Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File:                     C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier:          iHwY+m9HCfc1vUq+nAEpfEEulheRAw1/WMHfabdxsJY=
Subject key identifier:   5C:1B:87:45:1C:5C:18:77:8D:6E:D5:E3:1B:77:D5:F9:8C:53:E2:D8
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer:       /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial:       01962F07281A88D1FCC3AF9DF367C4151F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number:          09AA
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: W4oyYcmm++vsS4um3ARkLYgQR+Kw6HZq13ufrxEDWuQ=)
                          2: ThulFZ8R9xpzNZdDBqkxoRYsRek.roa (hash: j39ExXLrnr3e7L1fGlK9W3BRFHLWAFmsEEaBZfVOBbo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:28:1a:88:d1:fc:c3:af:9d:f3:67:c4:15:1f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=5c1b87451c5c18778d6ed5e31b77d5f98c53e2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:b2:11:11:99:62:e3:8b:bb:44:0d:c7:4b:
                    37:b5:5a:e6:b8:86:8f:e0:f8:01:88:7d:6f:92:36:
                    ec:cf:e2:1e:3e:53:fe:65:2b:10:68:c9:90:8b:da:
                    b1:ff:a0:5c:54:0c:0e:93:a6:0b:d4:76:4c:ff:3f:
                    67:24:12:56:e6:4d:35:4d:c3:13:76:1b:ab:80:c9:
                    1f:a0:df:db:f6:51:3d:11:20:5b:ef:74:c4:35:26:
                    23:76:3d:53:4d:43:31:9c:11:de:de:a6:ce:94:86:
                    72:85:63:7a:f0:d6:9b:8f:21:c2:b7:5b:41:2f:01:
                    ae:30:34:dc:03:3a:82:f3:1c:80:ca:4d:d2:a4:84:
                    d5:1c:b8:86:7c:45:22:48:04:a1:5b:62:01:7f:41:
                    bc:d2:f0:f1:18:9e:cc:3f:ca:06:b7:a6:aa:80:6b:
                    4f:9d:68:c7:ce:59:3d:bf:b3:48:8f:6b:4a:e8:28:
                    b9:35:f7:af:93:8a:55:17:4f:1d:ea:98:58:6e:ff:
                    04:c8:9e:10:44:c2:9f:a6:77:d5:e2:37:92:ab:7f:
                    9c:e1:56:c5:19:8c:82:b9:43:cc:ac:91:17:3f:15:
                    79:f6:9b:54:ea:ea:c2:97:bf:91:25:04:16:71:ea:
                    da:f7:38:2b:91:93:bf:dc:72:7d:39:d0:7c:9e:3a:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1B:87:45:1C:5C:18:77:8D:6E:D5:E3:1B:77:D5:F9:8C:53:E2:D8
            X509v3 Authority Key Identifier:
                keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a5:1a:b9:bf:90:61:b3:77:83:bd:59:b3:9e:89:22:5f:5e:
         63:cc:3f:76:e9:f2:4a:c4:d1:4e:cb:7b:49:c0:56:e9:6d:65:
         7a:d8:0a:16:c4:db:8a:e5:14:e4:f3:6f:39:82:0c:b7:9c:37:
         b1:b7:c3:30:1a:ed:ed:86:90:0f:68:e4:b2:0f:97:92:10:af:
         94:9e:0f:39:f9:4e:35:8c:b5:4b:62:4f:0d:40:f7:4e:33:66:
         33:86:d0:df:44:2d:e1:e7:35:e9:b9:e9:2b:d4:87:6f:80:a8:
         7c:23:87:ae:84:88:19:31:ba:dd:b7:8e:91:7f:af:03:79:b6:
         29:4c:e4:5c:6d:f2:01:ef:34:cf:97:0b:f2:6b:4f:55:30:17:
         b4:4e:57:b1:c0:f9:c2:ed:e9:6c:c2:22:cb:e2:83:df:3c:23:
         ea:78:04:cc:b1:03:aa:23:9b:20:34:ec:28:ed:8e:c2:36:c7:
         74:20:fb:97:67:1f:67:d2:7f:26:25:10:c5:4f:a8:ad:ca:d6:
         27:85:1f:fc:41:be:ba:86:63:e9:84:2b:9a:81:46:d3:70:6f:
         53:78:29:d6:ec:c9:0d:22:80:d0:b3:7d:88:66:91:b1:36:3d:
         81:ad:c1:8a:b1:87:cc:b3:57:b7:54:de:17:26:5a:4b:94:37:
         28:c9:3a:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBygaiNH8w6+d82fEFR80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZWEwZWNkZDYzNGEzYzA3NWUzNWRiOWRjYTU3NjhlNGY3
NmNkODUwHhcNMjUwNDEzMTIwMjAwWhcNMjUwNDE0MTIwMjAwWjAzMTEwLwYDVQQD
Eyg1YzFiODc0NTFjNWMxODc3OGQ2ZWQ1ZTMxYjc3ZDVmOThjNTNlMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRWyERGZYuOLu0QNx0s3tVrmuIaP
4PgBiH1vkjbsz+IePlP+ZSsQaMmQi9qx/6BcVAwOk6YL1HZM/z9nJBJW5k01TcMT
dhurgMkfoN/b9lE9ESBb73TENSYjdj1TTUMxnBHe3qbOlIZyhWN68NabjyHCt1tB
LwGuMDTcAzqC8xyAyk3SpITVHLiGfEUiSAShW2IBf0G80vDxGJ7MP8oGt6aqgGtP
nWjHzlk9v7NIj2tK6Ci5Nfevk4pVF08d6phYbv8EyJ4QRMKfpnfV4jeSq3+c4VbF
GYyCuUPMrJEXPxV59ptU6urCl7+RJQQWcera9zgrkZO/3HJ9OdB8njoifQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwbh0UcXBh3jW7V4xt31fmMU+LYMB8GA1UdIwQY
MBaAFAvqDs3WNKPAdeNdudyldo5Pds2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTIt
MjNmY2M1MjRlYTg4LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZWVlYTQtNjUxZi00ZDFhLWFiNTItMjNmY2M1MjRlYTg4
LzEvQy1vT3pkWTBvOEIxNDEyNTNLVjJqazkyellVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6Uaub+Q
YbN3g71Zs56JIl9eY8w/dunySsTRTst7ScBW6W1letgKFsTbiuUU5PNvOYIMt5w3
sbfDMBrt7YaQD2jksg+XkhCvlJ4POflONYy1S2JPDUD3TjNmM4bQ30Qt4ec16bnp
K9SHb4CofCOHroSIGTG63beOkX+vA3m2KUzkXG3yAe80z5cL8mtPVTAXtE5XscD5
wu3pbMIiy+KD3zwj6ngEzLEDqiObIDTsKO2OwjbHdCD7l2cfZ9J/JiUQxU+orcrW
J4Uf/EG+uoZj6YQrmoFG03BvU3gp1uzJDSKA0LN9iGaRsTY9ga3BirGHzLNXt1Te
FyZaS5Q3KMk66Q==
-----END CERTIFICATE-----