Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File:                     NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier:          UNru6kR6UJlF9ydjs7zqu+cYTAXgR1OvYW8BQ+ng74s=
Subject key identifier:   1D:0D:73:C3:B5:D0:AF:F9:71:B4:70:14:F6:02:3D:40:48:24:BC:AC
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer:       /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial:       01962F06C4D3194E26372B18C564E840BEF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number:          0D6C
Signing time:             Sun 13 Apr 2025 12:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:34 +0000
Files and hashes:         1: HFSm_Vu9AzQD1E8IenTIb8aGN8w.roa (hash: 4fQxNDw+xzPlf4g6ZgL9x8rYG7oQVJVTPEy0p3xv3ck=)
                          2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: JDaFxoviwEO0gze1X5xr9d7HNfiy3514pK+svrD+FpA=)
                          3: Yzl-TsBruLbp6clu7Q2IexOaQIA.roa (hash: h8cj0MpyodNclAF4X/OllC8+HNKuBQ3B2EFgEqM9+5A=)
                          4: Z_1dKKg5j_ZVIIzCoIHjWYwlm20.roa (hash: jvis9yjIVYHSkVBmx62d0kYrYZu0QAElVmLUpHW0GZM=)
                          5: fSqRfFQj3Q__dsTUhVMBI1HPSHg.roa (hash: Y+WWgHfgxkTIhIEndSO+xaSkFkDz1wgH6w0m5aWvWfU=)
                          6: pI3W8C1ZxuPusTptKHP1u0YPtbM.roa (hash: CThv60vq5lrTC7BFI5QFq4GFsEIpVjwpFNsuFKoLpYE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c4:d3:19:4e:26:37:2b:18:c5:64:e8:40:be:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
        Validity
            Not Before: Apr 13 12:01:34 2025 GMT
            Not After : Apr 14 12:01:34 2025 GMT
        Subject: CN=1d0d73c3b5d0aff971b47014f6023d404824bcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fc:58:df:35:5d:c7:a2:96:98:53:f8:f6:c4:
                    2c:1a:63:ea:db:2b:f9:0b:6c:c8:4b:d3:2b:6f:b8:
                    4b:af:84:93:6e:55:fc:d1:bb:cd:62:cc:68:57:18:
                    26:1e:05:08:d0:56:1a:b0:07:d1:d9:50:86:49:00:
                    92:9b:10:a5:cb:f8:c3:d6:64:91:5b:9c:da:45:26:
                    cf:98:dd:66:d7:0c:56:8c:39:9c:06:2d:71:5b:26:
                    65:99:f9:64:23:f9:59:37:7b:19:f9:9d:e8:e1:ba:
                    72:8a:13:7b:ee:22:2e:97:ac:2e:28:26:ba:7a:5a:
                    52:57:44:0e:c8:40:fd:63:70:9d:80:fe:9e:cd:28:
                    f1:5b:db:aa:17:3d:d0:4d:4d:38:9a:29:f5:1c:bb:
                    48:0e:bc:38:e4:27:21:65:ee:e1:57:dc:d8:7b:dc:
                    ac:f0:7e:f2:b4:2c:87:b7:8f:13:e0:18:d1:f8:1b:
                    b1:7c:f2:2c:49:86:73:4f:81:88:87:06:81:1f:64:
                    eb:cc:de:8f:c3:9f:b0:95:71:99:94:92:a9:80:0e:
