Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0ee012-ba7b-4606-9d7c-c4ace4f834b5/1/ok5SPzBOIuroz_iA2DiEk8WgEXg.mft
File:                     ok5SPzBOIuroz_iA2DiEk8WgEXg.mft (raw, json)
Hash identifier:          9dSd/S24xqO55+0odZrMQVW/fDICWbQG4omXadsMVsU=
Subject key identifier:   FA:C3:C3:C3:AD:5C:FB:A2:DE:7C:EC:FB:CA:68:49:C0:14:36:0A:7C
Authority key identifier: A2:4E:52:3F:30:4E:22:EA:E8:CF:F8:80:D8:38:84:93:C5:A0:11:78
Certificate issuer:       /CN=a24e523f304e22eae8cff880d8388493c5a01178
Certificate serial:       0190C8B8C187068FD5F04A87CDECCC49B882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ok5SPzBOIuroz_iA2DiEk8WgEXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/0ee012-ba7b-4606-9d7c-c4ace4f834b5/1/ok5SPzBOIuroz_iA2DiEk8WgEXg.mft
Manifest number:          0FE9
Signing time:             Fri 19 Jul 2024 02:01:09 +0000
Manifest this update:     Fri 19 Jul 2024 02:01:09 +0000
Manifest next update:     Sat 20 Jul 2024 02:01:09 +0000
Files and hashes:         1: Fe7uHk9u40_jNRGrC3nW6harDMg.roa (hash: Es8wQl9RsGP2RKff96HG+AixU62lDbkaw0m12lyaH28=)
                          2: ok5SPzBOIuroz_iA2DiEk8WgEXg.crl (hash: hazmKKZPZIMcW/Sugx0zGON664CZYM+1nGtJVb98Ig4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c8:b8:c1:87:06:8f:d5:f0:4a:87:cd:ec:cc:49:b8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24e523f304e22eae8cff880d8388493c5a01178
        Validity
            Not Before: Jul 19 02:01:09 2024 GMT
            Not After : Jul 20 02:01:09 2024 GMT
        Subject: CN=fac3c3c3ad5cfba2de7cecfbca6849c014360a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dd:4e:47:bc:38:06:a5:11:53:a0:fb:5b:9f:
                    5c:71:8b:3a:ee:a3:65:da:01:5a:02:de:35:0e:75:
                    b5:fa:c2:cc:76:57:b9:ab:c4:6e:0e:37:cf:55:e6:
                    49:fb:dc:80:c2:d9:88:87:5c:03:50:42:73:2b:5e:
                    64:ad:f9:f0:55:37:be:0d:57:2a:d6:f7:66:1d:ef:
                    73:3f:66:fb:a5:e1:25:39:41:f2:25:b3:03:dd:8d:
                    40:f2:c2:08:88:9c:13:12:89:e9:66:03:6e:b9:0d:
                    b9:15:74:7e:35:99:73:59:22:e1:4c:43:e0:93:5e:
                    99:51:18:67:91:b1:99:a5:1d:f6:e1:08:8c:38:53:
                    1e:75:11:98:ca:e3:c4:33:4c:95:e0:3a:36:45:aa:
                    fd:07:27:83:d2:ce:2d:a3:40:bb:57:52:2e:64:ef:
                    26:19:0b:49:84:7c:cb:52:ba:68:0a:6b:5e:fb:97:
                    d1:61:42:7c:85:26:46:7c:a4:49:f6:d4:1f:12:b0:
                    d3:29:aa:d4:04:a7:3e:e0:2c:b8:62:6c:ed:31:0f:
                    64:c6:21:ef:d5:34:a9:e6:7a:dd:2c:6d:d5:0f:81:
                    39:1c:45:a4:5c:f2:6e:eb:40:9a:e8:1d:5d:ae:05:
                    64:cc:7c:f8:73:e2:de:eb:ba:df:f6:77:8b:a7:34:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C3:C3:C3:AD:5C:FB:A2:DE:7C:EC:FB:CA:68:49:C0:14:36:0A:7C
            X509v3 Authority Key Identifier:
