Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
File:                     OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft (raw, json)
Hash identifier:          Me/DdlS+axM/lY4H/sE8VtsldyEjpkFwJpArAr/Y8+E=
Subject key identifier:   E2:C6:3B:1A:1F:1B:DF:48:3B:F0:D6:56:CA:40:F1:C1:07:7D:44:0B
Authority key identifier: 38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B
Certificate issuer:       /CN=38a8550659bb68e770d8b0126b7261fb87d8240b
Certificate serial:       01962E61F903EA661AC981BB2A97AF2B89C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 5r0GrYVoAysKJDuHDPTj-1MVWCQ.roa (hash: XAzmjxdrpIx5mLyehPHseK/+jaakSPTIZ07v9R3ktfQ=)
                          2: 7gpUO99SfoacmIWvz5o-z3ESpPc.roa (hash: jBBU4x8HtuG0AJgjijT3pv++S+IgCjRtCv3AjftIABQ=)
                          3: JOJ9b2WkEIXJpzQl9CDXk_CHY94.roa (hash: SAmYAd0xvQRGMk1x62ICIfIVJyfWTunRcVeOhZ1E3l0=)
                          4: OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl (hash: jsSbFlt/o8FjilIAlt78niYhrvh9yxHhGRHIZ1kEUWw=)
                          5: _MMbboen6fjGZxdl1sjrAWa0F6o.roa (hash: lasMNF+CDNUkmhfnkFUMcQ2+Q/sn4RwC142SJaDCsYo=)
                          6: qTT5EzYYejgHx_-gozkgtiyWSxE.roa (hash: WcMM5EKO8L7zVDvgOOXzTCPHLyfkpMtxpa7CTFKHemk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f9:03:ea:66:1a:c9:81:bb:2a:97:af:2b:89:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38a8550659bb68e770d8b0126b7261fb87d8240b
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=e2c63b1a1f1bdf483bf0d656ca40f1c1077d440b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:df:c1:9c:e3:93:23:0a:80:4e:57:cd:2e:
                    59:c2:fc:e5:f7:5c:0b:77:62:89:4a:f7:cf:08:0f:
                    31:9e:22:73:4d:7c:16:c5:8d:43:95:49:22:72:da:
                    9a:71:b5:2a:86:64:f7:33:1e:a6:ba:fb:bc:b1:1f:
                    f8:d6:64:76:5f:0b:7b:7b:16:a7:6f:6e:43:af:62:
                    9b:80:f6:3f:ed:c6:15:4f:30:6b:c3:09:a5:61:71:
                    17:53:25:4a:49:0b:e5:6d:de:e1:fe:42:63:cf:82:
                    d7:be:43:fc:42:11:22:b3:d1:eb:07:0c:17:34:dd:
                    19:1e:f1:bf:e9:c4:2f:d8:78:85:34:5e:18:2c:fb:
                    d2:2b:07:80:39:a1:bd:ab:53:8f:97:e9:f3:e5:2f:
                    9c:3f:68:ef:8e:b9:3a:40:8d:77:59:2c:c4:88:f9:
                    51:a3:a8:42:dd:14:7f:48:08:11:06:9e:c9:80:0a:
                    c4:e6:f2:b9:29:8c:b9:94:9b:a1:c1:78:56:2b:16:
                    f6:56:51:92:41:54:5f:4f:35:48:0f:c0:cd:9d:b1:
                    5a:a2:91:2a:2d:d9:75:37:0c:e3:cb:20:91:e6:d6:
                    bc:58:f7:7b:8b:d6:54:fe:23:2d:1e:0d:c7:d3:e6:
                    66:79:71:3f:0a:10:5e:c7:8f:7c:1a:07:69:11:55:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C6:3B:1A:1F:1B:DF:48:3B:F0:D6:56:CA:40:F1:C1:07:7D:44:0B
