Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File:                     oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier:          Bjrkaky4uShU4SFhxA+XPrCHo87N7QuVQbFx5TeM0Ac=
Subject key identifier:   36:B2:02:7F:6F:84:87:A4:93:D4:AB:E7:B0:AB:2B:7A:DB:90:C2:4B
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer:       /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial:       01962DF3ABF9474911E48EAE6D99BE83D7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number:          10BC
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 1-rpUgw0W3sKSFdW3yshaE1HCCc0.roa (hash: c/Tt5N/pZWiN2mpptC/U9LHYusWW/dCE4lcNMT3U+WE=)
                          2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: eDRShq2YNer5LsZdnRdGNcqSbtJwVnSm5wtY3bdsaT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ab:f9:47:49:11:e4:8e:ae:6d:99:be:83:d7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=36b2027f6f8487a493d4abe7b0ab2b7adb90c24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ed:96:80:8c:3d:76:6d:1f:9a:ed:e6:ce:f8:
                    ee:85:e3:98:c8:bf:02:85:42:bc:de:f1:18:dc:d5:
                    8b:86:d3:39:27:d1:96:14:0e:51:44:7c:be:8f:fd:
                    df:28:af:62:27:ef:13:14:4a:15:46:8b:7e:71:b7:
                    fa:fb:06:4a:36:50:23:84:5e:04:58:5f:e1:97:53:
                    ce:30:16:bc:5f:9f:dc:cd:37:60:85:36:46:a1:9c:
                    9b:c9:fe:c4:36:19:95:f9:a7:ed:29:86:52:cb:5e:
                    7d:f5:96:64:dc:86:6b:03:2a:3d:f1:79:e1:fa:8a:
                    08:1c:34:66:48:c7:8f:53:c7:ac:be:65:0e:a8:89:
                    fe:97:40:ed:18:8a:f6:6b:6a:9b:4e:d6:1b:f2:85:
                    c9:76:54:7a:de:4e:26:c5:c7:24:7a:a8:aa:14:88:
                    5b:14:ff:bf:4f:72:90:3e:f9:b8:95:63:22:98:7c:
                    79:71:60:d3:d3:ee:3a:8a:80:b6:15:f0:f4:9d:1d:
                    18:57:9d:bb:16:9b:60:9c:33:a8:65:43:7e:dd:a3:
                    9e:54:7f:13:0d:33:fd:6d:53:0f:58:41:f6:6b:6b:
                    43:79:18:66:3e:26:d0:43:7a:72:20:d4:6a:f2:6c:
                    12:bb:a1:b9:6f:62:a3:87:76:d4:ce:53:b3:b8:0d:
                    74:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B2:02:7F:6F:84:87:A4:93:D4:AB:E7:B0:AB:2B:7A:DB:90:C2:4B
            X509v3 Authority Key Identifier:
                keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:66:68:b8:e3:20:6f:31:5a:00:f1:31:e2:34:78:2b:de:e3:
         4a:38:55:8e:91:58:3f:3c:58:9e:66:30:b9:1a:b4:00:ec:bc:
         d6:fc:a9:10:d6:a3:0d:be:ff:98:cb:52:41:c1:9f:c5:30:55:
         55:42:41:7a:a7:1c:d0:87:0f:75:6c:86:ba:ad:70:4c:d5:1e:
         0f:fe:88:88:c9:10:ef:79:b7:6b:c8:70:67:d3:6a:76:71:1c:
         b1:3f:f3:78:60:af:82:84:19:18:17:ab:2c:48:89:6a:8f:28:
         46:7a:1b:f8:c8:8a:75:4d:d3:e3:be:68:d9:4a:b7:93:05:81:
         90:eb:87:5d:17:f9:08:a0:e5:2d:7d:cc:65:2f:4b:64:bc:05:
         bb:98:db:0d:bd:f1:81:8d:a7:ed:91:e8:41:d8:85:c8:43:30:
         76:86:2b:4c:fc:66:c9:f9:10:43:e0:27:24:7a:87:bc:d2:d6:
         8d:7d:5e:db:74:bf:3f:04:96:78:19:9e:86:de:06:76:28:4a:
         4f:39:84:9a:21:8c:7d:08:63:bd:ff:89:78:c4:34:20:5e:55:
         15:78:b7:87:b6:14:2d:6b:e3:c5:12:74:5d:e0:b0:43:17:43:
         79:2e:ec:40:87:88:d0:14:5c:c0:a2:d8:3a:b4:8b:00:49:8e:
         97:62:0b:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86v5R0kR5I6ubZm+g9fzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjI4ZTM5ZjQ3MWFkZGM3NWU3MWEzOTFiODJkZDkyNWM3
ZjA4MWQwHhcNMjUwNDEzMDcwMTA1WhcNMjUwNDE0MDcwMTA1WjAzMTEwLwYDVQQD
EygzNmIyMDI3ZjZmODQ4N2E0OTNkNGFiZTdiMGFiMmI3YWRiOTBjMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e2WgIw9dm0fmu3mzvjuheOYyL8C
hUK83vEY3NWLhtM5J9GWFA5RRHy+j/3fKK9iJ+8TFEoVRot+cbf6+wZKNlAjhF4E
WF/hl1POMBa8X5/czTdghTZGoZybyf7ENhmV+aftKYZSy1599ZZk3IZrAyo98Xnh
+ooIHDRmSMePU8esvmUOqIn+l0DtGIr2a2qbTtYb8oXJdlR63k4mxcckeqiqFIhb
FP+/T3KQPvm4lWMimHx5cWDT0+46ioC2FfD0nR0YV527FptgnDOoZUN+3aOeVH8T
DTP9bVMPWEH2a2tDeRhmPibQQ3pyINRq8mwSu6G5b2Kjh3bUzlOzuA10QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDayAn9vhIekk9Sr57CrK3rbkMJLMB8GA1UdIwQY
MBaAFKFijjn0ca3cdecaORuC3ZJcfwgdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zODllZDItMWI4Mi00NWM5LWE3MGEt
MDI1YTBlNmYwNWFlLzEvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zODllZDItMWI4Mi00NWM5LWE3MGEtMDI1YTBlNmYwNWFl
LzEvb1dLT09mUnhyZHgxNXhvNUc0TGRrbHhfQ0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGZouOMg
bzFaAPEx4jR4K97jSjhVjpFYPzxYnmYwuRq0AOy81vypENajDb7/mMtSQcGfxTBV
VUJBeqcc0IcPdWyGuq1wTNUeD/6IiMkQ73m3a8hwZ9NqdnEcsT/zeGCvgoQZGBer
LEiJao8oRnob+MiKdU3T475o2Uq3kwWBkOuHXRf5CKDlLX3MZS9LZLwFu5jbDb3x
gY2n7ZHoQdiFyEMwdoYrTPxmyfkQQ+AnJHqHvNLWjX1e23S/PwSWeBmeht4GdihK
TzmEmiGMfQhjvf+JeMQ0IF5VFXi3h7YULWvjxRJ0XeCwQxdDeS7sQIeI0BRcwKLY
OrSLAEmOl2ILkA==
-----END CERTIFICATE-----