Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File:                     Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier:          d5v2RiZfntQxkMuD9PsmQz6s/mJk9DAellLPm512NAE=
Subject key identifier:   2D:70:A1:4D:8A:0C:78:EB:25:25:C1:A9:F6:7D:DB:3A:38:6C:52:30
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer:       /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial:       01962F3D46C5F7C3E611153116A19BB2DC77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: RZ72C0vRThHqsqZnTWHHsCZ2/nQ0WEHSSktDBGFhFiI=)
                          2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:46:c5:f7:c3:e6:11:15:31:16:a1:9b:b2:dc:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=2d70a14d8a0c78eb2525c1a9f67ddb3a386c5230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:53:6a:2c:3b:cc:73:19:b1:f1:a7:24:ff:4f:
                    ed:86:1a:d5:7c:dc:45:89:cf:32:ee:1c:d3:2b:5a:
                    85:5b:60:17:00:99:31:f1:32:a3:62:92:5d:18:35:
                    c9:1b:34:18:96:59:65:aa:20:a1:60:1d:35:0f:3d:
                    f4:fe:ff:ed:a8:5d:99:53:8b:2f:8b:0d:52:00:58:
                    e9:f3:8d:c6:ce:34:19:bf:4d:72:de:e3:25:2c:de:
                    07:21:06:86:4e:6b:82:3f:06:ce:b3:dd:a1:de:6d:
                    87:e8:51:ee:60:e8:47:86:ad:d0:76:fc:0e:85:cd:
                    db:58:b4:e8:ab:ec:ef:2c:fa:30:fc:4c:ec:61:ff:
                    d9:82:29:bd:c9:92:4a:a4:cf:04:d8:a8:22:34:f1:
                    07:2b:f2:9a:af:93:87:8d:9b:68:7b:75:76:9d:4c:
                    a5:de:67:f9:35:98:54:63:4d:db:48:7a:1b:f0:f9:
                    22:83:91:fe:4c:0c:48:55:98:0f:d4:90:f4:5a:18:
                    d2:be:3b:2e:b3:76:8e:51:b3:93:ec:24:d3:94:5d:
                    8c:35:d2:41:d8:fd:68:c9:ef:08:72:16:ec:14:60:
                    30:b4:9d:2a:fd:93:a9:3f:68:af:d7:16:55:e5:73:
                    f1:87:1e:2e:6b:d4:d8:2f:2e:44:52:d1:57:9d:25:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:70:A1:4D:8A:0C:78:EB:25:25:C1:A9:F6:7D:DB:3A:38:6C:52:30
            X509v3 Authority Key Identifier:
                keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9b:dc:5b:4c:ec:cd:b2:11:0d:ff:6e:25:f4:86:64:e5:f3:
         0d:21:f9:08:45:bf:52:cb:40:3d:b2:f3:32:ac:67:11:5a:77:
         f8:72:95:95:8d:5d:56:f6:44:64:1f:7a:9d:8a:08:4e:ea:d0:
         7a:93:22:b8:9b:72:64:58:0e:27:04:13:d0:50:46:02:41:15:
         7a:e1:f3:d0:91:5a:6a:d7:69:e9:d6:43:7e:2e:c3:f4:77:eb:
         b2:75:29:ad:d0:33:56:69:cb:8a:6a:ae:02:cf:84:31:fd:68:
         4e:6e:7b:f8:52:5f:dc:97:9c:3c:9a:93:0e:82:4c:a4:44:a3:
         1b:0f:73:77:05:2f:79:7d:f9:d5:75:c4:ef:b6:df:2a:92:db:
         79:1d:d8:04:6a:45:14:3f:74:96:f5:3f:c3:28:4f:58:6a:69:
         9b:85:6d:dd:ae:fe:af:57:7e:a6:60:36:a3:9d:a0:d3:19:02:
         45:ad:4f:91:11:eb:65:69:59:6b:7a:f7:36:89:3f:a0:fd:51:
         53:e1:38:d3:35:1c:f5:03:f8:72:b1:5f:45:88:33:8f:1a:c5:
         e1:0e:06:db:c0:e4:88:9d:8f:20:3d:14:da:0a:65:52:20:34:
         24:66:9d:a9:5c:45:00:0b:20:fe:69:3b:99:3d:a1:5d:83:1f:
         6d:4c:6c:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUbF98PmERUxFqGbstx3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YWU4Mjg1NzNmMzk0MTNmODA2YjUxZWUwNDBjZDM0YmM1
ZjYzYWUwHhcNMjUwNDEzMTMwMTA2WhcNMjUwNDE0MTMwMTA2WjAzMTEwLwYDVQQD
EygyZDcwYTE0ZDhhMGM3OGViMjUyNWMxYTlmNjdkZGIzYTM4NmM1MjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lNqLDvMcxmx8ack/0/thhrVfNxF
ic8y7hzTK1qFW2AXAJkx8TKjYpJdGDXJGzQYllllqiChYB01Dz30/v/tqF2ZU4sv
iw1SAFjp843GzjQZv01y3uMlLN4HIQaGTmuCPwbOs92h3m2H6FHuYOhHhq3QdvwO
hc3bWLToq+zvLPow/EzsYf/Zgim9yZJKpM8E2KgiNPEHK/Kar5OHjZtoe3V2nUyl
3mf5NZhUY03bSHob8Pkig5H+TAxIVZgP1JD0WhjSvjsus3aOUbOT7CTTlF2MNdJB
2P1oye8IchbsFGAwtJ0q/ZOpP2iv1xZV5XPxhx4ua9TYLy5EUtFXnSVqpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1woU2KDHjrJSXBqfZ92zo4bFIwMB8GA1UdIwQY
MBaAFDmugoVz85QT+Aa1HuBAzTS8X2OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2Qt
ODk3MThlYmMzODQ3LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2QtODk3MThlYmMzODQ3
LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpvcW0zs
zbIRDf9uJfSGZOXzDSH5CEW/UstAPbLzMqxnEVp3+HKVlY1dVvZEZB96nYoITurQ
epMiuJtyZFgOJwQT0FBGAkEVeuHz0JFaatdp6dZDfi7D9HfrsnUprdAzVmnLimqu
As+EMf1oTm57+FJf3JecPJqTDoJMpESjGw9zdwUveX351XXE77bfKpLbeR3YBGpF
FD90lvU/wyhPWGppm4Vt3a7+r1d+pmA2o52g0xkCRa1PkRHrZWlZa3r3Nok/oP1R
U+E40zUc9QP4crFfRYgzjxrF4Q4G28DkiJ2PID0U2gplUiA0JGadqVxFAAsg/mk7
mT2hXYMfbUxssg==
-----END CERTIFICATE-----