Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File:                     rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier:          0efmE7212oK+kT/xA404B3KepANaEuEnFP7OEkOlF8A=
Subject key identifier:   14:CC:CC:79:57:AA:FD:06:F1:87:73:28:DE:17:F4:B1:11:68:A3:28
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer:       /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial:       01962E992AD0F604DC1B45A8D76DAD688953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: BAFnA8E_-fRHFvJR66V5dNg4Xzc.roa (hash: zli04q+UUFDZ6LvNlKF4wEZntdZy+cQL9il9Oh4rSZo=)
                          2: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: DnsDY65MK2lVpkjENj3568rHIHktGs4jcolfTiNpZkg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2a:d0:f6:04:dc:1b:45:a8:d7:6d:ad:68:89:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=14cccc7957aafd06f1877328de17f4b11168a328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0b:a6:e6:3b:1a:16:f0:de:91:99:b8:1f:8d:
                    e7:da:d5:78:f0:8e:90:fb:b2:2a:8d:c8:07:b6:63:
                    08:99:c3:8d:ca:4e:d0:75:c2:34:97:74:a4:ef:4b:
                    81:66:09:44:02:13:e8:64:c2:1b:85:a1:03:59:be:
                    45:42:75:42:4b:2f:4b:08:cc:96:8b:ce:a2:d9:44:
                    85:49:9a:16:60:1a:27:09:0b:6a:4b:b7:be:ee:dd:
                    52:5e:56:12:8a:7a:4f:23:bd:1d:49:d3:9c:3b:f2:
                    00:59:96:1c:79:51:57:fb:69:e9:ae:5c:00:9a:57:
                    c5:14:66:d7:60:02:00:c9:13:11:76:45:22:d4:b6:
                    03:82:0b:ab:17:a4:3f:b0:84:83:31:45:12:8b:9b:
                    27:f7:55:df:c0:21:ce:99:56:d6:a4:01:1e:d3:bd:
                    08:0e:a6:96:9c:3b:66:07:55:dc:50:13:ab:3b:6a:
                    7f:1b:97:33:7b:26:48:70:6d:8c:d6:48:63:38:67:
                    c4:f9:ce:64:cf:93:b8:1e:d5:bc:15:53:aa:d4:f1:
                    ae:a6:39:68:bd:d4:21:ba:0c:a1:65:92:0f:b0:7b:
                    47:e1:cf:d5:24:82:6b:19:7d:eb:2f:03:a3:3b:1b:
                    04:1f:c2:c0:eb:5d:fe:e5:9c:4b:b1:42:f8:de:aa:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CC:CC:79:57:AA:FD:06:F1:87:73:28:DE:17:F4:B1:11:68:A3:28
            X509v3 Authority Key Identifier:
                keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:21:7d:b0:ef:12:6c:a1:d9:0e:3d:a9:f4:37:32:76:0c:b3:
         73:05:23:38:97:c9:27:31:b5:16:21:92:17:2d:8e:67:e6:c6:
         51:4d:97:4b:6e:a5:53:d2:fa:f8:83:34:c2:fa:d3:92:1e:05:
         79:95:34:79:1b:d8:7f:7c:56:02:87:f8:95:65:89:55:e0:9b:
         8f:7d:c1:28:be:b1:2e:d8:53:e2:cd:49:2e:53:64:fc:77:4e:
         3e:14:e9:fe:61:80:f7:98:ed:e9:8b:e8:00:22:d7:ba:3d:f9:
         b9:8a:dc:38:41:6c:00:21:d1:f5:c7:d4:73:8b:88:c2:e6:9e:
         e6:b7:f5:b3:66:2f:18:13:a9:a5:c5:2f:b2:cd:12:16:00:12:
         ea:ea:a8:ac:32:0b:95:b3:28:a5:7a:36:52:d9:3a:d0:d4:42:
         f0:0d:3e:37:a4:c8:54:72:70:f1:13:36:83:2c:e1:3c:34:3b:
         e7:f8:bd:ee:21:82:30:5c:b7:d9:e4:9c:a4:08:28:f3:7a:27:
         38:eb:63:19:67:db:3f:a7:2d:eb:c5:c3:c3:d9:e5:50:8a:df:
         75:71:e3:32:e4:2c:64:2a:fe:77:37:1c:0d:6d:54:29:dd:79:
         72:4f:fe:33:b9:14:77:f3:79:4f:9e:59:a3:3b:3d:72:29:42:
         e4:8e:08:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumSrQ9gTcG0Wo122taIlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGEwZTBiMWIyMWYwOTMzMzNjMDc0ODE0NWIxNjI4NDE4
Y2YyYjUwHhcNMjUwNDEzMTAwMTUyWhcNMjUwNDE0MTAwMTUyWjAzMTEwLwYDVQQD
EygxNGNjY2M3OTU3YWFmZDA2ZjE4NzczMjhkZTE3ZjRiMTExNjhhMzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qum5jsaFvDekZm4H43n2tV48I6Q
+7IqjcgHtmMImcONyk7QdcI0l3Sk70uBZglEAhPoZMIbhaEDWb5FQnVCSy9LCMyW
i86i2USFSZoWYBonCQtqS7e+7t1SXlYSinpPI70dSdOcO/IAWZYceVFX+2nprlwA
mlfFFGbXYAIAyRMRdkUi1LYDggurF6Q/sISDMUUSi5sn91XfwCHOmVbWpAEe070I
DqaWnDtmB1XcUBOrO2p/G5czeyZIcG2M1khjOGfE+c5kz5O4HtW8FVOq1PGupjlo
vdQhugyhZZIPsHtH4c/VJIJrGX3rLwOjOxsEH8LA613+5ZxLsUL43qrDEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTMzHlXqv0G8YdzKN4X9LERaKMoMB8GA1UdIwQY
MBaAFKyKDgsbIfCTMzwHSBRbFihBjPK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMt
ZGI4ZWZmMWIxMWEwLzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84Y2U2YTEtMTMwYy00ODBlLWE5MDMtZGI4ZWZmMWIxMWEw
LzEvcklvT0N4c2g4Sk16UEFkSUZGc1dLRUdNOHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCF9sO8S
bKHZDj2p9DcydgyzcwUjOJfJJzG1FiGSFy2OZ+bGUU2XS26lU9L6+IM0wvrTkh4F
eZU0eRvYf3xWAof4lWWJVeCbj33BKL6xLthT4s1JLlNk/HdOPhTp/mGA95jt6Yvo
ACLXuj35uYrcOEFsACHR9cfUc4uIwuae5rf1s2YvGBOppcUvss0SFgAS6uqorDIL
lbMopXo2Utk60NRC8A0+N6TIVHJw8RM2gyzhPDQ75/i97iGCMFy32eScpAgo83on
OOtjGWfbP6ct68XDw9nlUIrfdXHjMuQsZCr+dzccDW1UKd15ck/+M7kUd/N5T55Z
ozs9cilC5I4Idw==
-----END CERTIFICATE-----