Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File:                     0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier:          8lyCdAns/1g1XBogXTKpV8Z+IQYWFvykVJIXQaTPamI=
Subject key identifier:   44:48:14:CA:6D:A0:3A:CE:33:7A:B8:1B:A5:91:BF:52:FB:F7:9A:75
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer:       /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial:       01962ECFC6302E3A3D5043A8C3F14DDCCE1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number:          035A
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: 0L4Uyy0GZQyARPRgaqMfmhcpBHDXQ0bLYjGiipOL9YQ=)
                          2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c6:30:2e:3a:3d:50:43:a8:c3:f1:4d:dc:ce:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=444814ca6da03ace337ab81ba591bf52fbf79a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e3:c5:2c:77:50:07:db:98:f2:20:77:2c:38:
                    c0:80:fe:e7:e3:93:39:f7:2d:46:31:5b:03:43:0b:
                    7b:4e:f4:65:16:59:2f:72:3a:9d:1d:e2:c7:e5:c3:
                    ef:61:1c:6f:1e:af:b0:f4:9e:7b:c0:fc:8d:21:13:
                    df:96:b0:29:e1:62:49:e3:84:6f:a5:ca:fe:37:4e:
                    36:2f:b7:2c:c4:a7:a2:5a:56:2a:d8:04:59:34:58:
                    dd:dd:85:19:3f:a9:bd:d9:bf:b6:58:7e:83:86:2d:
                    de:b3:06:fe:ca:ff:fb:57:6b:4a:25:b1:19:7d:2d:
                    c7:58:8d:a8:07:cd:fc:f0:c2:af:30:70:49:98:dc:
                    58:ba:50:f1:ab:92:08:35:be:af:2c:b4:a3:51:da:
                    a9:71:c2:66:fb:0b:91:a1:a3:cb:8f:64:a3:2c:44:
                    ff:7f:3f:28:88:99:e2:a1:d3:05:00:42:96:3b:c4:
                    49:91:d3:cd:f8:ea:2f:32:68:86:d1:3e:a0:0d:35:
                    34:0d:2f:ab:f3:fa:2c:cd:5e:0e:dd:61:8f:31:1b:
                    7f:80:90:2e:4f:38:44:20:6c:3d:cf:a0:70:c8:95:
                    9b:7e:3e:2c:54:50:75:25:28:74:3e:05:b0:e1:08:
                    62:45:c4:1c:8a:9e:65:1e:4b:72:9d:40:75:87:33:
                    e3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:48:14:CA:6D:A0:3A:CE:33:7A:B8:1B:A5:91:BF:52:FB:F7:9A:75
            X509v3 Authority Key Identifier:
                keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c0:1c:18:21:63:95:1f:c9:78:e7:3e:b6:23:0d:06:de:64:
         e0:26:2c:a6:f6:56:f9:f4:e6:8c:27:4d:55:a7:22:4c:ed:3c:
         c7:c5:c7:b3:88:ae:07:e6:0f:68:a4:e4:21:98:0e:a9:e3:28:
         2b:5e:ba:ff:78:8a:44:8c:d0:48:9a:9c:82:d3:c2:cf:76:fe:
         27:a7:ab:10:1b:1c:ae:8e:57:5e:cb:1b:05:db:a2:23:73:5b:
         66:91:61:89:82:e3:7c:c9:09:3f:5e:94:89:04:da:ac:a4:30:
         79:e7:f5:e4:c7:e5:8f:27:b1:ec:f9:79:69:44:5f:a6:8d:08:
         b4:c3:28:20:e2:f9:35:8b:4f:6e:81:58:af:0a:ad:8e:d4:99:
         39:a3:be:75:e5:8c:88:7e:df:5e:82:99:79:f0:ab:12:62:53:
         d2:60:e2:f7:a4:56:89:c4:8b:05:7e:2d:5e:4a:04:8d:48:bf:
         72:c8:3f:e0:80:0e:39:96:dd:37:12:b7:4f:3e:a9:71:26:6d:
         c3:ff:8d:d4:86:2b:9a:76:62:97:55:f1:37:c6:26:30:c5:72:
         aa:48:76:dd:4c:11:28:87:c1:52:03:82:39:f5:6a:00:3a:95:
         5f:ee:68:d8:19:66:23:a6:70:cf:9b:c6:b4:d1:48:c8:68:65:
         b5:5e:40:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8YwLjo9UEOow/FN3M4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTJkYThlODkxNjkwZTcxZTliODU5NTA5N2RhN2M2MDY0
ZGE2MDIwHhcNMjUwNDEzMTEwMTMwWhcNMjUwNDE0MTEwMTMwWjAzMTEwLwYDVQQD
Eyg0NDQ4MTRjYTZkYTAzYWNlMzM3YWI4MWJhNTkxYmY1MmZiZjc5YTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+PFLHdQB9uY8iB3LDjAgP7n45M5
9y1GMVsDQwt7TvRlFlkvcjqdHeLH5cPvYRxvHq+w9J57wPyNIRPflrAp4WJJ44Rv
pcr+N042L7csxKeiWlYq2ARZNFjd3YUZP6m92b+2WH6Dhi3eswb+yv/7V2tKJbEZ
fS3HWI2oB8388MKvMHBJmNxYulDxq5IINb6vLLSjUdqpccJm+wuRoaPLj2SjLET/
fz8oiJniodMFAEKWO8RJkdPN+OovMmiG0T6gDTU0DS+r8/oszV4O3WGPMRt/gJAu
TzhEIGw9z6BwyJWbfj4sVFB1JSh0PgWw4QhiRcQcip5lHktynUB1hzPjuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERIFMptoDrOM3q4G6WRv1L795p1MB8GA1UdIwQY
MBaAFNDi2o6JFpDnHpuFlQl9p8YGTaYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjkt
ZWMyZmJhZmU0ZDkxLzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mMDZlMmMtOTdiNy00NjI4LThiNjktZWMyZmJhZmU0ZDkx
LzEvME9MYWpva1drT2NlbTRXVkNYMm54Z1pOcGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMAcGCFj
lR/JeOc+tiMNBt5k4CYspvZW+fTmjCdNVaciTO08x8XHs4iuB+YPaKTkIZgOqeMo
K166/3iKRIzQSJqcgtPCz3b+J6erEBscro5XXssbBduiI3NbZpFhiYLjfMkJP16U
iQTarKQweef15Mfljyex7Pl5aURfpo0ItMMoIOL5NYtPboFYrwqtjtSZOaO+deWM
iH7fXoKZefCrEmJT0mDi96RWicSLBX4tXkoEjUi/csg/4IAOOZbdNxK3Tz6pcSZt
w/+N1IYrmnZil1XxN8YmMMVyqkh23UwRKIfBUgOCOfVqADqVX+5o2BlmI6Zwz5vG
tNFIyGhltV5AHA==
-----END CERTIFICATE-----