Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
File:                     ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft (raw, json)
Hash identifier:          3jMqR1sb7mZaz+xggIrglSYVVdsX3MUuYLx+V1zpHr8=
Subject key identifier:   63:DA:95:75:8C:20:87:F7:41:91:D2:3D:4B:02:BE:EE:D3:EA:1C:90
Authority key identifier: A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1
Certificate issuer:       /CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
Certificate serial:       01962E992F5B72BCD53CBB6971056AC812AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: 1Sndi7er7bpQydqDqOMh1TcWi2c.roa (hash: 1MEp25vqqZ0ufx7FrXXarnt6HcRltVfMx9pP8jk/+jU=)
                          2: G3ZIKi5NlW3jvdkfzVqAJ4xyXOo.roa (hash: rwjhfMhSY3LA1PgrA0qmqDeuJnCpkzyImzevDSh2Ji4=)
                          3: ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl (hash: i70fcyzs5n+ZaAgHP/R8tTkenZecMBWntV67iswkQ8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2f:5b:72:bc:d5:3c:bb:69:71:05:6a:c8:12:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e606c7e93fed36ef90d42ce4a97260bb8aa9c1
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=63da95758c2087f74191d23d4b02beeed3ea1c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:f2:8b:3b:76:f4:ac:25:57:21:2b:60:64:
                    b5:69:9f:cf:a0:d9:93:40:7c:04:d8:bb:c9:5e:96:
                    37:ce:16:22:8e:6a:01:9a:0b:ae:14:5e:da:c1:6f:
                    ee:3f:fc:d2:c9:29:86:24:60:07:ef:5c:1d:58:8e:
                    8a:7a:0a:12:75:f0:c1:a3:f5:a2:55:2f:38:7e:71:
                    35:6c:73:12:db:a4:8f:52:5f:3d:dc:5b:3b:39:f3:
                    90:70:51:86:0f:16:87:34:28:63:16:c8:39:9b:87:
                    a0:49:82:11:1a:b3:25:48:66:0f:0c:1a:30:75:0c:
                    f8:69:70:f1:f4:ce:8e:72:48:74:11:0e:39:53:15:
                    1a:37:ac:a4:43:2c:c3:0f:0d:d1:9b:4e:a0:49:40:
                    6f:83:e0:d3:bc:00:93:ea:9a:c5:13:c5:34:ac:54:
                    94:49:95:bd:c8:b6:8b:96:cb:64:23:2f:23:be:a9:
                    f6:e3:84:b8:b2:64:34:22:ba:8e:bc:ea:51:c2:67:
                    d2:4b:eb:e9:e3:13:a4:4c:d2:13:c0:c1:99:20:01:
                    61:47:00:b8:7f:ce:cc:7b:bf:26:68:fb:c2:90:b9:
                    fb:c9:5c:ab:11:3a:ee:67:54:53:8a:dc:3d:98:6d:
                    99:5b:23:62:78:f4:41:7e:ef:ce:da:3b:e6:4e:ae:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DA:95:75:8C:20:87:F7:41:91:D2:3D:4B:02:BE:EE:D3:EA:1C:90
            X509v3 Authority Key Identifier:
