Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File:                     OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier:          LeD98nn8al4xFX+aAsvibUVq/fBbThERom1z/Tu7eTU=
Subject key identifier:   53:32:38:30:21:95:FB:BF:42:29:2E:94:A4:60:1A:E0:A3:F4:1E:85
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer:       /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial:       01962E61B4981A9045C88392DA0C3A94B1F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number:          09B4
Signing time:             Sun 13 Apr 2025 09:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:17 +0000
Files and hashes:         1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: OOYC0DyQ9LyIfgihG71wWR3Yc60EoQJD7myZ2hprIQg=)
                          2: ZheJClH79M-pTRLGEsquKEEr6pM.roa (hash: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b4:98:1a:90:45:c8:83:92:da:0c:3a:94:b1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
        Validity
            Not Before: Apr 13 09:01:17 2025 GMT
            Not After : Apr 14 09:01:17 2025 GMT
        Subject: CN=533238302195fbbf42292e94a4601ae0a3f41e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3a:f5:a5:50:18:dc:12:c6:3d:1c:60:1b:19:
                    52:07:b6:dc:99:b9:02:40:33:97:9a:26:40:f1:b7:
                    50:bb:31:4c:24:5f:4e:50:86:6c:68:cc:0b:4b:b2:
                    57:37:35:98:d8:9f:54:17:f7:e0:61:20:9e:78:c1:
                    37:43:29:08:f8:80:a6:96:0b:d0:79:b6:15:d7:b9:
                    b4:4c:ef:c9:67:6e:c4:96:6d:d5:e2:58:f3:46:08:
                    74:11:e7:68:b1:17:dc:61:00:75:02:72:0a:93:9b:
                    52:4c:c6:14:f6:07:9b:95:fd:35:84:8a:4e:db:f8:
                    50:97:22:0b:4e:e8:1d:6f:e8:e7:5c:27:14:b2:ab:
                    5b:26:b0:51:72:4f:2d:65:9e:47:9c:1e:61:bd:94:
                    6c:ee:b0:47:58:be:27:30:14:8c:d7:4c:4f:6c:fc:
                    0a:00:ff:59:18:22:12:78:e5:8c:ff:67:7f:1b:5b:
                    24:b6:3b:cf:47:57:52:f2:20:e9:91:b3:fa:ba:00:
                    9e:f4:94:55:72:50:25:af:d6:69:53:8e:4a:58:03:
                    be:b4:d9:12:32:41:aa:e2:73:96:01:26:6f:85:78:
                    84:88:52:9d:db:76:6d:fb:1f:31:30:86:ec:cf:44:
                    2d:46:9c:95:af:9a:08:18:ba:05:18:95:4e:7b:47:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:32:38:30:21:95:FB:BF:42:29:2E:94:A4:60:1A:E0:A3:F4:1E:85
            X509v3 Authority Key Identifier:
                keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3c:df:2b:17:4f:a6:ca:32:7e:42:0d:1f:05:eb:96:7e:ea:
         f4:ff:df:aa:eb:97:5d:8e:3f:60:88:bf:02:f9:01:9a:9e:b4:
         82:f4:71:fa:32:ab:8f:8b:ac:71:98:9a:d1:b6:e3:0f:50:2e:
         b9:f0:b3:87:ee:64:c2:d4:11:2f:5f:af:8a:9a:23:13:e5:3c:
         a5:7b:5e:fd:bf:51:f1:78:9b:a2:03:b1:ca:16:b6:4a:00:47:
         ba:c2:8b:01:6b:0c:47:09:f5:3e:6a:38:df:a5:40:08:20:37:
         08:4c:63:00:01:f7:c1:f8:a3:12:66:44:7f:c0:2a:b7:2e:23:
         1e:7d:c5:bb:af:e2:d0:34:53:3f:ff:d5:46:a4:76:95:8f:6d:
         6d:eb:b1:a4:80:bd:ce:b6:3f:2b:71:0e:e8:e2:9d:50:03:77:
         7b:51:1a:fc:02:ff:c6:a5:3b:cd:66:35:1e:53:09:05:fc:31:
         bc:b5:79:2f:fb:58:00:c0:d5:b3:86:e7:8c:66:ba:89:5a:a0:
         cc:51:4f:2e:c3:99:3b:e8:cd:b1:00:9d:5b:bd:3f:41:22:30:
         f7:87:db:b1:9d:4d:cc:05:23:e5:68:ed:c6:3d:05:74:60:a1:
         e8:ac:41:51:25:14:06:0e:2f:c1:12:0e:b3:9e:6f:22:d9:bf:
         86:86:86:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbSYGpBFyIOS2gw6lLH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ODg4MWUwNjM4M2ZkMmMzNmU5ZjI0NWM0YmZhMTMwMWQx
NWE1MzcwHhcNMjUwNDEzMDkwMTE3WhcNMjUwNDE0MDkwMTE3WjAzMTEwLwYDVQQD
Eyg1MzMyMzgzMDIxOTVmYmJmNDIyOTJlOTRhNDYwMWFlMGEzZjQxZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zr1pVAY3BLGPRxgGxlSB7bcmbkC
QDOXmiZA8bdQuzFMJF9OUIZsaMwLS7JXNzWY2J9UF/fgYSCeeME3QykI+ICmlgvQ
ebYV17m0TO/JZ27Elm3V4ljzRgh0EedosRfcYQB1AnIKk5tSTMYU9geblf01hIpO
2/hQlyILTugdb+jnXCcUsqtbJrBRck8tZZ5HnB5hvZRs7rBHWL4nMBSM10xPbPwK
AP9ZGCISeOWM/2d/G1sktjvPR1dS8iDpkbP6ugCe9JRVclAlr9ZpU45KWAO+tNkS
MkGq4nOWASZvhXiEiFKd23Zt+x8xMIbsz0QtRpyVr5oIGLoFGJVOe0dg8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMyODAhlfu/QikulKRgGuCj9B6FMB8GA1UdIwQY
MBaAFDmIgeBjg/0sNunyRcS/oTAdFaU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2It
MzU5ZTRlNGQ5MTc1LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9jZGEyMTUtNDlhZS00MDdiLWFmM2ItMzU5ZTRlNGQ5MTc1
LzEvT1lpQjRHT0RfU3cyNmZKRnhMLWhNQjBWcFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTzfKxdP
psoyfkINHwXrln7q9P/fquuXXY4/YIi/AvkBmp60gvRx+jKrj4uscZia0bbjD1Au
ufCzh+5kwtQRL1+vipojE+U8pXte/b9R8XibogOxyha2SgBHusKLAWsMRwn1Pmo4
36VACCA3CExjAAH3wfijEmZEf8Aqty4jHn3Fu6/i0DRTP//VRqR2lY9tbeuxpIC9
zrY/K3EO6OKdUAN3e1Ea/AL/xqU7zWY1HlMJBfwxvLV5L/tYAMDVs4bnjGa6iVqg
zFFPLsOZO+jNsQCdW70/QSIw94fbsZ1NzAUj5Wjtxj0FdGCh6KxBUSUUBg4vwRIO
s55vItm/hoaGRA==
-----END CERTIFICATE-----