                    d0:43:b6:dc:81:35:53:2b:5a:60:2b:a3:1f:6a:ef:
                    f4:07:83:57:76:17:bc:8d:8d:eb:bd:90:a6:d1:cd:
                    31:f7:45:bb:1e:6e:46:14:72:1c:e3:c4:28:16:65:
                    a4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0D:73:C3:B5:D0:AF:F9:71:B4:70:14:F6:02:3D:40:48:24:BC:AC
            X509v3 Authority Key Identifier:
                keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d5:43:64:f0:fb:5a:1b:c2:47:a3:e1:2a:4a:f5:f0:6d:c0:
         2c:fe:53:e6:0d:f1:3a:fd:e5:0e:df:2a:1b:04:ea:d4:76:2f:
         15:72:18:f0:3f:83:1f:0a:95:d5:d6:bf:ba:a9:b9:97:79:dc:
         6a:df:84:0e:35:22:7f:87:ea:1f:c0:d0:ab:dc:fe:0c:f6:78:
         4e:8f:99:36:2b:9e:97:e8:52:9e:3f:ec:f1:34:f5:05:10:fe:
         b7:fb:0d:83:bb:fe:a6:0c:4c:bb:65:3d:0c:48:81:ad:09:2e:
         44:37:12:eb:4e:0a:44:a4:70:08:a2:16:12:d8:33:04:5d:a9:
         69:e9:d8:c2:86:bc:3b:d2:d3:eb:0d:76:b8:e6:be:23:7d:c6:
         3f:4d:e8:fa:be:88:5f:08:16:de:ba:11:95:d6:a8:c9:94:c9:
         1c:45:b5:e5:7e:00:5b:c5:5e:29:36:6d:7d:df:5a:a6:15:5a:
         8a:ab:79:b7:7e:50:07:cb:3f:04:e8:37:bd:bc:25:2a:d8:2b:
         ea:df:fc:1d:a2:80:b4:01:93:81:9d:62:f8:b3:82:f4:9c:16:
         ec:ae:b4:81:cd:71:98:16:b8:e1:e0:32:61:7b:2a:2f:8a:9d:
         7d:ad:ee:27:b8:0e:22:4d:c1:c0:84:27:d8:27:1b:2c:d3:14:
         67:e6:40:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsTTGU4mNysYxWToQL7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl
YmY5MzQwHhcNMjUwNDEzMTIwMTM0WhcNMjUwNDE0MTIwMTM0WjAzMTEwLwYDVQQD
EygxZDBkNzNjM2I1ZDBhZmY5NzFiNDcwMTRmNjAyM2Q0MDQ4MjRiY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/xY3zVdx6KWmFP49sQsGmPq2yv5
C2zIS9Mrb7hLr4STblX80bvNYsxoVxgmHgUI0FYasAfR2VCGSQCSmxCly/jD1mSR
W5zaRSbPmN1m1wxWjDmcBi1xWyZlmflkI/lZN3sZ+Z3o4bpyihN77iIul6wuKCa6
elpSV0QOyED9Y3CdgP6ezSjxW9uqFz3QTU04min1HLtIDrw45CchZe7hV9zYe9ys
8H7ytCyHt48T4BjR+BuxfPIsSYZzT4GIhwaBH2TrzN6Pw5+wlXGZlJKpgA7QQ7bc
gTVTK1pgK6Mfau/0B4NXdhe8jY3rvZCm0c0x90W7Hm5GFHIc48QoFmWkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0Nc8O10K/5cbRwFPYCPUBIJLysMB8GA1UdIwQY
MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt
YjdjMjY5NmJhZTUwLzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw
LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdVDZPD7
WhvCR6PhKkr18G3ALP5T5g3xOv3lDt8qGwTq1HYvFXIY8D+DHwqV1da/uqm5l3nc
at+EDjUif4fqH8DQq9z+DPZ4To+ZNiuel+hSnj/s8TT1BRD+t/sNg7v+pgxMu2U9
DEiBrQkuRDcS604KRKRwCKIWEtgzBF2paenYwoa8O9LT6w12uOa+I33GP03o+r6I
XwgW3roRldaoyZTJHEW15X4AW8VeKTZtfd9aphVaiqt5t35QB8s/BOg3vbwlKtgr
6t/8HaKAtAGTgZ1i+LOC9JwW7K60gc1xmBa44eAyYXsqL4qdfa3uJ7gOIk3BwIQn
2CcbLNMUZ+ZAgQ==
-----END CERTIFICATE-----