Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File:                     mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier:          pne91dLeUx2CavpkuKjtYxUIOuLMvfx7dh+em1JwTVw=
Subject key identifier:   61:32:4B:7F:4A:48:73:DD:CA:F0:AA:9F:86:30:F0:B5:BC:CB:11:F6
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer:       /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial:       01962F74F6A9A36828FB7BDF67DCD928E4DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number:          11E4
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
                          2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
                          3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: V+JwfNkxgTJEZSPE+AergFMHe2UGoEnBPtSWqt6A1/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f6:a9:a3:68:28:fb:7b:df:67:dc:d9:28:e4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=61324b7f4a4873ddcaf0aa9f8630f0b5bccb11f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4c:f4:98:82:26:02:cd:27:a2:7f:56:80:e9:
                    f6:ec:3e:c1:d9:54:77:a8:c5:11:bf:0a:52:24:18:
                    79:5c:83:71:4b:bd:bf:21:2e:f0:49:aa:6a:2f:c6:
                    c5:4f:f4:f8:9d:d8:7d:02:2a:d7:38:f7:07:91:ff:
                    52:34:ca:71:e4:fc:10:52:47:88:b9:49:10:8a:92:
                    f2:46:d0:6a:63:56:5a:46:60:78:6a:98:d8:8e:82:
                    0e:14:74:ee:dc:bd:73:64:5a:1c:3a:45:fc:7b:30:
                    d6:89:90:95:34:d0:37:21:11:ad:d0:2e:af:b8:aa:
                    4e:00:15:3c:e8:f7:16:be:0f:c8:54:a7:63:53:c7:
                    68:05:d3:4b:21:1e:97:02:c7:0f:c0:a4:6b:d9:35:
                    cf:51:2a:06:5f:d9:94:c7:ab:83:c7:62:4b:f5:02:
                    ef:50:f0:a8:e4:e5:f5:59:ed:d4:22:d2:0d:13:0d:
                    fa:27:d2:ea:66:1b:c8:b3:7a:9f:b4:90:06:70:bb:
                    b1:4b:cf:c4:76:83:d2:7a:5a:9c:81:e7:c0:94:54:
                    a0:ac:04:57:e9:b7:05:34:5f:d8:13:1b:20:0a:98:
                    24:59:3e:2b:6e:22:22:cf:83:fc:3a:88:c9:7f:95:
                    dc:3f:b2:8c:97:ea:9d:68:5b:30:4b:7f:3d:43:d6:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:32:4B:7F:4A:48:73:DD:CA:F0:AA:9F:86:30:F0:B5:BC:CB:11:F6
            X509v3 Authority Key Identifier:
                keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:04:6a:e3:4e:3c:6c:39:1e:21:d0:65:5c:51:5c:55:30:f9:
         8a:9f:03:ad:3e:d1:87:d4:18:d4:0e:58:85:4b:3d:61:08:e5:
         2d:20:d6:68:de:32:dd:88:ce:10:e1:84:7b:7d:70:ad:6f:a8:
         bd:4f:1e:50:fb:ce:ff:6d:74:85:c2:00:8f:c0:64:fc:38:d2:
         88:dd:35:0b:f3:69:a3:9b:4e:e4:21:53:7d:79:17:d6:de:24:
         d2:c0:7a:2e:76:7e:39:b5:a0:be:4a:89:a9:ca:e7:9c:0c:36:
         af:e5:52:0d:15:6d:af:be:e9:20:bf:c5:09:c1:90:fa:df:98:
         9d:56:48:54:e5:c1:fe:ce:f5:a9:b5:a7:a9:d5:98:cd:c3:71:
         a8:76:88:60:e3:0b:0c:1a:05:fb:10:c3:b8:09:cf:2a:79:30:
         08:cc:a8:ea:b2:2b:af:82:db:da:af:b2:22:69:35:19:d2:54:
         f3:40:96:c3:ec:e7:ef:97:c3:bf:4e:fd:36:e4:b5:88:80:36:
         d7:79:33:b4:fc:d9:bf:74:29:e5:0f:11:43:fd:16:3f:c3:8e:
         7d:7c:06:be:8d:ed:a1:ef:ff:85:6c:5b:ef:39:47:b3:bc:2e:
         9d:a2:c9:a8:3b:c9:54:e8:fa:bc:f0:31:24:4f:cb:e1:4e:c7:
         f2:84:40:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdPapo2go+3vfZ9zZKOTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTJmNGFiYTBiYzliM2UzYWIxODU2NDk3YTQwMDcxOTcx
YjcwNGEwHhcNMjUwNDEzMTQwMTU2WhcNMjUwNDE0MTQwMTU2WjAzMTEwLwYDVQQD
Eyg2MTMyNGI3ZjRhNDg3M2RkY2FmMGFhOWY4NjMwZjBiNWJjY2IxMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50z0mIImAs0non9WgOn27D7B2VR3
qMURvwpSJBh5XINxS72/IS7wSapqL8bFT/T4ndh9AirXOPcHkf9SNMpx5PwQUkeI
uUkQipLyRtBqY1ZaRmB4apjYjoIOFHTu3L1zZFocOkX8ezDWiZCVNNA3IRGt0C6v
uKpOABU86PcWvg/IVKdjU8doBdNLIR6XAscPwKRr2TXPUSoGX9mUx6uDx2JL9QLv
UPCo5OX1We3UItINEw36J9LqZhvIs3qftJAGcLuxS8/EdoPSelqcgefAlFSgrARX
6bcFNF/YExsgCpgkWT4rbiIiz4P8OojJf5XcP7KMl+qdaFswS389Q9akXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEyS39KSHPdyvCqn4Yw8LW8yxH2MB8GA1UdIwQY
MBaAFJji9KugvJs+OrGFZJekAHGXG3BKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS85MmQ1NjQtNWQwOS00MjhlLWFmODAt
ODg4MjE5OWJjY2I0LzEvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS85MmQ1NjQtNWQwOS00MjhlLWFmODAtODg4MjE5OWJjY2I0
LzEvbU9MMHE2QzhtejQ2c1lWa2w2UUFjWmNiY0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQRq4048
bDkeIdBlXFFcVTD5ip8DrT7Rh9QY1A5YhUs9YQjlLSDWaN4y3YjOEOGEe31wrW+o
vU8eUPvO/210hcIAj8Bk/DjSiN01C/Npo5tO5CFTfXkX1t4k0sB6LnZ+ObWgvkqJ
qcrnnAw2r+VSDRVtr77pIL/FCcGQ+t+YnVZIVOXB/s71qbWnqdWYzcNxqHaIYOML
DBoF+xDDuAnPKnkwCMyo6rIrr4Lb2q+yImk1GdJU80CWw+zn75fDv079NuS1iIA2
13kztPzZv3Qp5Q8RQ/0WP8OOfXwGvo3toe//hWxb7zlHs7wunaLJqDvJVOj6vPAx
JE/L4U7H8oRALA==
-----END CERTIFICATE-----