            X509v3 Authority Key Identifier:
                keyid:38:A8:55:06:59:BB:68:E7:70:D8:B0:12:6B:72:61:FB:87:D8:24:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKhVBlm7aOdw2LASa3Jh-4fYJAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/7dce73-c4df-4333-8e81-1d703b496634/1/OKhVBlm7aOdw2LASa3Jh-4fYJAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fa:de:57:80:5c:8f:6e:94:b4:bb:99:6d:81:69:f9:bd:ca:
         7b:27:f9:fd:41:9a:e0:f5:cc:fc:e8:97:2c:4f:f9:9f:b3:45:
         29:c7:bc:a2:d0:af:78:da:6b:94:4f:f0:7f:b5:d5:d0:4b:07:
         1c:0f:d5:c7:c9:5a:3a:a5:4a:97:1a:69:68:23:e2:66:93:b1:
         41:55:95:25:e9:a7:2e:d2:47:31:22:e7:4b:a1:63:e1:e0:08:
         e3:b2:56:68:2a:94:98:92:1d:f2:1f:35:a9:41:c5:ab:05:3f:
         94:be:0f:3e:82:b9:f9:a2:65:46:a8:4e:1d:5d:6f:15:fb:56:
         c4:63:9b:53:4c:f9:31:fd:27:33:98:75:3c:33:d8:e6:ab:7c:
         1f:6c:d5:70:e1:03:75:dd:41:41:59:34:54:18:8d:c8:c1:23:
         ce:c0:e1:c3:e0:a0:2b:37:34:3d:d2:82:ba:46:75:ed:80:c2:
         4e:e2:6c:9a:17:a4:22:9b:87:ec:39:2a:2a:c5:27:e9:6f:33:
         b5:88:49:48:2a:21:b3:cb:e1:83:13:a3:30:83:d4:7d:3f:a8:
         40:af:b1:68:8d:73:97:47:95:a8:fa:a6:c3:53:e5:c9:6a:b0:
         0e:ed:b7:c2:34:62:63:c5:03:e8:e2:4d:a0:44:c0:47:4c:18:
         db:f7:99:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfkD6mYayYG7KpevK4nHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YTg1NTA2NTliYjY4ZTc3MGQ4YjAxMjZiNzI2MWZiODdk
ODI0MGIwHhcNMjUwNDEzMDkwMTM0WhcNMjUwNDE0MDkwMTM0WjAzMTEwLwYDVQQD
EyhlMmM2M2IxYTFmMWJkZjQ4M2JmMGQ2NTZjYTQwZjFjMTA3N2Q0NDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutLfwZzjkyMKgE5XzS5Zwvzl91wL
d2KJSvfPCA8xniJzTXwWxY1DlUkictqacbUqhmT3Mx6muvu8sR/41mR2Xwt7exan
b25Dr2KbgPY/7cYVTzBrwwmlYXEXUyVKSQvlbd7h/kJjz4LXvkP8QhEis9HrBwwX
NN0ZHvG/6cQv2HiFNF4YLPvSKweAOaG9q1OPl+nz5S+cP2jvjrk6QI13WSzEiPlR
o6hC3RR/SAgRBp7JgArE5vK5KYy5lJuhwXhWKxb2VlGSQVRfTzVID8DNnbFaopEq
Ldl1NwzjyyCR5ta8WPd7i9ZU/iMtHg3H0+ZmeXE/ChBex498GgdpEVWRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLGOxofG99IO/DWVspA8cEHfUQLMB8GA1UdIwQY
MBaAFDioVQZZu2jncNiwEmtyYfuH2CQLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEt
MWQ3MDNiNDk2NjM0LzEvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83ZGNlNzMtYzRkZi00MzMzLThlODEtMWQ3MDNiNDk2NjM0
LzEvT0toVkJsbTdhT2R3MkxBU2EzSmgtNGZZSkFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivreV4Bc
j26UtLuZbYFp+b3Keyf5/UGa4PXM/OiXLE/5n7NFKce8otCveNprlE/wf7XV0EsH
HA/Vx8laOqVKlxppaCPiZpOxQVWVJemnLtJHMSLnS6Fj4eAI47JWaCqUmJId8h81
qUHFqwU/lL4PPoK5+aJlRqhOHV1vFftWxGObU0z5Mf0nM5h1PDPY5qt8H2zVcOED
dd1BQVk0VBiNyMEjzsDhw+CgKzc0PdKCukZ17YDCTuJsmhekIpuH7DkqKsUn6W8z
tYhJSCohs8vhgxOjMIPUfT+oQK+xaI1zl0eVqPqmw1PlyWqwDu23wjRiY8UD6OJN
oETAR0wY2/eZ0w==
-----END CERTIFICATE-----