Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft
File:                     OxO_giWSvRtUt3zCwcxCsozPFmk.mft (raw, json)
Hash identifier:          pz4qD7g1N0zCZIpyC1byoNVbbI8Y4sy0Z0exmVzbJA4=
Subject key identifier:   98:B2:D5:85:9A:EA:AE:C5:BA:1E:E8:83:7A:3B:A5:57:7E:8C:21:39
Authority key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Certificate issuer:       /CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Certificate serial:       018F4B6BF00F36CEA9EDC45CEE8956A433CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft
Manifest number:          0C6F
Signing time:             Mon 06 May 2024 01:01:55 +0000
Manifest this update:     Mon 06 May 2024 01:01:55 +0000
Manifest next update:     Tue 07 May 2024 01:01:55 +0000
Files and hashes:         1: 4eleNmX005n7wlXVlehMTBHp9tw.roa (hash: 5tRtBlf42R6PXZYfZGr+HDlBaIQdiVh4BjlyfhjnVHE=)
                          2: GOIB72ezfSlZwKpvCUux5Lmo21I.roa (hash: 39JJa0QSA9d/0vjDQmceQV/VLaieey+iN0iJ2bE/SBc=)
                          3: OxO_giWSvRtUt3zCwcxCsozPFmk.crl (hash: FAuxj1ey60mMbWEI2kzZ/tycixQKvEJxI9jzMyY8Gxg=)
                          4: dWOVBeC9rYrgiMsEUWG48qX1Wkw.roa (hash: E/5YJ+LBiC5osugGpetht8RXbDCTNLmcabUCRGWp2Ec=)
                          5: gNpvThMgL6xEAvEpyTKcV-Ozrh4.roa (hash: jjcLUmUpKFM1bHOItpI9x815JZiM1yE8LjuR0Ezk8Fc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6b:f0:0f:36:ce:a9:ed:c4:5c:ee:89:56:a4:33:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
        Validity
            Not Before: May  6 01:01:55 2024 GMT
            Not After : May  7 01:01:55 2024 GMT
        Subject: CN=98b2d5859aeaaec5ba1ee8837a3ba5577e8c2139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5b:78:0c:d6:42:f5:92:6f:73:e9:cd:3e:0b:
                    18:ed:6c:52:01:88:32:93:6f:29:6f:21:a2:53:d4:
                    ed:1f:10:c5:ee:f0:9f:d9:3f:0d:39:fe:c1:27:d0:
                    5b:07:54:a3:60:1c:71:e1:eb:52:14:be:bd:6f:73:
                    c3:6d:9d:42:43:51:f0:72:86:06:79:60:02:c5:ba:
                    5d:03:97:2d:be:44:fc:23:f5:a5:1d:d9:32:eb:70:
                    9f:f8:1b:0d:9b:97:fb:f0:b1:bd:25:5e:a1:e2:d9:
                    35:8b:ac:c0:56:f7:99:48:42:54:c1:29:d3:a5:20:
                    e3:fa:25:6e:65:03:e5:96:d0:8e:15:07:80:ea:bc:
                    6b:87:88:25:2a:85:5b:72:55:1e:20:97:39:20:fc:
                    3b:6c:95:0e:61:e2:f1:30:d0:9c:b7:54:4a:f1:a4:
                    cc:32:ed:1f:4c:12:eb:51:c8:84:e9:8e:35:03:a3:
                    95:82:4d:99:16:aa:25:9d:ac:12:10:83:df:ba:13:
                    5d:b2:32:3b:b7:e7:2f:2b:23:1e:13:b6:8c:4a:59:
                    24:0f:69:90:86:43:42:d7:c2:40:d2:02:1b:4e:01:
                    07:d3:05:65:85:86:1a:37:b8:20:30:67:bc:14:e1:
                    f9:3f:77:3c:c7:ad:d4:09:62:1f:0b:4b:cf:71:e8:
                    8a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B2:D5:85:9A:EA:AE:C5:BA:1E:E8:83:7A:3B:A5:57:7E:8C:21:39
            X509v3 Authority Key Identifier:
                keyid:3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:28:3c:4a:d5:81:6a:84:9f:7e:23:03:2b:c9:af:f7:d4:84:
         25:bc:d0:f4:3f:18:14:12:03:c4:77:0b:1c:c8:55:48:fb:7d:
         12:e3:9e:05:b7:6d:90:e4:a0:c6:81:47:60:e0:bd:ef:3a:c3:
         50:8d:bc:47:a6:fa:7e:c5:bd:bf:db:a4:91:8e:e3:31:db:34:
         50:a9:e0:89:89:1f:09:4d:53:75:f6:70:b0:57:13:59:3c:61:
         93:4b:74:98:64:c4:52:bf:47:f1:be:ac:be:3e:44:99:90:d8:
         69:a3:36:c5:4f:f5:d5:97:04:57:24:64:c9:1a:6f:8a:3f:94:
         de:82:03:56:20:00:b6:54:cc:6f:c6:a5:7f:9f:b1:84:67:27:
         2e:54:80:2e:01:e1:1e:20:da:5c:23:80:5e:60:b8:f2:79:8e:
         a9:71:c5:75:bd:5d:e7:e5:a5:3f:08:02:0f:ee:c4:07:df:f3:
         cd:f9:9c:07:24:b9:0c:34:9a:e5:5a:5c:83:66:ab:8b:de:2c:
         8d:3b:40:bb:60:8d:53:5e:9b:48:e9:02:ac:5b:71:70:a6:65:
         39:94:fc:e5:51:27:1c:67:ee:4d:43:0b:78:f1:11:38:e7:4c:
         9a:49:80:34:41:04:79:f8:0f:5b:1d:d9:3b:13:57:50:28:c6:
         bc:ee:b6:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9La/APNs6p7cRc7olWpDPLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMTNiZjgyMjU5MmJkMWI1NGI3N2NjMmMxY2M0MmIyOGNj
ZjE2NjkwHhcNMjQwNTA2MDEwMTU1WhcNMjQwNTA3MDEwMTU1WjAzMTEwLwYDVQQD
Eyg5OGIyZDU4NTlhZWFhZWM1YmExZWU4ODM3YTNiYTU1NzdlOGMyMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFt4DNZC9ZJvc+nNPgsY7WxSAYgy
k28pbyGiU9TtHxDF7vCf2T8NOf7BJ9BbB1SjYBxx4etSFL69b3PDbZ1CQ1HwcoYG
eWACxbpdA5ctvkT8I/WlHdky63Cf+BsNm5f78LG9JV6h4tk1i6zAVveZSEJUwSnT
pSDj+iVuZQPlltCOFQeA6rxrh4glKoVbclUeIJc5IPw7bJUOYeLxMNCct1RK8aTM
Mu0fTBLrUciE6Y41A6OVgk2ZFqolnawSEIPfuhNdsjI7t+cvKyMeE7aMSlkkD2mQ
hkNC18JA0gIbTgEH0wVlhYYaN7ggMGe8FOH5P3c8x63UCWIfC0vPceiKfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiy1YWa6q7Fuh7og3o7pVd+jCE5MB8GA1UdIwQY
MBaAFDsTv4Ilkr0bVLd8wsHMQrKMzxZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3hPX2dpV1N2UnRVdDN6Q3djeENzb3pQRm1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hNjQwNjEtNTJjOS00M2RjLTllZTAt
NWFmZGUyOTRkMWMyLzEvT3hPX2dpV1N2UnRVdDN6Q3djeENzb3pQRm1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hNjQwNjEtNTJjOS00M2RjLTllZTAtNWFmZGUyOTRkMWMy
LzEvT3hPX2dpV1N2UnRVdDN6Q3djeENzb3pQRm1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSg8StWB
aoSffiMDK8mv99SEJbzQ9D8YFBIDxHcLHMhVSPt9EuOeBbdtkOSgxoFHYOC97zrD
UI28R6b6fsW9v9ukkY7jMds0UKngiYkfCU1TdfZwsFcTWTxhk0t0mGTEUr9H8b6s
vj5EmZDYaaM2xU/11ZcEVyRkyRpvij+U3oIDViAAtlTMb8alf5+xhGcnLlSALgHh
HiDaXCOAXmC48nmOqXHFdb1d5+WlPwgCD+7EB9/zzfmcByS5DDSa5Vpcg2ari94s
jTtAu2CNU16bSOkCrFtxcKZlOZT85VEnHGfuTUMLePEROOdMmkmANEEEefgPWx3Z
OxNXUCjGvO62vA==
-----END CERTIFICATE-----