                keyid:A2:E6:06:C7:E9:3F:ED:36:EF:90:D4:2C:E4:A9:72:60:BB:8A:A9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouYGx-k_7TbvkNQs5KlyYLuKqcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/d3e23f-0e5a-4923-ab2f-a9ea2057042b/1/ouYGx-k_7TbvkNQs5KlyYLuKqcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c4:f9:e9:49:e7:29:c2:a1:fe:26:1d:7e:29:f9:96:a8:f0:
         0f:16:90:2c:62:e8:6f:66:d4:24:a2:45:7c:31:f5:25:91:fe:
         f1:6d:92:f5:a2:a2:17:df:81:0c:91:02:a7:bb:d6:83:49:45:
         89:5c:16:2e:b8:9f:87:2a:1e:85:71:93:ce:b5:45:32:d5:a0:
         5e:f7:08:f2:8b:7b:4f:d4:40:c4:fb:64:ac:eb:a6:46:84:f5:
         60:9f:9f:87:37:84:54:5c:79:20:96:55:6c:82:2e:ce:0e:6b:
         e9:49:e8:b2:00:0d:50:aa:47:ca:c2:a0:69:e4:9c:28:04:dd:
         9e:40:5a:0e:ea:3e:73:0b:91:59:63:cc:42:59:f9:f4:a4:c5:
         0d:bd:fd:e0:e2:fc:45:4e:bf:c8:9c:68:90:fe:84:e3:30:e3:
         5b:1c:c9:35:3c:7e:f5:8a:6a:8d:5b:e0:2d:9e:79:28:13:0c:
         25:c8:30:42:8e:9a:ee:6d:1e:df:b1:fb:57:a4:fe:f2:20:33:
         b2:96:18:b2:60:76:39:ee:5f:ec:7b:eb:4d:14:53:41:1a:25:
         f6:1f:c1:a9:1c:68:2b:9a:d3:cb:2c:9e:99:fb:30:b1:1c:1e:
         67:0d:a6:f5:52:1f:93:4c:c1:39:5e:47:21:96:e2:c5:e2:00:
         e3:08:07:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumS9bcrzVPLtpcQVqyBKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTYwNmM3ZTkzZmVkMzZlZjkwZDQyY2U0YTk3MjYwYmI4
YWE5YzEwHhcNMjUwNDEzMTAwMTUzWhcNMjUwNDE0MTAwMTUzWjAzMTEwLwYDVQQD
Eyg2M2RhOTU3NThjMjA4N2Y3NDE5MWQyM2Q0YjAyYmVlZWQzZWExYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+byizt29KwlVyErYGS1aZ/PoNmT
QHwE2LvJXpY3zhYijmoBmguuFF7awW/uP/zSySmGJGAH71wdWI6KegoSdfDBo/Wi
VS84fnE1bHMS26SPUl893Fs7OfOQcFGGDxaHNChjFsg5m4egSYIRGrMlSGYPDBow
dQz4aXDx9M6Ockh0EQ45UxUaN6ykQyzDDw3Rm06gSUBvg+DTvACT6prFE8U0rFSU
SZW9yLaLlstkIy8jvqn244S4smQ0IrqOvOpRwmfSS+vp4xOkTNITwMGZIAFhRwC4
f87Me78maPvCkLn7yVyrETruZ1RTitw9mG2ZWyNiePRBfu/O2jvmTq554wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPalXWMIIf3QZHSPUsCvu7T6hyQMB8GA1UdIwQY
MBaAFKLmBsfpP+0275DULOSpcmC7iqnBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYt
YTllYTIwNTcwNDJiLzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9kM2UyM2YtMGU1YS00OTIzLWFiMmYtYTllYTIwNTcwNDJi
LzEvb3VZR3gta183VGJ2a05RczVLbHlZTHVLcWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMT56Unn
KcKh/iYdfin5lqjwDxaQLGLob2bUJKJFfDH1JZH+8W2S9aKiF9+BDJECp7vWg0lF
iVwWLrifhyoehXGTzrVFMtWgXvcI8ot7T9RAxPtkrOumRoT1YJ+fhzeEVFx5IJZV
bIIuzg5r6UnosgANUKpHysKgaeScKATdnkBaDuo+cwuRWWPMQln59KTFDb394OL8
RU6/yJxokP6E4zDjWxzJNTx+9YpqjVvgLZ55KBMMJcgwQo6a7m0e37H7V6T+8iAz
spYYsmB2Oe5f7HvrTRRTQRol9h/BqRxoK5rTyyyemfswsRweZw2m9VIfk0zBOV5H
IZbixeIA4wgH/g==
-----END CERTIFICATE-----