Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File:                     ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier:          gPR6rO85Cwe7TtjBS+wmtbXGFA736XDhG4ohPmPobME=
Subject key identifier:   05:99:17:41:C0:5E:1C:83:BA:8F:EB:82:FD:C6:8E:25:65:F6:B1:30
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer:       /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial:       01962E2AFEADEC2CBCEEFEADB8F5B897D49A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number:          05AC
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
                          2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: oA+BunTPkIkDWicVfVVKd/XWQJMC8CJWz6xqpH14P6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fe:ad:ec:2c:bc:ee:fe:ad:b8:f5:b8:97:d4:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=05991741c05e1c83ba8feb82fdc68e2565f6b130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:9b:4e:7c:19:02:59:6a:25:12:6f:55:5a:
                    ac:47:01:f7:76:d8:65:e6:a2:1d:d8:54:5c:45:2a:
                    96:48:c2:69:c2:02:0c:53:c2:14:fd:ef:0e:d9:78:
                    16:52:70:0c:e8:85:68:7c:d7:35:e4:59:30:a1:2b:
                    3a:17:fc:64:98:7f:f0:18:5a:66:af:49:1d:48:e8:
                    e9:72:7c:cf:38:dd:1d:73:06:69:35:fa:32:b6:0b:
                    d8:52:81:7e:30:ed:5b:ca:b8:8a:e9:a0:a6:7b:a1:
                    90:81:e5:16:38:40:1a:63:c5:46:cf:a1:f2:e1:86:
                    6a:23:27:cb:b6:e3:bf:8f:60:a4:b3:8b:36:a8:5d:
                    52:92:7b:1b:15:7c:77:fa:23:92:34:a0:c9:97:3b:
                    f2:ab:7e:d3:6d:e4:7e:3c:38:7b:0c:43:8c:59:57:
                    fd:bd:5a:ee:8d:a5:b5:e1:d3:42:93:22:63:43:a0:
                    47:26:f0:6a:1d:58:1a:6f:3a:f7:a9:9a:d3:83:f8:
                    2d:5c:40:90:37:c7:2e:1d:43:57:50:68:15:cf:ac:
                    a0:bc:3a:49:5f:54:85:f4:c8:b3:64:3f:4f:cc:b5:
                    96:b7:c2:86:12:95:e5:88:a6:15:f5:be:79:e2:4c:
                    7e:cb:58:7d:6e:d5:25:3f:08:4b:d4:55:81:8c:a3:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:99:17:41:C0:5E:1C:83:BA:8F:EB:82:FD:C6:8E:25:65:F6:B1:30
            X509v3 Authority Key Identifier:
                keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:7a:1d:44:bf:48:5f:c7:fe:d5:46:68:f2:9e:be:2c:96:
         d9:2d:73:6b:eb:a5:a9:4c:c4:68:50:fd:1f:ac:1f:c5:a4:6b:
         2f:89:1c:0c:1c:48:a2:2a:9f:fe:84:fe:9a:ba:95:0f:2a:40:
         cc:7a:dc:78:e3:66:84:84:4e:35:9a:28:13:d8:9e:c5:96:e5:
         ff:62:41:a0:02:32:ca:51:72:5c:0b:2a:3b:55:e2:7f:ba:35:
         a5:c5:0d:af:9c:a7:2d:3f:a3:3d:7c:1c:3a:3f:e1:00:64:65:
         23:13:10:a5:4a:25:9d:e5:d0:24:a0:b8:f9:3e:7e:af:02:db:
         c3:09:4c:64:24:2e:35:9e:22:0d:f7:eb:9a:35:b0:de:fc:a4:
         34:33:f6:a6:e5:46:8e:79:b5:d0:a7:39:a7:9d:4e:43:45:d2:
         8f:2f:7a:cd:f2:c2:de:cf:48:73:ff:ff:6b:6c:4c:ab:31:af:
         eb:98:64:fc:69:eb:94:f1:6b:d3:aa:73:8f:51:52:e2:d5:db:
         27:29:0d:4c:ea:13:6a:26:48:9a:c3:03:66:33:5e:55:05:0f:
         04:eb:19:29:1b:8a:43:7a:69:c1:cb:e4:03:0c:1b:80:4a:8a:
         a4:9c:21:39:df:f5:f0:56:41:4c:51:93:67:66:2e:36:d6:d8:
         39:9e:50:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKv6t7Cy87v6tuPW4l9SaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTQ1NTZhOTU3OWUyMDJmNTRjMTU5MzQ1NDU4YmM5MjQ1
ZjkwZTQwHhcNMjUwNDEzMDgwMTMxWhcNMjUwNDE0MDgwMTMxWjAzMTEwLwYDVQQD
EygwNTk5MTc0MWMwNWUxYzgzYmE4ZmViODJmZGM2OGUyNTY1ZjZiMTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SObTnwZAllqJRJvVVqsRwH3dthl
5qId2FRcRSqWSMJpwgIMU8IU/e8O2XgWUnAM6IVofNc15FkwoSs6F/xkmH/wGFpm
r0kdSOjpcnzPON0dcwZpNfoytgvYUoF+MO1byriK6aCme6GQgeUWOEAaY8VGz6Hy
4YZqIyfLtuO/j2Cks4s2qF1SknsbFXx3+iOSNKDJlzvyq37TbeR+PDh7DEOMWVf9
vVrujaW14dNCkyJjQ6BHJvBqHVgabzr3qZrTg/gtXECQN8cuHUNXUGgVz6ygvDpJ
X1SF9MizZD9PzLWWt8KGEpXliKYV9b554kx+y1h9btUlPwhL1FWBjKPXtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWZF0HAXhyDuo/rgv3GjiVl9rEwMB8GA1UdIwQY
MBaAFKLkVWqVeeIC9UwVk0VFi8kkX5DkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUt
YzU1OWUwOTcxZWUwLzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUtYzU1OWUwOTcxZWUw
LzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOg96HUS/
SF/H/tVGaPKeviyW2S1za+ulqUzEaFD9H6wfxaRrL4kcDBxIoiqf/oT+mrqVDypA
zHrceONmhIRONZooE9iexZbl/2JBoAIyylFyXAsqO1Xif7o1pcUNr5ynLT+jPXwc
Oj/hAGRlIxMQpUolneXQJKC4+T5+rwLbwwlMZCQuNZ4iDffrmjWw3vykNDP2puVG
jnm10Kc5p51OQ0XSjy96zfLC3s9Ic///a2xMqzGv65hk/GnrlPFr06pzj1FS4tXb
JykNTOoTaiZImsMDZjNeVQUPBOsZKRuKQ3ppwcvkAwwbgEqKpJwhOd/18FZBTFGT
Z2YuNtbYOZ5Qcg==
-----END CERTIFICATE-----