a:e0:dc:a9:17:
         3a:a9:32:41:64:64:39:13:b9:b4:43:91:ab:d9:71:53:13:a5:
         b8:bc:6c:17:6f:c6:b7:ae:77:54:5e:30:3a:4c:44:65:72:d1:
         29:5d:e2:aa:ad:a4:a3:22:da:91:62:e4:1d:ef:c5:0e:ff:66:
         a8:ed:f0:46:df:54:cc:8e:17:45:7c:3d:e8:d8:c4:6d:9f:cf:
         df:b3:d3:0d:b1:ff:be:f8:d6:90:26:af:57:f8:17:eb:fa:63:
         51:f6:59:3b:dd:2e:b2:ef:a2:46:2d:30:fd:aa:1d:9b:b0:58:
         18:71:77:a2:55:74:92:ce:f7:cf:28:f4:35:32:26:4a:60:ba:
         85:ee:a4:5b:e5:87:26:43:06:a0:ce:7a:78:c1:7d:1b:0e:9e:
         3d:99:c7:ca:a2:0c:fe:d2:63:7f:a1:80:67:2a:2d:51:26:f6:
         f1:d8:6a:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYa7+tUrs30fyyre+a+2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDExZjZjMTc5ZWIzMTQyYTQ4ZWU2NGIyZTk0Y2RlOWRk
MzYxNzMwHhcNMjUwNDEzMDkwMTE1WhcNMjUwNDE0MDkwMTE1WjAzMTEwLwYDVQQD
EygyZjhhNTE3YWM3NTgyZTU1ODI0MDY4NzBmODExYmI1MDIzNzdlNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcESKCRv6JLNZNhAA7KzDBLGB86E
YSCyeYnvPtKXbw5K7FU5hP0Dyl+yU3oREqEBJfTfktCmvzCsEpbI6CxfO7/Tkd/R
FK4SNVbs78Kchxoje2+DLi74yvul9y46fhvgHG9U21LnMZtNEw03kw1Af7W5v1H0
n+5amCiGyoFmI8sZPEh+wjNqDbiyjb0yLnP4n1p5bOZbFtWPVmOGcUpautR3+AF5
GgpGCWeSRRYii9kL+qEWgyuDTsvkdmCxnUclPNUaHyq7lgN3yerd8LOjhr/hjnyO
6SZxuGPhM7gkWCiYgcBXQssQbL3Fjus5pFAG4UVdFxssJaF9YukiZB3owwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+KUXrHWC5VgkBocPgRu1Ajd+XuMB8GA1UdIwQY
MBaAFDrRH2wXnrMUKkjuZLLpTN6d02FzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzct
ZWY5MWQ4YjViMDgxLzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83ZGJmMzYtMjQ4NS00OTM1LWEwYzctZWY5MWQ4YjViMDgx
LzEvT3RFZmJCZWVzeFFxU081a3N1bE0zcDNUWVhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAkgmtkG
4O3njjUFjjFoipTj1R+pl45LT7NJToi/tN27k/nbYZR2JMseOW1zKYar+cQneVwE
GoUJJoj5EERx5BgsytbmBzTvHtkUbjvviDX4dwEl+irg3KkXOqkyQWRkORO5tEOR
q9lxUxOluLxsF2/Gt653VF4wOkxEZXLRKV3iqq2koyLakWLkHe/FDv9mqO3wRt9U
zI4XRXw96NjEbZ/P37PTDbH/vvjWkCavV/gX6/pjUfZZO90usu+iRi0w/aodm7BY
GHF3olV0ks73zyj0NTImSmC6he6kW+WHJkMGoM56eMF9Gw6ePZnHyqIM/tJjf6GA
ZyotUSb28dhqlQ==
-----END CERTIFICATE-----