Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File:                     oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier:          h04prBp9U9eZqslf1PDr22cxV9xNHA3lGDRh3C2HJsE=
Subject key identifier:   F9:20:3E:AD:C9:28:6F:36:7A:64:8A:4A:2F:00:E1:7F:07:BA:E7:34
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer:       /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial:       01962ECFC010623D26ABA148561FB1FD27DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number:          038C
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: 5Sdp75UI07U0XNu2tAWSzrc-qpk.roa (hash: SzIYjhnlLWEvz8Z1X0oLYzWFIohoOl7chIuBKt0PdE8=)
                          2: H1tYgXLLWfPNRsiraZOWsc2ElvQ.roa (hash: EmbP4jLbfudtKgGtKdZDrQ0gORWApQpD2bI92szlr5c=)
                          3: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
                          4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: Xs9zkcI0RJKll6t0KQZVwEUxIr+5OFioyh/8VzeZUyo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c0:10:62:3d:26:ab:a1:48:56:1f:b1:fd:27:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=f9203eadc9286f367a648a4a2f00e17f07bae734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ed:b6:e3:9a:2d:52:fb:c5:53:d4:ac:ad:b0:
                    6c:2e:5a:5f:e3:a6:d7:e4:bd:fe:e2:0c:b7:c7:55:
                    fb:ef:69:73:bd:18:95:f1:b8:dc:75:b5:b8:a6:f4:
                    a5:b9:71:f8:43:fa:07:b7:9e:fb:14:bd:e5:b4:35:
                    ad:f3:cd:65:ca:39:22:ba:4e:73:3a:95:e8:07:5e:
                    63:72:2b:92:9a:16:f2:0d:87:fc:31:0f:fe:7f:f2:
                    4d:66:46:d2:e5:db:62:71:d5:1d:75:b0:a4:b7:a7:
                    60:b7:37:83:08:00:d2:f0:d8:76:c9:04:79:77:7a:
                    3b:01:51:da:5e:9d:d3:37:78:01:7d:17:dd:98:f6:
                    a5:fd:1e:b0:3b:77:dd:17:d8:b2:64:4b:8e:db:cd:
                    4e:14:1d:b1:48:bb:28:5c:80:2e:cb:fd:b6:73:d1:
                    3e:2b:f5:3c:cb:5f:49:e9:28:1e:e7:ae:bf:a2:e0:
                    5a:05:93:a4:6d:a1:7d:a7:b7:fd:2b:02:5f:2b:d2:
                    ac:de:3f:74:4a:97:21:c1:9e:62:e5:30:7f:ac:ac:
                    e7:52:e6:c9:3b:90:c4:36:95:60:c8:01:02:19:cd:
                    a2:7b:f5:f1:12:8b:9e:24:0e:36:ed:82:ce:08:b0:
                    d6:0b:76:59:36:4c:9b:7e:07:5f:83:b5:b9:36:18:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:20:3E:AD:C9:28:6F:36:7A:64:8A:4A:2F:00:E1:7F:07:BA:E7:34
            X509v3 Authority Key Identifier:
                keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:dc:72:76:59:18:60:6e:4a:47:0b:93:0a:6b:70:5e:e6:f4:
         89:cf:bf:0b:96:7e:30:6a:3d:cc:1b:4a:6c:90:26:78:d9:d6:
         8a:2b:d8:5e:92:79:c1:44:5f:2d:dc:ed:6e:7c:92:af:3a:87:
         1e:2d:58:55:6a:b5:dc:2d:b8:4c:24:cd:72:8e:5b:3b:95:f4:
         74:c1:db:03:b5:09:ba:d5:3b:07:1a:5a:28:71:63:ac:71:e2:
         a5:ce:2e:d8:0b:dc:48:92:8f:35:d3:2b:c3:0f:8f:25:4a:9d:
         f2:bf:69:29:83:dc:d3:bb:5e:da:bf:99:db:00:29:21:bf:a5:
         66:a8:de:31:21:8f:01:ff:7f:37:4b:4b:b0:cf:af:fd:d0:c3:
         32:52:11:37:71:fe:50:96:de:86:47:a9:e3:f2:54:87:aa:e8:
         a7:4d:47:cf:24:17:6f:7e:5d:32:2f:a1:e5:f6:07:03:4d:7b:
         bd:03:bb:5e:f8:72:17:94:e6:2f:1d:2a:9f:51:28:45:71:06:
         2d:ff:44:e9:4b:20:e7:21:7b:3c:dc:ee:11:a5:95:1a:71:b6:
         42:f0:88:b1:b5:50:c2:e9:61:95:d4:3e:05:9b:31:32:14:da:
         34:2d:42:c2:5c:52:9d:f4:0c:fd:1c:e8:4f:31:3f:3e:bb:ae:
         ee:1d:68:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8AQYj0mq6FIVh+x/SfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOWIyZDcwMjMzZTBlNWJkZWY2ZGJmYmRhOTE4ODZkMjdi
NmE1YWUwHhcNMjUwNDEzMTEwMTI5WhcNMjUwNDE0MTEwMTI5WjAzMTEwLwYDVQQD
EyhmOTIwM2VhZGM5Mjg2ZjM2N2E2NDhhNGEyZjAwZTE3ZjA3YmFlNzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5u2245otUvvFU9SsrbBsLlpf46bX
5L3+4gy3x1X772lzvRiV8bjcdbW4pvSluXH4Q/oHt577FL3ltDWt881lyjkiuk5z
OpXoB15jciuSmhbyDYf8MQ/+f/JNZkbS5dticdUddbCkt6dgtzeDCADS8Nh2yQR5
d3o7AVHaXp3TN3gBfRfdmPal/R6wO3fdF9iyZEuO281OFB2xSLsoXIAuy/22c9E+
K/U8y19J6Sge566/ouBaBZOkbaF9p7f9KwJfK9Ks3j90SpchwZ5i5TB/rKznUubJ
O5DENpVgyAECGc2ie/XxEoueJA427YLOCLDWC3ZZNkybfgdfg7W5Nhj9TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkgPq3JKG82emSKSi8A4X8Huuc0MB8GA1UdIwQY
MBaAFKGbLXAjPg5b3vbb+9qRiG0ntqWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUt
M2YxYTdjNGY1MWI1LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jMWMxMWMtMjE2MS00YWZjLTk3YTUtM2YxYTdjNGY1MWI1
LzEvb1pzdGNDTS1EbHZlOXR2NzJwR0liU2UycGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNxydlkY
YG5KRwuTCmtwXub0ic+/C5Z+MGo9zBtKbJAmeNnWiivYXpJ5wURfLdztbnySrzqH
Hi1YVWq13C24TCTNco5bO5X0dMHbA7UJutU7BxpaKHFjrHHipc4u2AvcSJKPNdMr
ww+PJUqd8r9pKYPc07te2r+Z2wApIb+lZqjeMSGPAf9/N0tLsM+v/dDDMlIRN3H+
UJbehkep4/JUh6rop01HzyQXb35dMi+h5fYHA017vQO7XvhyF5TmLx0qn1EoRXEG
Lf9E6Usg5yF7PNzuEaWVGnG2QvCIsbVQwulhldQ+BZsxMhTaNC1CwlxSnfQM/Rzo
TzE/Pruu7h1ozg==
-----END CERTIFICATE-----