                keyid:A2:4E:52:3F:30:4E:22:EA:E8:CF:F8:80:D8:38:84:93:C5:A0:11:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ok5SPzBOIuroz_iA2DiEk8WgEXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0ee012-ba7b-4606-9d7c-c4ace4f834b5/1/ok5SPzBOIuroz_iA2DiEk8WgEXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0ee012-ba7b-4606-9d7c-c4ace4f834b5/1/ok5SPzBOIuroz_iA2DiEk8WgEXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7c:c0:cd:bd:fc:2c:0e:1f:49:f4:a4:46:48:aa:84:b5:66:
         d2:92:aa:07:52:32:61:7e:cc:25:93:62:11:9e:16:38:17:41:
         58:7b:03:53:b3:53:fb:ea:ba:f9:d2:08:7d:c6:be:3e:e8:b2:
         48:c7:3c:9a:73:e8:c7:a3:47:87:2d:89:79:5d:89:c0:65:fb:
         02:3c:db:43:2d:4f:db:e2:76:95:31:9e:a6:4b:a6:e7:63:aa:
         b7:4e:9f:88:2d:c9:43:cc:58:0b:52:77:0a:fc:ea:29:7b:56:
         9d:6b:32:55:06:c3:27:ec:ae:2d:df:6f:c5:36:82:ec:32:4b:
         99:c9:e7:3b:a1:44:0f:fb:49:75:38:78:86:32:49:ba:ed:0e:
         79:1b:ea:5c:82:76:c0:0f:f2:5f:9c:c7:cf:03:a0:2b:e0:62:
         43:68:0d:d0:c8:9a:24:69:52:62:75:29:59:fa:ed:07:98:2b:
         e5:c9:86:68:c4:5b:46:79:17:a5:08:a3:6c:56:9e:5e:40:d7:
         c5:86:d4:31:35:8c:48:32:8b:98:80:c9:1b:9b:9d:80:62:bf:
         25:b4:a2:15:6f:36:4a:44:12:1b:67:31:f3:8e:92:ad:a6:7b:
         2b:eb:2a:1b:ea:22:95:a6:70:a3:4e:3d:f7:b2:fd:b3:fe:e0:
         05:8d:cb:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZDIuMGHBo/V8EqHzezMSbiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNGU1MjNmMzA0ZTIyZWFlOGNmZjg4MGQ4Mzg4NDkzYzVh
MDExNzgwHhcNMjQwNzE5MDIwMTA5WhcNMjQwNzIwMDIwMTA5WjAzMTEwLwYDVQQD
EyhmYWMzYzNjM2FkNWNmYmEyZGU3Y2VjZmJjYTY4NDljMDE0MzYwYTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd1OR7w4BqURU6D7W59ccYs67qNl
2gFaAt41DnW1+sLMdle5q8RuDjfPVeZJ+9yAwtmIh1wDUEJzK15krfnwVTe+DVcq
1vdmHe9zP2b7peElOUHyJbMD3Y1A8sIIiJwTEonpZgNuuQ25FXR+NZlzWSLhTEPg
k16ZURhnkbGZpR324QiMOFMedRGYyuPEM0yV4Do2Rar9ByeD0s4to0C7V1IuZO8m
GQtJhHzLUrpoCmte+5fRYUJ8hSZGfKRJ9tQfErDTKarUBKc+4Cy4YmztMQ9kxiHv
1TSp5nrdLG3VD4E5HEWkXPJu60Ca6B1drgVkzHz4c+Le67rf9neLpzTkXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrDw8OtXPui3nzs+8poScAUNgp8MB8GA1UdIwQY
MBaAFKJOUj8wTiLq6M/4gNg4hJPFoBF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2s1U1B6Qk9JdXJvel9pQTJEaUVrOFdnRVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wZWUwMTItYmE3Yi00NjA2LTlkN2Mt
YzRhY2U0ZjgzNGI1LzEvb2s1U1B6Qk9JdXJvel9pQTJEaUVrOFdnRVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wZWUwMTItYmE3Yi00NjA2LTlkN2MtYzRhY2U0ZjgzNGI1
LzEvb2s1U1B6Qk9JdXJvel9pQTJEaUVrOFdnRVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3zAzb38
LA4fSfSkRkiqhLVm0pKqB1IyYX7MJZNiEZ4WOBdBWHsDU7NT++q6+dIIfca+Puiy
SMc8mnPox6NHhy2JeV2JwGX7AjzbQy1P2+J2lTGepkum52Oqt06fiC3JQ8xYC1J3
CvzqKXtWnWsyVQbDJ+yuLd9vxTaC7DJLmcnnO6FED/tJdTh4hjJJuu0OeRvqXIJ2
wA/yX5zHzwOgK+BiQ2gN0MiaJGlSYnUpWfrtB5gr5cmGaMRbRnkXpQijbFaeXkDX
xYbUMTWMSDKLmIDJG5udgGK/JbSiFW82SkQSG2cx846SraZ7K+sqG+oilaZwo049
97L9s/7gBY3LBg==
-----END CERTIFICATE-----