Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
File:                     OuUFv8f9kXaGscizohj1UI9aNwo.mft (raw, json)
Hash identifier:          bv1wDI16vw9yYa1ok6wyzqvZDoiasnfEYBs1SZu1pIM=
Subject key identifier:   60:59:CF:60:29:2E:AD:0E:75:41:74:51:C9:B2:33:27:CC:D2:81:CD
Authority key identifier: 3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A
Certificate issuer:       /CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
Certificate serial:       01962ECFDBF4494E156A0B4E8114A1526A3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft
Manifest number:          013A
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: OuUFv8f9kXaGscizohj1UI9aNwo.crl (hash: TELR1dsZfSuuqxm2/DTdiEGQLlfZEKux5/U1C8EitNs=)
                          2: lhV68OSkur6ZsAA_2dy8-L_4IL0.roa (hash: BvvVh8/fqP1HPi1uOxwh0N4UEkoJk2nM455CRrFSNec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:db:f4:49:4e:15:6a:0b:4e:81:14:a1:52:6a:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ae505bfc7fd917686b1c8b3a218f5508f5a370a
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=6059cf60292ead0e75417451c9b23327ccd281cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:4b:07:ba:1a:79:a7:b5:77:46:95:9f:9d:
                    47:20:d6:f3:6b:fb:8d:e2:7b:c9:3e:36:0b:aa:8f:
                    ff:60:7e:d4:d6:7c:38:15:a0:45:08:5f:c1:3c:c7:
                    0d:fa:80:85:60:5a:f5:38:7c:e3:d9:f3:70:0f:69:
                    b0:a3:81:41:79:3a:2e:90:8b:3b:30:e3:b8:d7:27:
                    7c:61:02:f2:7d:a4:44:9e:e0:bb:32:d5:51:0d:d2:
                    86:30:e7:7c:b8:8d:89:26:98:b9:a7:df:76:7d:bb:
                    b4:a1:b2:e6:db:ad:f5:47:a6:bb:96:a2:4e:11:b0:
                    13:08:5e:b0:3b:dd:be:28:22:91:d4:6b:2d:31:76:
                    a4:1d:52:d2:fd:03:88:a0:29:ae:94:c1:d7:34:c2:
                    83:bb:4d:99:d8:d6:5c:1c:eb:94:46:ae:02:b7:d8:
                    6d:3e:4e:c3:34:cc:ee:5f:43:ed:09:5d:92:83:38:
                    4f:0f:5e:55:63:8c:34:89:d1:df:26:72:40:dc:79:
                    56:18:c2:aa:5f:97:25:7c:d7:8a:21:38:d7:e3:e5:
                    67:bd:ee:63:13:1b:92:1e:4f:d5:28:39:b3:ef:f6:
                    97:9e:b7:12:99:a2:8c:88:1e:8d:c4:52:99:01:7a:
                    75:6b:36:b7:48:9b:5a:83:c0:19:2f:7e:0b:77:3d:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:59:CF:60:29:2E:AD:0E:75:41:74:51:C9:B2:33:27:CC:D2:81:CD
            X509v3 Authority Key Identifier:
                keyid:3A:E5:05:BF:C7:FD:91:76:86:B1:C8:B3:A2:18:F5:50:8F:5A:37:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuUFv8f9kXaGscizohj1UI9aNwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4193ea-c83f-4beb-a21e-a1c78a0a6bfd/1/OuUFv8f9kXaGscizohj1UI9aNwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:28:81:34:88:e8:19:8f:da:23:e1:53:16:42:6e:8b:85:42:
         ad:57:7f:fa:41:8c:97:2f:71:3f:ad:0c:f8:f5:88:3b:27:b7:
         e6:f4:20:54:08:43:43:28:b2:c8:1b:ac:8b:69:9d:a4:34:75:
         43:b4:d9:a5:14:ba:af:8f:0e:cb:4a:c7:8e:1e:aa:57:9f:35:
         ec:6a:5b:ca:6c:83:19:e9:ae:27:ae:ba:8e:87:4b:29:81:3e:
         9e:51:ca:95:17:ec:30:36:fd:08:cc:ff:2f:c7:b1:67:fc:57:
         49:d2:5d:32:20:1d:8c:a0:fa:aa:f3:34:c6:3e:c4:ef:4c:4a:
         5b:be:e5:8c:b4:c0:43:81:b0:a3:3f:81:9b:48:91:3f:ed:f9:
         de:f3:ba:8e:93:2e:f2:af:8e:54:f4:71:8c:70:36:a0:bb:61:
         5f:af:8b:1d:e4:21:03:be:f4:47:c8:25:b0:d9:c2:2c:db:27:
         cf:f0:7e:e6:9d:2c:8a:4a:58:5b:4c:ca:c6:e0:b6:57:6a:fc:
         ec:4c:ae:35:c0:8d:6f:9a:79:9f:d7:f7:1a:7f:5c:25:bf:ff:
         91:05:31:05:4d:7a:e5:ce:9b:1e:96:a1:5c:34:cb:d1:25:b8:
         ab:47:06:2e:5d:52:f8:9a:cd:d3:4a:c9:be:aa:9d:ce:0b:54:
         ec:64:74:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz9v0SU4VagtOgRShUmo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTUwNWJmYzdmZDkxNzY4NmIxYzhiM2EyMThmNTUwOGY1
YTM3MGEwHhcNMjUwNDEzMTEwMTM2WhcNMjUwNDE0MTEwMTM2WjAzMTEwLwYDVQQD
Eyg2MDU5Y2Y2MDI5MmVhZDBlNzU0MTc0NTFjOWIyMzMyN2NjZDI4MWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMFLB7oaeae1d0aVn51HINbza/uN
4nvJPjYLqo//YH7U1nw4FaBFCF/BPMcN+oCFYFr1OHzj2fNwD2mwo4FBeToukIs7
MOO41yd8YQLyfaREnuC7MtVRDdKGMOd8uI2JJpi5p992fbu0obLm2631R6a7lqJO
EbATCF6wO92+KCKR1GstMXakHVLS/QOIoCmulMHXNMKDu02Z2NZcHOuURq4Ct9ht
Pk7DNMzuX0PtCV2SgzhPD15VY4w0idHfJnJA3HlWGMKqX5clfNeKITjX4+Vnve5j
ExuSHk/VKDmz7/aXnrcSmaKMiB6NxFKZAXp1aza3SJtag8AZL34Ldz1zPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBZz2ApLq0OdUF0UcmyMyfM0oHNMB8GA1UdIwQY
MBaAFDrlBb/H/ZF2hrHIs6IY9VCPWjcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUt
YTFjNzhhMGE2YmZkLzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80MTkzZWEtYzgzZi00YmViLWEyMWUtYTFjNzhhMGE2YmZk
LzEvT3VVRnY4ZjlrWGFHc2Npem9oajFVSTlhTndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSiBNIjo
GY/aI+FTFkJui4VCrVd/+kGMly9xP60M+PWIOye35vQgVAhDQyiyyBusi2mdpDR1
Q7TZpRS6r48Oy0rHjh6qV5817GpbymyDGemuJ666jodLKYE+nlHKlRfsMDb9CMz/
L8exZ/xXSdJdMiAdjKD6qvM0xj7E70xKW77ljLTAQ4Gwoz+Bm0iRP+353vO6jpMu
8q+OVPRxjHA2oLthX6+LHeQhA770R8glsNnCLNsnz/B+5p0sikpYW0zKxuC2V2r8
7EyuNcCNb5p5n9f3Gn9cJb//kQUxBU165c6bHpahXDTL0SW4q0cGLl1S+JrN00rJ
vqqdzgtU7GR04w==
-----END CERTIFICATE-----