Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
File:                     a0P3ovQ2ixel4DXOS9km-KFC1os.mft (raw, json)
Hash identifier:          jDKIwEBuLzrP20ZaJR4Z7QJJNK4ZJjvKxk5vBsXFDVM=
Subject key identifier:   48:31:8E:2C:FA:E7:4B:66:1D:44:38:C1:F3:46:32:61:A6:15:89:32
Authority key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
Certificate issuer:       /CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Certificate serial:       01962E2B26BD980B6992D5CE662A25F38ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: MRvoKs_tNg3-xTMgCbueoBg-yMU.roa (hash: lEsMSNpmyZrLO0pVpESTwzarMUanf5zfZ6XbX+ha5s8=)
                          2: a0P3ovQ2ixel4DXOS9km-KFC1os.crl (hash: yWN0pZWRZ9LP7x07MlckxqHDCMlaaTG6URR46fkCq9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:26:bd:98:0b:69:92:d5:ce:66:2a:25:f3:8a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=48318e2cfae74b661d4438c1f3463261a6158932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:be:c4:84:b5:5c:67:98:bf:8d:79:bf:54:f4:
                    0f:91:ce:7f:2d:c5:1c:23:8b:ba:0d:e0:c5:5a:c6:
                    c6:81:fc:4f:4b:06:13:9f:98:68:68:ee:a8:fb:e7:
                    29:60:51:2a:71:27:cb:39:94:2d:81:6c:01:d6:c4:
                    6d:02:5c:f9:55:53:bf:98:40:5e:fb:b6:2a:36:4b:
                    9f:da:14:f5:da:1c:24:6a:b7:93:8b:91:14:76:04:
                    f2:e3:72:8d:80:e2:2d:5d:4f:22:eb:57:52:e7:a3:
                    29:b5:c4:97:b4:92:5d:04:0b:0c:83:31:68:bc:ea:
                    04:6b:51:1e:a6:a5:df:4e:b0:6c:8c:65:69:2d:3f:
                    09:09:43:c7:09:de:89:05:59:88:32:2e:c5:f5:fe:
                    57:cb:9a:98:c7:f0:8f:4b:d4:17:1c:d3:77:c0:ab:
                    10:a2:c1:ad:fc:09:ca:01:a9:f4:96:38:37:df:05:
                    f5:8f:d2:0c:a3:11:29:26:7c:fd:db:c4:58:3e:f4:
                    fb:c1:39:1f:bd:7f:23:76:1c:49:39:ce:a1:87:ee:
                    88:3f:f5:55:19:55:c5:c7:9f:13:b5:0a:18:15:4d:
                    c3:fc:dc:18:ec:ff:9c:ce:fd:b5:a0:82:d9:94:49:
                    86:51:dd:a4:f0:d5:6d:16:96:b8:31:33:7f:44:73:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:31:8E:2C:FA:E7:4B:66:1D:44:38:C1:F3:46:32:61:A6:15:89:32
            X509v3 Authority Key Identifier:
                keyid:6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:17:90:74:f0:76:ab:77:7d:04:20:96:aa:50:7f:8b:60:8d:
         fc:96:64:dc:51:ce:cc:54:ac:99:ba:05:5f:e9:ff:dd:28:77:
         03:32:d3:1c:2b:b9:47:1a:bc:d9:1f:5d:19:ca:e4:a9:e8:4a:
         24:4a:ea:c9:e9:06:b6:76:ac:8b:ed:9e:fc:b9:7e:86:ec:40:
         c5:40:17:37:cf:9b:e8:3c:46:14:51:05:25:89:98:ed:6c:3b:
         d1:f7:3a:5e:bd:b2:81:2a:8a:9c:4f:5b:c2:1f:3f:8d:3d:16:
         62:35:39:21:a9:31:ac:9e:79:9f:a3:7a:83:69:e9:0c:30:81:
         d9:f4:b4:d1:a9:c0:92:8e:04:83:13:7c:7f:ac:dc:10:97:3f:
         89:6b:4f:b3:3d:4f:60:cf:b7:c6:82:3f:d0:2a:09:6f:61:d8:
         66:98:12:df:66:21:48:9b:d0:d8:ca:2c:f4:4b:8f:f7:5f:e8:
         d8:34:90:cf:6e:d3:12:d2:3e:38:6e:0e:ee:bc:47:9c:1d:20:
         e2:6f:d6:12:b7:2e:ce:0c:ae:fe:6e:71:a5:ae:da:70:86:70:
         30:61:44:70:0e:af:92:12:9e:de:f3:af:4f:3b:83:a9:7e:95:
         93:4f:8a:59:d0:af:68:0e:79:f1:ff:59:30:62:58:fa:f8:bd:
         40:2a:4a:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKya9mAtpktXOZiol84rMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNDNmN2EyZjQzNjhiMTdhNWUwMzVjZTRiZDkyNmY4YTE0
MmQ2OGIwHhcNMjUwNDEzMDgwMTQyWhcNMjUwNDE0MDgwMTQyWjAzMTEwLwYDVQQD
Eyg0ODMxOGUyY2ZhZTc0YjY2MWQ0NDM4YzFmMzQ2MzI2MWE2MTU4OTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr7EhLVcZ5i/jXm/VPQPkc5/LcUc
I4u6DeDFWsbGgfxPSwYTn5hoaO6o++cpYFEqcSfLOZQtgWwB1sRtAlz5VVO/mEBe
+7YqNkuf2hT12hwkareTi5EUdgTy43KNgOItXU8i61dS56MptcSXtJJdBAsMgzFo
vOoEa1EepqXfTrBsjGVpLT8JCUPHCd6JBVmIMi7F9f5Xy5qYx/CPS9QXHNN3wKsQ
osGt/AnKAan0ljg33wX1j9IMoxEpJnz928RYPvT7wTkfvX8jdhxJOc6hh+6IP/VV
GVXFx58TtQoYFU3D/NwY7P+czv21oILZlEmGUd2k8NVtFpa4MTN/RHPKpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgxjiz650tmHUQ4wfNGMmGmFYkyMB8GA1UdIwQY
MBaAFGtD96L0NosXpeA1zkvZJvihQtaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBQM292UTJpeGVsNERYT1M5a20tS0ZDMW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iYTdkYmEtNDc0YS00MmZkLWE5YzMt
MzViMDMxMzZkZDAzLzEvYTBQM292UTJpeGVsNERYT1M5a20tS0ZDMW9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iYTdkYmEtNDc0YS00MmZkLWE5YzMtMzViMDMxMzZkZDAz
LzEvYTBQM292UTJpeGVsNERYT1M5a20tS0ZDMW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgReQdPB2
q3d9BCCWqlB/i2CN/JZk3FHOzFSsmboFX+n/3Sh3AzLTHCu5Rxq82R9dGcrkqehK
JErqyekGtnasi+2e/Ll+huxAxUAXN8+b6DxGFFEFJYmY7Ww70fc6Xr2ygSqKnE9b
wh8/jT0WYjU5IakxrJ55n6N6g2npDDCB2fS00anAko4EgxN8f6zcEJc/iWtPsz1P
YM+3xoI/0CoJb2HYZpgS32YhSJvQ2Mos9EuP91/o2DSQz27TEtI+OG4O7rxHnB0g
4m/WErcuzgyu/m5xpa7acIZwMGFEcA6vkhKe3vOvTzuDqX6Vk0+KWdCvaA558f9Z
MGJY+vi9QCpKkA==
-----END CERTIFICATE-----