Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
File:                     O4RSPDky4tGYBGI0uWLg3FGr9YY.mft (raw, json)
Hash identifier:          oDT7+dqs1Y86kpl9uLGi2KhdoUpjDbWzINf4iYSrUPI=
Subject key identifier:   96:25:69:E6:D5:B4:6C:EC:B5:7F:02:D2:D8:E3:48:C3:30:FE:D4:BA
Authority key identifier: 3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86
Certificate issuer:       /CN=3b84523c3932e2d198046234b962e0dc51abf586
Certificate serial:       01962E9975CE87437BC17F3675F93C9813D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: O4RSPDky4tGYBGI0uWLg3FGr9YY.crl (hash: Us4sH3hHJ0TmJeAeFBc2+/U4QgHVsbHhJ9AETFsR+10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:75:ce:87:43:7b:c1:7f:36:75:f9:3c:98:13:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b84523c3932e2d198046234b962e0dc51abf586
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=962569e6d5b46cecb57f02d2d8e348c330fed4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:a5:f3:68:b8:c0:5f:fe:cb:f7:9b:21:ea:
                    2f:0a:23:ac:56:ba:51:ae:31:90:b5:2a:46:c4:d4:
                    37:f3:55:c2:c1:f3:14:de:18:2e:fd:0d:7c:2b:58:
                    61:c4:d7:35:1a:9c:2d:1e:92:f6:72:5d:06:c2:28:
                    18:1c:c1:27:d6:06:be:36:c6:cd:8b:c0:38:ca:f1:
                    01:16:df:9e:1c:38:53:1c:2f:4a:50:ed:a0:42:24:
                    c4:de:51:e5:ca:00:21:66:90:1c:ff:61:9d:db:75:
                    bf:4a:72:12:5a:6a:3b:44:b1:ec:47:4d:53:b8:50:
                    11:5d:f8:6d:8c:42:c3:db:68:29:8d:a4:02:52:10:
                    d1:3b:84:2a:cc:13:de:c8:54:f2:f7:b9:53:12:7b:
                    99:6f:ac:5f:c8:84:62:7f:65:f5:1a:9a:02:c0:78:
                    55:10:b5:9c:72:d0:2b:b3:b8:39:86:ae:ae:69:71:
                    67:85:6f:ae:99:00:32:87:aa:c5:88:be:d5:26:1c:
                    cc:59:d4:81:d9:48:f3:11:9a:c3:ee:08:e8:5e:d8:
                    e1:5a:9d:38:eb:f9:05:54:ce:d9:2d:fc:b6:72:69:
                    b9:ca:af:9c:ee:04:25:15:4c:73:40:b6:66:67:45:
                    e0:e5:9d:64:c8:3f:fe:49:a8:82:3b:ca:0b:55:fc:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:25:69:E6:D5:B4:6C:EC:B5:7F:02:D2:D8:E3:48:C3:30:FE:D4:BA
            X509v3 Authority Key Identifier:
                keyid:3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:67:24:8c:94:18:68:b2:c3:fc:e9:d9:bf:b8:af:c8:97:ac:
         9a:29:d0:ff:1e:bf:f9:3b:03:07:8f:13:71:6d:eb:73:40:ae:
         47:6c:77:24:68:2a:ed:be:ea:6c:b6:f2:68:9d:d0:ca:5c:ff:
         7d:d2:0b:70:b0:3a:b3:34:6f:19:a3:c5:d0:ad:03:1c:81:1f:
         45:b5:3b:d3:9f:46:4b:18:3f:20:bc:85:db:65:ff:2f:c9:66:
         e5:44:9c:4d:fc:89:19:be:a7:e7:15:74:60:4b:6b:d2:79:6a:
         54:bd:fc:0e:79:d5:7b:99:5e:08:61:3b:1c:b2:57:5a:33:4c:
         8c:a8:00:6f:2c:06:bb:dc:26:2b:4c:a5:ee:a9:7d:db:3f:c3:
         83:ce:28:e5:07:10:c2:d0:09:cc:ba:4f:11:a2:9f:0e:d8:78:
         2e:5d:e8:f1:6b:3b:5f:ea:3e:74:4a:8e:19:93:d9:bd:a0:e6:
         e0:ef:09:52:44:5d:25:46:79:98:5e:6d:fd:bf:2e:3e:42:25:
         1e:17:d3:79:e1:22:ad:24:b0:a5:eb:f3:f7:93:88:3c:9d:5b:
         67:a7:4d:2c:c8:9e:b1:03:ba:72:3b:62:83:fb:02:71:0c:b7:
         ad:06:cf:24:f8:44:fc:54:1b:40:47:65:88:2d:9e:b6:eb:61:
         63:5b:64:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumXXOh0N7wX82dfk8mBPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiODQ1MjNjMzkzMmUyZDE5ODA0NjIzNGI5NjJlMGRjNTFh
YmY1ODYwHhcNMjUwNDEzMTAwMjExWhcNMjUwNDE0MTAwMjExWjAzMTEwLwYDVQQD
Eyg5NjI1NjllNmQ1YjQ2Y2VjYjU3ZjAyZDJkOGUzNDhjMzMwZmVkNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+ul82i4wF/+y/ebIeovCiOsVrpR
rjGQtSpGxNQ381XCwfMU3hgu/Q18K1hhxNc1GpwtHpL2cl0GwigYHMEn1ga+NsbN
i8A4yvEBFt+eHDhTHC9KUO2gQiTE3lHlygAhZpAc/2Gd23W/SnISWmo7RLHsR01T
uFARXfhtjELD22gpjaQCUhDRO4QqzBPeyFTy97lTEnuZb6xfyIRif2X1GpoCwHhV
ELWcctArs7g5hq6uaXFnhW+umQAyh6rFiL7VJhzMWdSB2UjzEZrD7gjoXtjhWp04
6/kFVM7ZLfy2cmm5yq+c7gQlFUxzQLZmZ0Xg5Z1kyD/+SaiCO8oLVfzQTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYlaebVtGzstX8C0tjjSMMw/tS6MB8GA1UdIwQY
MBaAFDuEUjw5MuLRmARiNLli4NxRq/WGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzRSU1BEa3k0dEdZQkdJMHVXTGczRkdyOVlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NDBhNWUtZWQ1Mi00N2IwLWJjZmYt
YmRmNWM3ODA3NDJlLzEvTzRSU1BEa3k0dEdZQkdJMHVXTGczRkdyOVlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NDBhNWUtZWQ1Mi00N2IwLWJjZmYtYmRmNWM3ODA3NDJl
LzEvTzRSU1BEa3k0dEdZQkdJMHVXTGczRkdyOVlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGckjJQY
aLLD/OnZv7ivyJesminQ/x6/+TsDB48TcW3rc0CuR2x3JGgq7b7qbLbyaJ3Qylz/
fdILcLA6szRvGaPF0K0DHIEfRbU7059GSxg/ILyF22X/L8lm5UScTfyJGb6n5xV0
YEtr0nlqVL38DnnVe5leCGE7HLJXWjNMjKgAbywGu9wmK0yl7ql92z/Dg84o5QcQ
wtAJzLpPEaKfDth4Ll3o8Ws7X+o+dEqOGZPZvaDm4O8JUkRdJUZ5mF5t/b8uPkIl
HhfTeeEirSSwpevz95OIPJ1bZ6dNLMiesQO6cjtig/sCcQy3rQbPJPhE/FQbQEdl
iC2etuthY1tkew==
-----END CERTIFICATE-----