Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File:                     oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier:          pT6bCvCjGCmnn4nUS9w4AR3IYy968h++gZmgfVU3l/8=
Subject key identifier:   B1:FB:84:F9:91:8D:E9:E0:09:2B:2F:72:28:DE:D2:65:A1:42:DC:41
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer:       /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial:       01962FAB183E971AFB55406F7D5CE17F064F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
                          2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: YBkGKtqwr9WMO5n3RjaY/BM40n51hdx5qqKkXLV+og8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:18:3e:97:1a:fb:55:40:6f:7d:5c:e1:7f:06:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=b1fb84f9918de9e0092b2f7228ded265a142dc41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:23:8c:aa:dc:30:6e:c1:83:a7:81:6b:f2:52:
                    4d:b7:27:da:ac:b0:0e:b1:35:ac:14:6e:50:9e:17:
                    09:15:e5:cf:df:a9:d0:f9:e8:95:e5:5f:1f:9b:7a:
                    73:d3:a7:6d:74:9a:23:e4:95:53:e8:04:a1:d6:03:
                    5f:33:c6:1d:c8:4c:7c:5e:8b:21:f6:5e:c8:b9:6b:
                    fc:d4:69:48:59:8b:42:23:32:ae:bb:91:f7:1c:22:
                    69:38:0f:57:aa:d6:8d:eb:fa:0a:7f:4f:6a:fd:70:
                    64:e1:a6:ec:21:61:04:a7:00:b5:68:5b:83:e1:9b:
                    30:87:3b:c8:fa:4d:fc:b4:0a:d1:3f:b5:6d:1f:cf:
                    dc:62:68:91:88:bd:25:8b:70:c3:b5:82:9e:2a:e0:
                    16:9f:a3:24:7e:06:27:33:00:08:40:9b:13:62:51:
                    c0:bd:30:38:55:2e:83:58:35:b2:88:05:32:d9:33:
                    c6:c2:f0:13:e2:8b:57:07:47:92:b1:a6:ed:f5:1f:
                    a6:c2:b0:7a:27:04:91:5d:d3:06:c1:93:bb:65:37:
                    aa:24:61:8e:75:19:5b:fe:0f:6d:3e:c8:81:54:43:
                    ea:d2:b0:0b:98:e7:a8:db:96:40:c7:1c:70:d9:d9:
                    17:52:01:35:79:34:69:62:76:5f:dd:29:06:33:f7:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FB:84:F9:91:8D:E9:E0:09:2B:2F:72:28:DE:D2:65:A1:42:DC:41
            X509v3 Authority Key Identifier:
                keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c1:88:ed:52:7a:d0:95:b3:4c:90:1f:b9:64:2d:c9:92:84:
         f4:c6:3f:a5:bc:04:ab:80:c8:d2:3e:63:75:84:d8:89:d6:ba:
         f5:c1:44:9a:ab:8b:88:4f:6e:a7:6f:5a:02:5e:5d:2e:df:9f:
         41:0f:99:da:4d:ce:27:78:5b:8c:24:f7:c2:40:58:26:8a:84:
         8d:4b:94:a9:37:27:2c:0f:87:2e:77:c1:b6:35:ef:be:0e:18:
         04:0c:bb:ed:a4:6f:0c:a7:09:e7:0a:71:9a:29:f2:08:df:8f:
         5f:99:44:3f:92:b4:89:46:10:ad:af:da:4e:a7:83:dc:16:be:
         0f:01:8c:45:cc:c1:c9:0b:67:d2:86:75:f6:36:b1:53:3b:27:
         ee:dc:c5:98:e1:a3:f0:89:f0:65:d9:8b:3b:56:a5:e5:33:e6:
         44:ed:4e:25:99:d4:18:1a:b5:0d:e5:e5:8a:41:97:9a:1a:00:
         91:09:86:87:ae:02:69:8b:c9:c6:f5:f1:4c:66:c7:99:f1:72:
         32:60:cd:44:ee:7e:63:fc:4c:d1:34:94:0d:70:87:60:ef:5f:
         e3:08:b3:98:e0:a6:1b:f0:38:1d:50:c0:49:5e:b7:0e:7a:0b:
         85:e4:cb:16:e4:af:3a:f4:d9:8a:43:4f:17:97:64:a6:28:60:
         0f:b8:27:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxg+lxr7VUBvfVzhfwZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1
NTM4MjYwHhcNMjUwNDEzMTUwMTA0WhcNMjUwNDE0MTUwMTA0WjAzMTEwLwYDVQQD
EyhiMWZiODRmOTkxOGRlOWUwMDkyYjJmNzIyOGRlZDI2NWExNDJkYzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyOMqtwwbsGDp4Fr8lJNtyfarLAO
sTWsFG5QnhcJFeXP36nQ+eiV5V8fm3pz06dtdJoj5JVT6ASh1gNfM8YdyEx8Xosh
9l7IuWv81GlIWYtCIzKuu5H3HCJpOA9XqtaN6/oKf09q/XBk4absIWEEpwC1aFuD
4ZswhzvI+k38tArRP7VtH8/cYmiRiL0li3DDtYKeKuAWn6MkfgYnMwAIQJsTYlHA
vTA4VS6DWDWyiAUy2TPGwvAT4otXB0eSsabt9R+mwrB6JwSRXdMGwZO7ZTeqJGGO
dRlb/g9tPsiBVEPq0rALmOeo25ZAxxxw2dkXUgE1eTRpYnZf3SkGM/cS1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH7hPmRjengCSsvcije0mWhQtxBMB8GA1UdIwQY
MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt
ZjgyMTM3ZTAwYmMzLzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz
LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8GI7VJ6
0JWzTJAfuWQtyZKE9MY/pbwEq4DI0j5jdYTYida69cFEmquLiE9up29aAl5dLt+f
QQ+Z2k3OJ3hbjCT3wkBYJoqEjUuUqTcnLA+HLnfBtjXvvg4YBAy77aRvDKcJ5wpx
minyCN+PX5lEP5K0iUYQra/aTqeD3Ba+DwGMRczByQtn0oZ19jaxUzsn7tzFmOGj
8InwZdmLO1al5TPmRO1OJZnUGBq1DeXlikGXmhoAkQmGh64CaYvJxvXxTGbHmfFy
MmDNRO5+Y/xM0TSUDXCHYO9f4wizmOCmG/A4HVDASV63DnoLheTLFuSvOvTZikNP
F5dkpihgD7gnow==
-----END CERTIFICATE-----