Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File:                     oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier:          kWfZU7ywuwq9l7r18dxh/ONemOR8F4qtr3MNLFZhEjo=
Subject key identifier:   42:A0:74:28:4E:5D:4D:87:AD:66:0D:AC:FB:8C:D1:3D:F1:74:B8:B5
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer:       /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial:       01962ECF9A59BB684CAFA52A1DA142430E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=)
                          2: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: ANzJrOeOoUvhT39g40CwgzROZFUfvzlNZvKDQW1DjsE=)
                          3: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9a:59:bb:68:4c:af:a5:2a:1d:a1:42:43:0e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=42a074284e5d4d87ad660dacfb8cd13df174b8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:10:7c:a3:ab:ed:c3:53:b8:63:c6:9c:92:
                    10:7f:a5:76:78:15:33:78:be:c0:16:df:9a:70:f0:
                    7e:7f:1b:ec:52:73:88:76:1a:9a:3b:f4:03:9a:93:
                    25:6d:9c:71:7b:38:11:99:35:f0:ab:b0:53:a2:f8:
                    23:53:d3:bb:75:2d:fc:ba:c0:46:79:44:a5:49:79:
                    9c:1c:96:51:aa:57:df:8a:f5:a7:3e:aa:58:6a:ac:
                    2e:ef:02:c3:b0:7f:1f:a4:09:38:c5:60:ac:ab:70:
                    15:80:35:08:90:79:25:58:39:f6:fb:24:1e:b7:e6:
                    62:cf:96:db:45:35:2b:08:4c:71:6f:98:df:05:fc:
                    1b:64:b3:76:8b:0d:b6:30:be:59:e6:fc:7b:66:14:
                    bb:c4:ef:ac:b7:0a:57:f4:5c:60:1c:36:01:61:98:
                    5f:e9:b3:c9:40:14:62:e9:3a:c3:bc:4e:e0:8b:5b:
                    ae:01:b2:d7:38:3c:82:69:16:b8:1c:8e:1f:3f:68:
                    94:e6:4f:4f:5e:56:30:e4:3c:68:8c:16:3d:d3:c2:
                    e5:c1:24:95:3b:df:d5:2d:30:9f:83:29:d5:20:d4:
                    7c:8f:74:6c:6a:7b:35:6f:25:9c:51:85:04:a3:7f:
                    d8:86:ee:f2:b6:bf:8e:8c:36:2f:f6:c3:0e:03:d3:
                    62:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A0:74:28:4E:5D:4D:87:AD:66:0D:AC:FB:8C:D1:3D:F1:74:B8:B5
            X509v3 Authority Key Identifier:
                keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:42:27:4f:05:33:dd:3c:b2:39:fa:9c:2a:4e:01:4c:72:c2:
         d8:8f:f3:8e:0d:b4:c4:8b:15:d6:88:1e:a5:7d:73:a5:d2:36:
         0b:8d:57:a3:80:61:dd:f4:b8:db:18:f8:ea:e6:ae:ba:67:1a:
         9a:16:81:88:6d:63:d3:2d:c3:1a:17:ce:74:3c:1a:6f:ba:c6:
         07:46:e9:55:b2:ba:c9:b2:29:9a:58:28:b8:75:34:71:76:b4:
         15:b7:1d:f1:fc:11:14:73:87:af:e2:b6:74:29:65:d7:dc:b2:
         12:13:06:3d:a5:be:04:32:91:39:64:3e:dd:25:dd:b7:c5:c5:
         67:9a:b1:fd:64:7c:15:c4:5b:53:82:94:54:80:28:7b:15:a9:
         12:4b:1b:d2:20:7c:db:5f:ee:e1:61:06:13:00:3f:4c:de:3e:
         60:e4:73:46:63:71:6f:9b:05:25:f7:ed:b5:67:3c:9d:c6:15:
         cf:19:c7:2b:88:29:f1:a1:f8:47:9b:30:e5:b9:82:13:51:a7:
         8d:7e:15:3b:02:99:20:4c:82:20:d5:17:d5:c4:f4:63:13:ad:
         88:b6:7b:dd:2e:69:a6:8f:d8:86:c8:2c:4d:8a:63:55:b6:f7:
         56:28:97:a7:77:b3:ef:0c:f0:1a:68:04:c3:f0:20:f9:a0:50:
         c5:bc:98:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5pZu2hMr6UqHaFCQw6CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy
NGI0NDEwHhcNMjUwNDEzMTEwMTE5WhcNMjUwNDE0MTEwMTE5WjAzMTEwLwYDVQQD
Eyg0MmEwNzQyODRlNWQ0ZDg3YWQ2NjBkYWNmYjhjZDEzZGYxNzRiOGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCgQfKOr7cNTuGPGnJIQf6V2eBUz
eL7AFt+acPB+fxvsUnOIdhqaO/QDmpMlbZxxezgRmTXwq7BTovgjU9O7dS38usBG
eUSlSXmcHJZRqlffivWnPqpYaqwu7wLDsH8fpAk4xWCsq3AVgDUIkHklWDn2+yQe
t+Ziz5bbRTUrCExxb5jfBfwbZLN2iw22ML5Z5vx7ZhS7xO+stwpX9FxgHDYBYZhf
6bPJQBRi6TrDvE7gi1uuAbLXODyCaRa4HI4fP2iU5k9PXlYw5DxojBY908LlwSSV
O9/VLTCfgynVINR8j3Rsans1byWcUYUEo3/Yhu7ytr+OjDYv9sMOA9NiDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKgdChOXU2HrWYNrPuM0T3xdLi1MB8GA1UdIwQY
MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt
OWQ5NDM2NzFhOGEzLzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz
LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREInTwUz
3TyyOfqcKk4BTHLC2I/zjg20xIsV1ogepX1zpdI2C41Xo4Bh3fS42xj46uauumca
mhaBiG1j0y3DGhfOdDwab7rGB0bpVbK6ybIpmlgouHU0cXa0Fbcd8fwRFHOHr+K2
dCll19yyEhMGPaW+BDKROWQ+3SXdt8XFZ5qx/WR8FcRbU4KUVIAoexWpEksb0iB8
21/u4WEGEwA/TN4+YORzRmNxb5sFJffttWc8ncYVzxnHK4gp8aH4R5sw5bmCE1Gn
jX4VOwKZIEyCINUX1cT0YxOtiLZ73S5ppo/YhsgsTYpjVbb3ViiXp3ez7wzwGmgE
w/Ag+aBQxbyY0A==
-----END CERTIFICATE-----