Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File:                     OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier:          pgfSP0+onN/JRjbijaizcn06rGcXKoAkv30wwrp+PVo=
Subject key identifier:   68:53:D4:5D:EE:BF:A3:E8:41:FB:C5:CF:44:3A:9E:BB:B2:4A:C0:8B
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer:       /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial:       01962FAB58D4DD14B34A66E9CEC904B9EF24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number:          02AE
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: f82cIQoGK/kGRkz8mUuJ+JyX4+5cDW/RVRMjntVjMNA=)
                          2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:58:d4:dd:14:b3:4a:66:e9:ce:c9:04:b9:ef:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=6853d45deebfa3e841fbc5cf443a9ebbb24ac08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:d0:1d:c2:75:58:ce:b5:68:59:c5:ba:1d:
                    29:eb:3a:e3:4d:94:bb:a7:62:73:2f:4b:b8:d1:78:
                    02:b6:61:8b:ac:32:67:8a:a9:90:72:b9:b1:9f:d2:
                    df:6b:5e:59:98:7f:8d:06:32:38:da:5c:ee:bc:7a:
                    fc:11:3d:c1:c9:61:79:d6:72:01:e7:84:0a:26:1b:
                    9d:d6:aa:72:a0:e4:36:45:8f:78:5f:77:ab:0a:ce:
                    bc:b1:85:fb:28:90:77:3a:69:a1:b8:5b:ad:c5:35:
                    db:24:a3:fb:db:35:a9:69:0b:51:8d:a5:6a:c8:ff:
                    4b:6d:f5:c9:4e:50:a6:f6:fa:0e:db:af:d7:35:c9:
                    45:ec:ec:05:fb:7d:f6:2e:d3:0a:c7:05:09:c6:95:
                    29:d5:23:a4:08:bf:6a:99:c8:72:35:e5:70:fb:1f:
                    8f:90:49:ad:5b:53:2b:68:c4:85:d7:05:04:e5:12:
                    f3:77:04:50:d6:5e:0c:df:55:f4:2d:b7:2c:2c:94:
                    fe:5f:dd:43:50:e4:56:5a:ff:ea:af:82:dc:b9:e6:
                    bb:34:a4:e2:87:a9:0e:46:fc:79:d5:94:bf:e6:1a:
                    37:4f:aa:f7:22:fe:40:b3:f2:87:d3:3f:d2:c5:61:
                    c0:af:42:35:e8:dc:09:1d:4d:8a:c6:fc:02:9f:b1:
                    8e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:53:D4:5D:EE:BF:A3:E8:41:FB:C5:CF:44:3A:9E:BB:B2:4A:C0:8B
            X509v3 Authority Key Identifier:
                keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c2:99:dd:48:fa:a6:55:e7:19:8b:47:9d:95:8b:d7:60:e9:
         7f:70:67:bd:61:1c:a2:75:ee:b0:e5:73:2e:db:eb:a4:8d:fe:
         6b:27:45:e2:1c:38:cb:ea:2b:47:95:cb:95:39:a5:12:c2:ea:
         ed:bb:79:55:b7:3d:f2:4d:5d:b5:ef:ae:41:04:9c:83:18:a7:
         5d:f7:09:50:e6:eb:e8:0d:67:0d:09:2a:d1:63:3e:35:f6:14:
         87:bf:2f:d6:e1:67:4e:de:1b:7e:75:16:7a:3c:53:f9:71:d5:
         06:05:d4:a7:ba:a8:f3:bd:f4:1d:86:a6:bf:cf:79:f2:07:b7:
         2a:b6:ff:c3:38:87:4a:9f:a4:e7:d8:41:1b:dd:d2:18:05:ec:
         6f:63:27:92:f5:0b:5e:3f:3d:cd:9d:f7:6f:e9:c6:4c:30:4c:
         93:d5:18:c8:54:4f:73:79:94:ad:05:4c:39:59:7e:62:db:34:
         71:bf:83:6a:e2:b4:30:a2:f6:c7:a8:ff:d3:00:8e:39:40:85:
         3e:8c:67:e8:59:dd:96:29:ef:87:45:30:6a:08:88:4d:95:39:
         4d:f3:20:75:13:51:90:41:b9:1a:d5:62:e3:c2:5d:a2:b0:ea:
         c2:ab:10:f2:05:4a:63:14:51:6c:0e:5d:7e:45:84:f2:1e:74:
         f4:18:ab:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1jU3RSzSmbpzskEue8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YzUxYjkxMzFmNmUzYzI1OWFmOWRkMGFkYmY1NGY3MWEy
NDk4ZWYwHhcNMjUwNDEzMTUwMTIwWhcNMjUwNDE0MTUwMTIwWjAzMTEwLwYDVQQD
Eyg2ODUzZDQ1ZGVlYmZhM2U4NDFmYmM1Y2Y0NDNhOWViYmIyNGFjMDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4zQHcJ1WM61aFnFuh0p6zrjTZS7
p2JzL0u40XgCtmGLrDJniqmQcrmxn9Lfa15ZmH+NBjI42lzuvHr8ET3ByWF51nIB
54QKJhud1qpyoOQ2RY94X3erCs68sYX7KJB3OmmhuFutxTXbJKP72zWpaQtRjaVq
yP9LbfXJTlCm9voO26/XNclF7OwF+332LtMKxwUJxpUp1SOkCL9qmchyNeVw+x+P
kEmtW1MraMSF1wUE5RLzdwRQ1l4M31X0LbcsLJT+X91DUORWWv/qr4Lcuea7NKTi
h6kORvx51ZS/5ho3T6r3Iv5As/KH0z/SxWHAr0I16NwJHU2KxvwCn7GOZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhT1F3uv6PoQfvFz0Q6nruySsCLMB8GA1UdIwQY
MBaAFDnFG5Ex9uPCWa+d0K2/VPcaJJjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAt
NzMwYzRkNDcyYThhLzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAtNzMwYzRkNDcyYThh
LzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8KZ3Uj6
plXnGYtHnZWL12Dpf3BnvWEconXusOVzLtvrpI3+aydF4hw4y+orR5XLlTmlEsLq
7bt5Vbc98k1dte+uQQScgxinXfcJUObr6A1nDQkq0WM+NfYUh78v1uFnTt4bfnUW
ejxT+XHVBgXUp7qo8730HYamv8958ge3Krb/wziHSp+k59hBG93SGAXsb2MnkvUL
Xj89zZ33b+nGTDBMk9UYyFRPc3mUrQVMOVl+Yts0cb+DauK0MKL2x6j/0wCOOUCF
Poxn6Fndlinvh0UwagiITZU5TfMgdRNRkEG5GtVi48JdorDqwqsQ8gVKYxRRbA5d
fkWE8h509Bir9A==
-----END CERTIFICATE-----