Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File:                     oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier:          nZ/GS2k+DMk0mp1JPBUp8R2XVJmT5y+RmMi6lBbjOGM=
Subject key identifier:   6F:81:57:2E:62:7C:AD:BD:8D:5A:A3:A3:F0:A2:6B:58:06:32:5A:42
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer:       /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial:       01962E2B0DEA9BD9B4F728AFFDCC9B26D4F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number:          1442
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: XK1HmfxcdTbRAdHlqNq8V7yYy_A.roa (hash: sq5IFjKXmmj7aEDxsZ6+3DEVQrRJ2eRe1t+cEED93OE=)
                          2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: E8Z+kkTXomHU7KVCz9YawSl+MZ5FYbveClMbAbnssq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0d:ea:9b:d9:b4:f7:28:af:fd:cc:9b:26:d4:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=6f81572e627cadbd8d5aa3a3f0a26b5806325a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ec:6c:0f:01:9a:71:2b:b2:99:7e:94:36:2a:
                    29:79:81:56:7d:3f:11:6c:be:95:ce:59:d5:8a:94:
                    fd:89:23:c6:39:63:59:36:0c:c5:e9:93:2b:73:e8:
                    09:75:38:3f:7c:5d:85:47:df:79:8a:5b:21:b3:b5:
                    04:68:0f:06:f3:d5:86:ff:c3:f8:2b:a2:2c:5d:d9:
                    20:bc:07:55:53:87:21:b6:2a:b2:50:c3:8e:53:a9:
                    c4:19:64:c1:69:b0:e5:86:6a:ab:50:8d:38:3f:96:
                    5b:a0:e8:50:55:34:81:de:1b:9f:0c:1f:cb:13:c3:
                    47:e7:92:2f:30:df:1f:81:17:6d:ca:aa:b3:e0:5f:
                    bc:a8:1b:29:85:ab:5e:bd:8c:03:f4:44:ed:d7:f3:
                    b0:06:2e:e6:c3:0a:8b:ea:16:46:08:24:e3:83:59:
                    27:ef:94:5e:9b:54:8c:6b:42:a9:13:d9:4d:6c:3b:
                    f8:c5:60:6e:31:ff:5f:e6:26:f6:c0:34:42:77:e3:
                    09:2a:8c:60:04:68:57:ba:73:9a:a2:f4:bd:6e:c3:
                    f7:10:04:fd:e8:f3:8a:5d:59:d5:39:34:73:87:52:
                    32:a0:08:cb:cc:bf:90:e3:9b:0c:89:31:67:32:a1:
                    d8:93:ca:6e:dc:d9:a3:8b:71:83:81:3d:f1:da:09:
                    59:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:81:57:2E:62:7C:AD:BD:8D:5A:A3:A3:F0:A2:6B:58:06:32:5A:42
            X509v3 Authority Key Identifier:
                keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1a:85:26:6c:3a:d1:b8:d1:1b:e7:d1:48:79:84:29:63:64:
         ff:f1:85:45:57:c3:96:6e:2a:b8:b7:25:41:67:59:8f:93:c8:
         50:1a:95:80:ae:ab:24:4f:00:4d:5d:fa:eb:e2:b4:df:c1:b4:
         93:91:13:c0:06:98:79:5a:ce:ee:fe:ab:4f:3e:c6:ec:2c:75:
         91:70:16:a1:62:48:b1:4f:f0:49:48:af:aa:34:09:2b:51:4f:
         2e:de:fc:1a:d4:e8:50:9c:2e:e0:39:a2:39:b1:38:5c:7c:cf:
         26:3b:f5:9e:a2:10:a8:82:85:50:9a:15:33:75:8f:f4:81:f0:
         c7:49:35:f5:0f:63:f2:52:ee:99:2f:74:02:b8:c9:b2:4c:86:
         38:49:bc:45:13:bd:36:1d:c4:aa:78:91:55:43:e9:b6:5b:ca:
         ed:e2:bb:3f:f1:05:6e:58:47:06:39:10:95:f7:bd:3d:45:59:
         af:c5:63:46:15:9c:a9:db:b6:81:8b:8b:63:34:15:33:4c:32:
         67:ce:be:5e:a3:a1:87:65:a2:4f:40:e1:f1:fc:05:74:6f:73:
         b6:74:f2:da:4f:f6:99:0e:2b:f4:17:eb:90:53:5b:3e:68:6a:
         4d:1d:02:6d:79:55:b0:e3:d6:bc:f7:1d:aa:e6:ac:9e:98:2c:
         c8:f0:b3:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKw3qm9m09yiv/cybJtT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOGUwYWVmMWNkMWU5ZDMyYTYxNmFkZjU4MjQ1YTNhYjg4
YTU1NGIwHhcNMjUwNDEzMDgwMTM1WhcNMjUwNDE0MDgwMTM1WjAzMTEwLwYDVQQD
Eyg2ZjgxNTcyZTYyN2NhZGJkOGQ1YWEzYTNmMGEyNmI1ODA2MzI1YTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+xsDwGacSuymX6UNiopeYFWfT8R
bL6VzlnVipT9iSPGOWNZNgzF6ZMrc+gJdTg/fF2FR995ilshs7UEaA8G89WG/8P4
K6IsXdkgvAdVU4chtiqyUMOOU6nEGWTBabDlhmqrUI04P5ZboOhQVTSB3hufDB/L
E8NH55IvMN8fgRdtyqqz4F+8qBsphatevYwD9ETt1/OwBi7mwwqL6hZGCCTjg1kn
75Rem1SMa0KpE9lNbDv4xWBuMf9f5ib2wDRCd+MJKoxgBGhXunOaovS9bsP3EAT9
6POKXVnVOTRzh1IyoAjLzL+Q45sMiTFnMqHYk8pu3Nmji3GDgT3x2glZnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+BVy5ifK29jVqjo/Cia1gGMlpCMB8GA1UdIwQY
MBaAFKCOCu8c0enTKmFq31gkWjq4ilVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWIt
MjQ3NjI5MWQ3MGVlLzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWItMjQ3NjI5MWQ3MGVl
LzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRqFJmw6
0bjRG+fRSHmEKWNk//GFRVfDlm4quLclQWdZj5PIUBqVgK6rJE8ATV366+K038G0
k5ETwAaYeVrO7v6rTz7G7Cx1kXAWoWJIsU/wSUivqjQJK1FPLt78GtToUJwu4Dmi
ObE4XHzPJjv1nqIQqIKFUJoVM3WP9IHwx0k19Q9j8lLumS90ArjJskyGOEm8RRO9
Nh3EqniRVUPptlvK7eK7P/EFblhHBjkQlfe9PUVZr8VjRhWcqdu2gYuLYzQVM0wy
Z86+XqOhh2WiT0Dh8fwFdG9ztnTy2k/2mQ4r9BfrkFNbPmhqTR0CbXlVsOPWvPcd
quasnpgsyPCzdA==
-----END CERTIFICATE-----