Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
File:                     nlaYDUienFO8gp8-jWPTg_ONDeM.mft (raw, json)
Hash identifier:          Ez3mCLVr+RFfdUtwMbJgMOykFSsiEDBLSGIGlT2kUzs=
Subject key identifier:   C2:61:A0:09:CB:43:84:1D:07:84:A3:6C:9D:EA:EF:95:05:78:34:78
Authority key identifier: 9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3
Certificate issuer:       /CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
Certificate serial:       01962FAB7EB9ADA0976B697BF951C54191C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft
Manifest number:          1447
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: 5LKnYfYeN0M1IwSjOCfaAZydc0E.roa (hash: R6rY8mHoFXXwwf30CLdp4brLxdq1SUoGP6TPbyDWGN8=)
                          2: nlaYDUienFO8gp8-jWPTg_ONDeM.crl (hash: A9K7oMRYxN3sYm/S33rRb24Rm26GX5YDd05oyYU6Tz8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7e:b9:ad:a0:97:6b:69:7b:f9:51:c5:41:91:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e56980d489e9c53bc829f3e8d63d383f38d0de3
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=c261a009cb43841d0784a36c9deaef9505783478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:6a:9f:e3:ab:b1:12:85:4f:e0:84:c2:bc:
                    76:5b:e8:4c:35:df:af:9a:94:b5:12:5d:be:c4:bd:
                    73:db:09:ee:0d:9e:84:4c:6d:63:41:3c:9a:50:fe:
                    88:10:2d:0a:c7:55:32:80:00:3d:67:2a:e3:8c:62:
                    d8:5e:68:1a:1c:24:a8:53:29:cd:e3:1c:9e:51:93:
                    31:07:06:63:42:14:83:af:d0:7b:f7:97:08:4e:1c:
                    a3:9d:6e:30:ab:ff:0a:e2:6a:bd:89:f4:29:c9:78:
                    7c:15:9c:d9:c2:23:1d:48:58:04:be:a2:01:e1:08:
                    38:c6:93:d2:c9:e8:5a:d2:57:77:a9:c6:d0:07:05:
                    c4:14:5d:65:b5:46:86:99:55:ec:4b:4a:85:57:60:
                    62:d1:c6:be:bf:36:da:fa:56:46:4c:0e:8e:ba:d8:
                    d1:93:b5:e3:f5:05:b0:00:89:bf:15:67:c1:e5:66:
                    bf:98:92:1c:b0:21:eb:a9:64:a8:da:c5:a1:75:35:
                    74:2e:60:6f:45:ec:2a:1c:4c:b8:60:93:53:60:7f:
                    c3:11:96:36:f4:39:1d:d6:7d:1f:1d:1c:ec:8b:88:
                    64:07:48:96:fc:3a:ab:f3:d5:86:ca:af:65:25:36:
                    03:63:b1:0e:a1:e7:b8:26:3c:e1:f2:55:b6:55:36:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:61:A0:09:CB:43:84:1D:07:84:A3:6C:9D:EA:EF:95:05:78:34:78
            X509v3 Authority Key Identifier:
                keyid:9E:56:98:0D:48:9E:9C:53:BC:82:9F:3E:8D:63:D3:83:F3:8D:0D:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlaYDUienFO8gp8-jWPTg_ONDeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a30360-0329-4cf1-a37f-db7498dade0c/1/nlaYDUienFO8gp8-jWPTg_ONDeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:88:cc:40:45:89:82:03:fc:6e:a0:e6:35:e8:ce:71:e1:
         f6:26:90:90:b8:24:d2:56:15:5b:84:81:7a:39:09:05:56:8c:
         35:d8:86:c4:82:ce:77:12:58:ee:82:60:f6:f4:9b:f9:99:f7:
         de:59:aa:19:1e:b1:c4:15:d4:01:44:c0:da:ae:05:e7:4a:b2:
         b8:b6:b5:35:30:05:00:b8:43:c4:df:c9:70:88:fa:2f:c4:db:
         22:d8:c2:af:af:66:d0:06:07:2d:79:b6:3d:ff:b3:5d:e3:ff:
         eb:02:39:41:11:14:0f:62:04:be:9d:98:72:36:26:40:17:7f:
         20:4a:29:c5:d7:10:a7:e7:94:e1:e2:27:ac:a0:db:95:6d:32:
         7d:d8:1b:25:8a:43:38:b5:bf:25:28:04:8e:fe:38:de:53:e0:
         b0:d7:05:a5:78:46:f5:9b:62:d1:f9:e1:1f:3b:44:88:f0:6b:
         a2:a1:24:6e:64:9b:54:c6:2f:59:52:d7:32:f6:87:20:f1:5e:
         7a:00:0c:0b:45:16:4f:8f:75:45:8d:b2:d2:92:b8:c3:6f:31:
         15:16:81:82:c0:d4:a3:e7:25:39:47:df:69:1d:34:8b:a3:54:
         71:78:9b:3f:26:52:c9:c4:03:29:3d:15:3c:3a:54:55:2e:58:
         ee:84:a9:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq365raCXa2l7+VHFQZHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTY5ODBkNDg5ZTljNTNiYzgyOWYzZThkNjNkMzgzZjM4
ZDBkZTMwHhcNMjUwNDEzMTUwMTMwWhcNMjUwNDE0MTUwMTMwWjAzMTEwLwYDVQQD
EyhjMjYxYTAwOWNiNDM4NDFkMDc4NGEzNmM5ZGVhZWY5NTA1NzgzNDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D1qn+OrsRKFT+CEwrx2W+hMNd+v
mpS1El2+xL1z2wnuDZ6ETG1jQTyaUP6IEC0Kx1UygAA9ZyrjjGLYXmgaHCSoUynN
4xyeUZMxBwZjQhSDr9B795cIThyjnW4wq/8K4mq9ifQpyXh8FZzZwiMdSFgEvqIB
4Qg4xpPSyeha0ld3qcbQBwXEFF1ltUaGmVXsS0qFV2Bi0ca+vzba+lZGTA6OutjR
k7Xj9QWwAIm/FWfB5Wa/mJIcsCHrqWSo2sWhdTV0LmBvRewqHEy4YJNTYH/DEZY2
9Dkd1n0fHRzsi4hkB0iW/Dqr89WGyq9lJTYDY7EOoee4Jjzh8lW2VTbNSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJhoAnLQ4QdB4SjbJ3q75UFeDR4MB8GA1UdIwQY
MBaAFJ5WmA1InpxTvIKfPo1j04PzjQ3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxhWURVaWVuRk84Z3A4LWpXUFRnX09ORGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMzAzNjAtMDMyOS00Y2YxLWEzN2Yt
ZGI3NDk4ZGFkZTBjLzEvbmxhWURVaWVuRk84Z3A4LWpXUFRnX09ORGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hMzAzNjAtMDMyOS00Y2YxLWEzN2YtZGI3NDk4ZGFkZTBj
LzEvbmxhWURVaWVuRk84Z3A4LWpXUFRnX09ORGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+6IzEBF
iYID/G6g5jXoznHh9iaQkLgk0lYVW4SBejkJBVaMNdiGxILOdxJY7oJg9vSb+Zn3
3lmqGR6xxBXUAUTA2q4F50qyuLa1NTAFALhDxN/JcIj6L8TbItjCr69m0AYHLXm2
Pf+zXeP/6wI5QREUD2IEvp2YcjYmQBd/IEopxdcQp+eU4eInrKDblW0yfdgbJYpD
OLW/JSgEjv443lPgsNcFpXhG9Zti0fnhHztEiPBroqEkbmSbVMYvWVLXMvaHIPFe
egAMC0UWT491RY2y0pK4w28xFRaBgsDUo+clOUffaR00i6NUcXibPyZSycQDKT0V
PDpUVS5Y7oSp6Q==
-----END CERTIFICATE-----