Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File:                     O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier:          Nw6QXsqcaO8G5S4IJlcIhKvyDrjm4Qf0x72Os/RwX6o=
Subject key identifier:   32:66:0E:00:96:9C:37:A0:1B:8D:9A:22:62:98:B8:15:EA:4D:1B:69
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer:       /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial:       01962F3D47380BFC52D718E1507FDD6C6CBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=)
                          2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=)
                          3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=)
                          4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=)
                          5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: QCxLKjtiaOSkJz4cOlO7IFpdMJZQb+RwXmL27LSVLMk=)
                          6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=)
                          7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=)
                          8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:47:38:0b:fc:52:d7:18:e1:50:7f:dd:6c:6c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=32660e00969c37a01b8d9a226298b815ea4d1b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:36:a6:ac:2c:11:f8:91:a7:3d:46:28:5e:
                    8b:24:f3:58:0b:24:3b:bd:6d:b7:5f:be:a4:b5:bb:
                    e4:d1:4c:47:1d:07:43:a4:8a:c6:19:89:79:c7:62:
                    7e:be:ad:39:44:10:77:59:4a:19:bd:4a:1b:12:76:
                    35:e2:f9:43:e5:ea:27:ee:4d:c9:cf:c4:f8:f6:a0:
                    e9:15:5d:6c:4f:01:f2:c8:72:0b:e1:b9:90:e3:8b:
                    a7:a7:84:c5:92:49:e2:cc:ff:a0:38:6d:d2:ef:45:
                    bd:49:7d:42:44:31:4d:3d:c3:34:26:03:4e:33:b2:
                    31:c1:f1:57:56:e6:03:16:d2:71:db:cf:1d:56:4d:
                    48:9d:4d:6a:e5:b3:e5:33:5a:ce:c1:a2:10:c2:6c:
                    36:0c:b2:c3:7b:45:af:77:b6:4d:14:6d:64:b7:24:
                    41:81:78:68:4a:86:9f:88:f3:d7:0f:98:39:36:97:
                    4e:4b:f5:e2:cb:f3:75:0c:24:37:b4:7f:64:c8:0c:
                    84:11:40:b0:ee:a1:d6:54:be:97:28:89:56:0d:c3:
                    7c:08:f0:aa:86:d6:0e:21:7f:cc:5f:ee:ac:54:a9:
                    f9:2b:62:ee:1a:26:1b:80:44:20:5e:7a:17:31:68:
                    fe:05:30:83:55:48:33:35:7e:1c:37:34:88:91:d5:
                    4d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:66:0E:00:96:9C:37:A0:1B:8D:9A:22:62:98:B8:15:EA:4D:1B:69
            X509v3 Authority Key Identifier:
                keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:60:ab:8e:07:aa:71:3f:a2:10:29:e0:1f:a7:09:e0:5c:e1:
         03:81:3b:89:ff:13:1b:de:34:79:c0:6c:2e:42:49:ca:2f:ba:
         c8:a3:66:8f:f7:6f:c5:af:4a:7c:48:97:13:2c:81:13:9d:ec:
         5b:2e:60:1b:78:32:cb:16:8a:e5:44:12:4a:bb:b9:2f:73:83:
         76:8b:45:c7:c9:e2:ca:f3:86:d4:6e:e5:dd:38:9a:18:2a:91:
         bb:48:38:fe:39:de:d4:76:67:29:71:ac:4b:09:9f:04:2e:ba:
         11:91:06:ce:5c:84:40:7d:61:36:0a:50:59:c9:1d:10:01:be:
         1c:df:6e:3c:0c:d7:60:9a:d0:ae:7b:25:34:20:14:d2:90:ac:
         af:df:79:9a:9b:e0:8c:59:f6:a8:f1:0b:10:73:16:6a:18:72:
         69:25:8c:ac:d3:f3:b1:20:5e:7a:4f:3c:71:37:a3:b8:ae:95:
         2a:24:fc:b3:74:03:41:88:1d:21:e8:43:5d:3b:3d:ad:0c:1e:
         af:2b:06:6c:ae:d3:28:60:ca:54:f3:cf:8f:c4:7b:f3:4f:11:
         ae:3d:7b:91:22:1c:25:ce:4d:f1:74:ef:05:73:38:03:b0:af:
         f6:b1:e5:de:db:c6:2b:82:56:65:f8:4f:e7:b3:56:14:5c:1a:
         4d:b1:3d:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUc4C/xS1xjhUH/dbGy/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5
NjZkNDIwHhcNMjUwNDEzMTMwMTA3WhcNMjUwNDE0MTMwMTA3WjAzMTEwLwYDVQQD
EygzMjY2MGUwMDk2OWMzN2EwMWI4ZDlhMjI2Mjk4YjgxNWVhNGQxYjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAw2pqwsEfiRpz1GKF6LJPNYCyQ7
vW23X76ktbvk0UxHHQdDpIrGGYl5x2J+vq05RBB3WUoZvUobEnY14vlD5eon7k3J
z8T49qDpFV1sTwHyyHIL4bmQ44unp4TFkknizP+gOG3S70W9SX1CRDFNPcM0JgNO
M7IxwfFXVuYDFtJx288dVk1InU1q5bPlM1rOwaIQwmw2DLLDe0Wvd7ZNFG1ktyRB
gXhoSoafiPPXD5g5NpdOS/Xiy/N1DCQ3tH9kyAyEEUCw7qHWVL6XKIlWDcN8CPCq
htYOIX/MX+6sVKn5K2LuGiYbgEQgXnoXMWj+BTCDVUgzNX4cNzSIkdVNUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJmDgCWnDegG42aImKYuBXqTRtpMB8GA1UdIwQY
MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt
NDY2ZTljYWI3ODY0LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0
LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGCrjgeq
cT+iECngH6cJ4FzhA4E7if8TG940ecBsLkJJyi+6yKNmj/dvxa9KfEiXEyyBE53s
Wy5gG3gyyxaK5UQSSru5L3ODdotFx8niyvOG1G7l3TiaGCqRu0g4/jne1HZnKXGs
SwmfBC66EZEGzlyEQH1hNgpQWckdEAG+HN9uPAzXYJrQrnslNCAU0pCsr995mpvg
jFn2qPELEHMWahhyaSWMrNPzsSBeek88cTejuK6VKiT8s3QDQYgdIehDXTs9rQwe
rysGbK7TKGDKVPPPj8R7808Rrj17kSIcJc5N8XTvBXM4A7Cv9rHl3tvGK4JWZfhP
57NWFFwaTbE9rA==
-----END CERTIFICATE-----