Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File:                     O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier:          KUa8n73k+3LjgjKM+UogRUWgjA6W1/1oL3yQF4EP3hU=
Subject key identifier:   87:29:CD:BA:E3:76:B7:60:4D:AE:1A:C5:DF:65:92:35:E0:92:07:D3
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer:       /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial:       01962E2B0DCBB70059DC9E7A838D1D26BD96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number:          0340
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: PE+Wu0JumqZqyEywLEtNZESGPlD1d4dDUhMBgrLGNDw=)
                          2: tsimjRApcLdxNhZEKgAs63IqA5I.roa (hash: HrZUtgrX3ioBRBNFpZduF4ySYEUBH1QJ3tZ4kshDhvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0d:cb:b7:00:59:dc:9e:7a:83:8d:1d:26:bd:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=8729cdbae376b7604dae1ac5df659235e09207d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:ec:f0:2b:ac:15:d6:d4:6b:77:bb:15:c7:
                    05:6c:45:f5:aa:aa:99:12:86:33:d1:87:92:6c:55:
                    46:92:12:82:da:d4:4e:33:a9:d4:39:f8:5b:e4:2a:
                    35:e7:5a:4d:ec:45:de:84:41:f1:82:75:71:a5:2a:
                    89:4a:fc:0e:fa:4a:9d:32:43:43:2d:6a:be:28:82:
                    47:6b:f5:d3:c1:19:bd:c6:2d:21:82:21:e5:92:5f:
                    b8:90:5d:70:75:f9:9b:6a:00:c6:89:2e:33:cf:f3:
                    2b:16:e9:2c:3a:70:4c:f5:b9:e0:b3:b6:c7:1b:08:
                    e6:39:15:55:2b:66:86:98:2f:15:73:74:8d:7b:6d:
                    d3:69:e5:21:dc:6d:c5:36:0b:de:5b:54:8c:ce:e6:
                    96:9a:f9:94:53:4d:2d:53:55:8a:8b:01:a8:8d:0b:
                    a1:32:60:61:fb:f0:56:86:7a:a9:2b:65:fb:e4:24:
                    8c:49:49:7a:11:e2:a9:83:12:93:eb:8c:13:52:a6:
                    cf:34:81:3e:8c:f3:42:ec:2c:87:e5:54:7f:ed:ee:
                    c3:b7:39:84:49:c5:b8:7b:18:1a:f7:10:6d:82:2c:
                    46:19:8d:d1:25:f7:c3:64:59:1d:9d:72:df:06:2d:
                    53:82:6d:20:00:5c:ee:71:d6:3b:ad:23:8b:13:6a:
                    ec:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:29:CD:BA:E3:76:B7:60:4D:AE:1A:C5:DF:65:92:35:E0:92:07:D3
            X509v3 Authority Key Identifier:
                keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:18:05:88:a7:dd:54:ae:8c:07:f9:70:68:c2:08:31:ae:57:
         ca:d5:e2:2b:f9:ef:01:18:6f:aa:83:aa:91:5f:ae:cc:5a:f5:
         a8:67:1c:74:41:99:72:38:9f:37:d9:e2:ea:8a:98:e2:a9:e6:
         ef:62:32:58:80:60:d0:6e:c9:c3:ab:0b:05:48:cc:56:be:9a:
         ab:5d:44:a2:d0:f2:03:27:d5:e1:d1:49:c9:5a:0b:38:04:a7:
         c3:1d:7b:96:d9:03:f6:ed:6b:d0:c4:18:87:4b:0a:f3:f2:de:
         d6:b1:7b:e0:aa:e6:f2:68:4a:dc:1b:4c:79:8e:c7:b1:30:c8:
         79:03:8c:5c:85:bf:51:22:65:42:ec:ec:0c:57:30:6b:e8:52:
         86:80:c9:56:d7:ef:d0:9b:0b:90:60:2a:37:fb:9f:3e:e1:96:
         dd:5f:28:f4:85:89:f8:33:85:26:56:7c:5a:d9:4e:04:85:64:
         0c:54:82:ae:a4:9c:95:c2:3a:69:25:34:92:d1:49:85:92:76:
         31:a5:fa:94:e4:cb:79:8d:d2:e6:8d:b2:21:d2:a6:c8:85:9f:
         d1:fb:b9:50:8f:00:6b:0d:dd:28:30:60:ab:98:4d:ee:dd:a9:
         1f:04:53:92:88:e3:7c:6a:3c:d0:ca:8d:9d:50:b7:ea:98:62:
         06:4a:33:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKw3LtwBZ3J56g40dJr2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTVhZWJhY2E3MzMxNmRjNDY4MGM4MDhiNzkzZTZhMDk1
NjVmMWIwHhcNMjUwNDEzMDgwMTM1WhcNMjUwNDE0MDgwMTM1WjAzMTEwLwYDVQQD
Eyg4NzI5Y2RiYWUzNzZiNzYwNGRhZTFhYzVkZjY1OTIzNWUwOTIwN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosDs8CusFdbUa3e7FccFbEX1qqqZ
EoYz0YeSbFVGkhKC2tROM6nUOfhb5Co151pN7EXehEHxgnVxpSqJSvwO+kqdMkND
LWq+KIJHa/XTwRm9xi0hgiHlkl+4kF1wdfmbagDGiS4zz/MrFuksOnBM9bngs7bH
GwjmORVVK2aGmC8Vc3SNe23TaeUh3G3FNgveW1SMzuaWmvmUU00tU1WKiwGojQuh
MmBh+/BWhnqpK2X75CSMSUl6EeKpgxKT64wTUqbPNIE+jPNC7CyH5VR/7e7DtzmE
ScW4exga9xBtgixGGY3RJffDZFkdnXLfBi1Tgm0gAFzucdY7rSOLE2rsIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcpzbrjdrdgTa4axd9lkjXgkgfTMB8GA1UdIwQY
MBaAFDuVrrrKczFtxGgMgIt5PmoJVl8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2Et
MDIzY2MxZmMxOTEwLzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2EtMDIzY2MxZmMxOTEw
LzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxgFiKfd
VK6MB/lwaMIIMa5XytXiK/nvARhvqoOqkV+uzFr1qGccdEGZcjifN9ni6oqY4qnm
72IyWIBg0G7Jw6sLBUjMVr6aq11EotDyAyfV4dFJyVoLOASnwx17ltkD9u1r0MQY
h0sK8/Le1rF74Krm8mhK3BtMeY7HsTDIeQOMXIW/USJlQuzsDFcwa+hShoDJVtfv
0JsLkGAqN/ufPuGW3V8o9IWJ+DOFJlZ8WtlOBIVkDFSCrqSclcI6aSU0ktFJhZJ2
MaX6lOTLeY3S5o2yIdKmyIWf0fu5UI8Aaw3dKDBgq5hN7t2pHwRTkojjfGo80MqN
nVC36phiBkozWg==
-----END CERTIFICATE-----