Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File:                     oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier:          OUN7fQY1YEEcyHr++qV5KBu30INFUKPdbG/kBHUExo8=
Subject key identifier:   EF:F3:F1:4E:89:A5:25:93:B9:6D:E6:9F:F4:06:45:AD:26:84:9F:FA
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer:       /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial:       0194BC3C60367EF1CEB49C076DC299D7DA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number:          0263
Signing time:             Fri 31 Jan 2025 12:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:00 +0000
Files and hashes:         1: Uua6yM2rrGnji--Kv2Pn_xDUCUQ.roa (hash: kXckJ9Wq2st2kAYy1iDEHvhVUEJf4YmXaasq7C+0rWM=)
                          2: WpAem0y3mJRbP65lGL1BbYc7ewY.roa (hash: 9FtB6GE1KbOq2c/Ao/RtTSsyLPIeyA8GKr7sC11YD4c=)
                          3: ktIBl0vO2PiY2N18cJ-d_fSxe4Q.roa (hash: PaoiyedZ99+u6zVUTqQy6HmR360bMO4FcWgPO5UfmIs=)
                          4: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: 4Y/JmPsfanc29BOGphFnplNAErKL5xQw5IywEUZxPkA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:60:36:7e:f1:ce:b4:9c:07:6d:c2:99:d7:da:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
        Validity
            Not Before: Jan 31 12:01:00 2025 GMT
            Not After : Feb  1 12:01:00 2025 GMT
        Subject: CN=eff3f14e89a52593b96de69ff40645ad26849ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:40:78:fd:40:f0:8b:6d:7c:33:18:e9:81:
                    46:9d:5b:a0:d5:fa:8f:27:60:aa:76:2c:59:26:26:
                    16:e9:f3:82:50:04:14:00:90:5f:b8:78:6d:f7:0d:
                    b1:2e:e2:19:a3:4c:59:b2:f8:40:76:5a:bb:31:f6:
                    27:0b:87:76:cd:07:35:3c:9d:22:92:ca:85:d5:cd:
                    58:d4:cb:85:31:c1:da:af:42:82:c5:0c:b5:bb:7e:
                    df:55:c9:b3:8d:60:40:ee:79:d7:ce:65:24:70:4b:
                    ca:f0:73:80:68:59:dc:5d:e8:50:94:e9:d4:3e:e1:
                    76:2d:92:68:b8:4a:75:19:41:bf:dc:f1:2d:80:12:
                    25:4a:6f:89:e7:8a:41:63:a1:a2:4c:02:de:8a:3c:
                    d0:ad:29:eb:3b:1d:87:1f:4d:57:96:b2:7d:cb:8e:
                    ac:00:14:3b:7f:a2:a1:44:aa:fb:b8:98:8a:19:6d:
                    65:19:da:c0:58:25:4a:02:48:da:c8:1a:33:8d:9b:
                    12:c0:fc:29:3a:b9:5a:10:11:2e:a1:bf:96:46:7d:
                    07:05:5b:10:62:80:76:6d:d2:b9:55:b4:75:6d:88:
                    9d:3e:8e:ec:64:b2:c7:f3:2a:53:a5:2a:43:9c:2b:
                    28:26:1c:38:bb:6a:5c:d5:34:38:54:b0:37:2f:f8:
                    b4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F3:F1:4E:89:A5:25:93:B9:6D:E6:9F:F4:06:45:AD:26:84:9F:FA
            X509v3 Authority Key Identifier:
                keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b8:58:8c:2f:d3:00:45:56:74:89:4b:5b:84:74:57:1b:82:
         8c:e4:ba:eb:1d:81:76:b2:1a:5f:03:01:e9:d2:e8:d7:29:74:
         37:69:58:c2:12:de:10:bb:97:7c:44:7d:bc:b4:06:44:44:a5:
         1a:49:fe:bb:de:2a:34:83:6e:9f:f7:f0:0c:aa:1e:e4:29:96:
         03:e1:49:6c:62:0f:4e:82:5e:ad:9a:59:94:1f:0a:81:a3:f9:
         8a:74:38:84:0f:a5:e9:e4:97:6b:c7:ea:4b:c8:71:db:0c:20:
         78:8c:12:ef:f5:dd:b4:ed:4e:89:c6:9c:70:d4:ed:91:e6:b0:
         be:04:d2:d1:a3:2d:67:ce:32:92:45:f5:be:94:b4:32:7e:d9:
         a3:c6:58:e2:e2:62:61:18:ee:19:cc:02:ee:c5:cf:c4:09:b6:
         28:82:b5:b3:12:b1:d3:82:f0:57:65:1a:e9:9c:3e:f3:db:3c:
         c4:14:f6:6f:dd:7c:c5:73:11:6d:d3:3b:53:55:49:f3:3a:47:
         f9:09:16:76:7a:62:3c:62:8e:d0:8f:20:92:31:3c:60:fa:7b:
         d7:e5:37:93:7c:62:a9:c2:41:94:22:40:a8:0f:a0:de:0b:49:
         1f:e4:3e:86:22:b0:20:1e:c1:b5:be:19:8d:3d:f4:cd:8f:c3:
         76:8b:2d:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGA2fvHOtJwHbcKZ19qKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyY2EzN2RlZDFiNzBjODFiNzRhNDMwZjliNGQ3YWNjNjI4
MDVlZDgwHhcNMjUwMTMxMTIwMTAwWhcNMjUwMjAxMTIwMTAwWjAzMTEwLwYDVQQD
EyhlZmYzZjE0ZTg5YTUyNTkzYjk2ZGU2OWZmNDA2NDVhZDI2ODQ5ZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8lAeP1A8IttfDMY6YFGnVug1fqP
J2CqdixZJiYW6fOCUAQUAJBfuHht9w2xLuIZo0xZsvhAdlq7MfYnC4d2zQc1PJ0i
ksqF1c1Y1MuFMcHar0KCxQy1u37fVcmzjWBA7nnXzmUkcEvK8HOAaFncXehQlOnU
PuF2LZJouEp1GUG/3PEtgBIlSm+J54pBY6GiTALeijzQrSnrOx2HH01XlrJ9y46s
ABQ7f6KhRKr7uJiKGW1lGdrAWCVKAkjayBozjZsSwPwpOrlaEBEuob+WRn0HBVsQ
YoB2bdK5VbR1bYidPo7sZLLH8ypTpSpDnCsoJhw4u2pc1TQ4VLA3L/i0TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/z8U6JpSWTuW3mn/QGRa0mhJ/6MB8GA1UdIwQY
MBaAFKLKN97RtwyBt0pDD5tNesxigF7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMmFjZTctNDhkYi00ZjdkLTkxN2Yt
MzA2MTg5ZDVjMDQ5LzEvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMmFjZTctNDhkYi00ZjdkLTkxN2YtMzA2MTg5ZDVjMDQ5
LzEvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbhYjC/T
AEVWdIlLW4R0VxuCjOS66x2BdrIaXwMB6dLo1yl0N2lYwhLeELuXfER9vLQGRESl
Gkn+u94qNINun/fwDKoe5CmWA+FJbGIPToJerZpZlB8KgaP5inQ4hA+l6eSXa8fq
S8hx2wwgeIwS7/XdtO1OicaccNTtkeawvgTS0aMtZ84ykkX1vpS0Mn7Zo8ZY4uJi
YRjuGcwC7sXPxAm2KIK1sxKx04LwV2Ua6Zw+89s8xBT2b918xXMRbdM7U1VJ8zpH
+QkWdnpiPGKO0I8gkjE8YPp71+U3k3xiqcJBlCJAqA+g3gtJH+Q+hiKwIB7Btb4Z
jT30zY/DdostDQ==
-----END CERTIFICATE-----