Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File:                     oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier:          334ls3FiW0fZ4hqyik3fhCJfFx43xzCr+iYq/gfe1Ig=
Subject key identifier:   32:2A:CC:98:4E:E3:06:50:2F:9E:7B:58:BA:94:3E:B2:0E:E4:78:FC
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer:       /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial:       01962FAB8DDF2364E8457E6FB5F34FF43FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number:          03B3
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=)
                          2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: GpFfQC6Q7Xz90zX7Yp2QWAdGUgri+/fBz00cipjpmsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8d:df:23:64:e8:45:7e:6f:b5:f3:4f:f4:3f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=322acc984ee306502f9e7b58ba943eb20ee478fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:92:a1:18:d7:98:13:04:16:f9:33:cd:1e:
                    79:6b:1d:30:1f:81:5b:97:52:70:0f:bc:bb:6c:87:
                    0a:37:c3:36:97:a7:52:cd:65:19:3a:36:e8:b5:0e:
                    0d:d4:55:8d:e5:c1:92:dc:b3:6b:27:0a:ae:ff:ad:
                    4f:60:4e:49:94:f8:e0:b0:3e:a8:f6:c3:09:2a:54:
                    e0:6b:a9:c4:39:e7:61:43:87:73:e6:51:b7:1c:ce:
                    b9:ef:ed:f4:ed:ef:75:63:f0:cf:79:80:59:4b:1e:
                    03:db:26:db:ac:03:4e:89:09:9c:56:26:5e:76:02:
                    ca:b0:2d:5c:3d:44:8a:00:2e:f4:04:53:be:40:3a:
                    f2:f7:d7:d1:7f:ae:1a:86:58:e3:3c:0a:67:11:98:
                    3e:fe:eb:f2:43:1b:bc:77:c0:4b:30:7c:bc:6f:3d:
                    ee:e8:45:6c:b6:8f:b1:4d:36:e2:bd:6a:dc:e3:dc:
                    eb:8f:db:fd:84:5b:45:d9:69:99:d5:bf:b1:cd:14:
                    54:b9:a3:f1:9f:b6:1e:36:ff:39:b3:57:87:bb:90:
                    65:67:90:dc:14:a0:f0:d5:95:86:eb:38:bd:b3:b9:
                    8f:80:17:fe:51:3b:ff:b6:08:38:79:34:c1:1c:96:
                    f7:60:c2:f5:3d:19:72:86:d6:e8:38:09:ca:14:0e:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2A:CC:98:4E:E3:06:50:2F:9E:7B:58:BA:94:3E:B2:0E:E4:78:FC
            X509v3 Authority Key Identifier:
                keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6b:15:a5:31:68:8f:08:38:09:84:03:70:13:ed:67:ad:27:
         ab:6d:13:d5:9a:24:ba:f5:26:0e:3d:c6:cc:d6:d4:16:b0:39:
         c8:46:0a:74:e1:12:ce:8a:e3:63:a2:2a:39:fd:9b:79:b8:3d:
         c8:3c:f6:dc:c3:9c:02:74:a0:21:83:73:47:ce:f2:f8:43:99:
         ee:2d:0c:be:d6:83:95:a6:8f:c4:be:51:09:bf:83:ac:bf:3a:
         7e:68:d2:8b:93:01:6a:ae:5e:4f:93:78:4d:cf:27:38:e0:0e:
         2d:e8:fd:5b:60:fa:91:56:78:c5:ec:1c:20:94:bb:98:6a:01:
         6e:09:90:48:29:e8:ed:8b:40:2c:0d:80:5b:67:37:00:3a:b3:
         c3:f7:d5:d1:23:a3:44:5a:81:7e:15:7b:66:02:16:95:0d:9b:
         89:02:8d:98:9c:6a:4c:83:e0:6c:44:58:4c:98:15:60:3b:8b:
         66:ee:e9:cd:96:df:d9:4c:3a:35:d8:52:57:96:57:21:b6:66:
         c1:20:19:d6:cb:a2:b2:00:41:99:71:2e:a0:7f:9c:d2:4a:aa:
         6d:ea:70:53:09:5e:7f:aa:d8:0c:50:04:e2:b7:9b:11:7e:54:
         45:a3:3a:6f:47:00:b6:9e:fd:8a:8d:a9:ac:33:40:fe:b5:aa:
         49:f1:3d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq43fI2ToRX5vtfNP9D/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMmIxZjRkMGFiNDM4MzZiMjcxNTM5MDgyOGQ5MDc3MmNj
OWQ4ZGEwHhcNMjUwNDEzMTUwMTM0WhcNMjUwNDE0MTUwMTM0WjAzMTEwLwYDVQQD
EygzMjJhY2M5ODRlZTMwNjUwMmY5ZTdiNThiYTk0M2ViMjBlZTQ3OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJuSoRjXmBMEFvkzzR55ax0wH4Fb
l1JwD7y7bIcKN8M2l6dSzWUZOjbotQ4N1FWN5cGS3LNrJwqu/61PYE5JlPjgsD6o
9sMJKlTga6nEOedhQ4dz5lG3HM657+307e91Y/DPeYBZSx4D2ybbrANOiQmcViZe
dgLKsC1cPUSKAC70BFO+QDry99fRf64ahljjPApnEZg+/uvyQxu8d8BLMHy8bz3u
6EVsto+xTTbivWrc49zrj9v9hFtF2WmZ1b+xzRRUuaPxn7YeNv85s1eHu5BlZ5Dc
FKDw1ZWG6zi9s7mPgBf+UTv/tgg4eTTBHJb3YML1PRlyhtboOAnKFA74TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIqzJhO4wZQL557WLqUPrIO5Hj8MB8GA1UdIwQY
MBaAFKIrH00KtDg2snFTkIKNkHcsydjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUt
NGY0MzE5NWQxOTZmLzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZWY0MDMtOWVmZi00MDQ4LTg3MmUtNGY0MzE5NWQxOTZm
LzEvb2lzZlRRcTBPRGF5Y1ZPUWdvMlFkeXpKMk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2sVpTFo
jwg4CYQDcBPtZ60nq20T1ZokuvUmDj3GzNbUFrA5yEYKdOESzorjY6IqOf2bebg9
yDz23MOcAnSgIYNzR87y+EOZ7i0MvtaDlaaPxL5RCb+DrL86fmjSi5MBaq5eT5N4
Tc8nOOAOLej9W2D6kVZ4xewcIJS7mGoBbgmQSCno7YtALA2AW2c3ADqzw/fV0SOj
RFqBfhV7ZgIWlQ2biQKNmJxqTIPgbERYTJgVYDuLZu7pzZbf2Uw6NdhSV5ZXIbZm
wSAZ1suisgBBmXEuoH+c0kqqbepwUwlef6rYDFAE4rebEX5URaM6b0cAtp79io2p
rDNA/rWqSfE9Cw==
-----END CERTIFICATE-----