Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
File:                     nPYI_632AAge6SIpjksq6Wr_SOg.mft (raw, json)
Hash identifier:          PrT0eEjGvg8bTOYTp2x3ANQ7R1/fjFN66Rq/Clk/WtE=
Subject key identifier:   1C:A7:F0:E6:B1:3D:D3:56:1D:3A:70:A3:24:A6:4A:19:89:41:13:62
Authority key identifier: 9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8
Certificate issuer:       /CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
Certificate serial:       01962E61A620A71A67C75CDF20E1FF259FDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: ObbHotU_QnvsulgBzQaW4wh0HAk.roa (hash: mbgTfoasS2/JRLVjEdWRajTXVRhnW7d5YvctUH9mztI=)
                          2: nPYI_632AAge6SIpjksq6Wr_SOg.crl (hash: 2LNmPKb61DHhvgeRyCxEZGYfClgL7W1zTTWp47H7YGg=)
                          3: sLdQOZGVUyb44hu-OktavwbL-fA.roa (hash: 61zdCvV2SZ1HoaLvCC14jhWwxqjS5pgyZuPOqRzMG/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a6:20:a7:1a:67:c7:5c:df:20:e1:ff:25:9f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cf608ffadf600081ee922298e4b2ae96aff48e8
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=1ca7f0e6b13dd3561d3a70a324a64a1989411362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:a7:78:47:2b:ca:30:54:bb:3f:66:3f:b6:
                    cb:0f:d9:eb:e7:01:6c:2e:86:0f:cc:c0:a7:6f:df:
                    e3:e5:d5:8c:63:25:9e:ae:95:83:62:e9:7b:90:f9:
                    a2:13:96:9e:e7:2e:0f:52:6f:b7:86:51:b3:26:d7:
                    97:50:ce:0f:a3:8e:05:3a:a8:e6:b7:92:70:ee:9c:
                    58:2c:68:78:11:84:9b:54:ab:6d:e8:cb:80:b6:fb:
                    27:e2:58:c0:d3:16:00:f8:65:a4:83:6b:ad:e8:02:
                    ac:e2:d2:78:1b:b1:9a:f1:92:d7:d1:60:dc:33:d5:
                    95:d9:39:03:48:20:c2:04:de:65:7d:45:f9:2a:42:
                    f2:cf:2d:be:ee:02:4c:5f:c5:8e:10:85:9f:8e:e3:
                    fd:14:2e:87:18:73:03:c7:f2:77:ad:6f:14:53:6e:
                    b8:30:ea:e7:ee:ca:ba:52:70:95:5f:76:44:e6:2b:
                    4b:23:ce:63:48:c4:32:26:ee:7c:e8:4f:2e:3a:26:
                    75:9e:c0:b0:e7:8e:26:e1:d7:11:4a:41:a5:f8:17:
                    ce:29:1e:65:0f:54:5b:7e:19:c5:11:41:12:c5:57:
                    27:d5:70:cb:d4:a0:3f:04:ba:cd:b1:87:98:fc:da:
                    df:92:08:6b:8c:8f:96:83:44:1a:e7:92:a0:ce:02:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A7:F0:E6:B1:3D:D3:56:1D:3A:70:A3:24:A6:4A:19:89:41:13:62
            X509v3 Authority Key Identifier:
                keyid:9C:F6:08:FF:AD:F6:00:08:1E:E9:22:29:8E:4B:2A:E9:6A:FF:48:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPYI_632AAge6SIpjksq6Wr_SOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d45f11-67c2-47a5-996c-891eb548b891/1/nPYI_632AAge6SIpjksq6Wr_SOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:31:b7:a7:6c:0a:8b:99:de:db:69:03:d0:cc:f1:94:07:ed:
         d5:4f:7d:aa:f0:c6:4e:c1:4d:05:98:36:f4:55:2e:86:ae:05:
         a9:27:32:dc:9e:f0:7c:82:61:54:98:9a:a5:3a:78:53:19:a3:
         7d:94:de:20:3f:9c:48:3c:f1:9b:39:96:61:6f:5f:59:e9:22:
         c5:2a:d4:25:18:7a:de:18:1d:b6:ea:86:5c:06:0a:17:4b:a4:
         dc:ba:a2:51:a3:24:ff:a8:8f:dd:6c:9c:bd:24:4c:0d:4e:82:
         3c:68:04:ef:36:44:25:c2:d1:ce:bb:f0:77:7a:5f:82:ed:a5:
         c4:11:5a:a9:8f:0e:6c:74:7e:aa:21:f2:c7:f1:ab:86:96:7e:
         83:ff:9b:4f:6f:0b:88:17:c1:23:dc:a8:5d:cb:13:81:ec:4c:
         f2:af:1d:f5:aa:99:2f:4c:0b:31:40:a2:43:34:63:d0:53:fd:
         d3:0b:10:42:91:22:d2:70:b8:fb:d1:2a:43:c2:58:12:ee:aa:
         89:e5:61:c4:1f:f5:3c:4b:9c:fb:f1:8c:61:58:5c:ca:99:2f:
         e6:c0:8c:89:28:23:b7:4c:95:3f:45:b9:e3:cb:c3:53:8a:b8:
         5f:f7:7d:0f:ca:44:ba:31:43:df:82:58:4b:b5:40:8a:7a:f6:
         12:6c:5b:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYaYgpxpnx1zfIOH/JZ/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjYwOGZmYWRmNjAwMDgxZWU5MjIyOThlNGIyYWU5NmFm
ZjQ4ZTgwHhcNMjUwNDEzMDkwMTEzWhcNMjUwNDE0MDkwMTEzWjAzMTEwLwYDVQQD
EygxY2E3ZjBlNmIxM2RkMzU2MWQzYTcwYTMyNGE2NGExOTg5NDExMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLeneEcryjBUuz9mP7bLD9nr5wFs
LoYPzMCnb9/j5dWMYyWerpWDYul7kPmiE5ae5y4PUm+3hlGzJteXUM4Po44FOqjm
t5Jw7pxYLGh4EYSbVKtt6MuAtvsn4ljA0xYA+GWkg2ut6AKs4tJ4G7Ga8ZLX0WDc
M9WV2TkDSCDCBN5lfUX5KkLyzy2+7gJMX8WOEIWfjuP9FC6HGHMDx/J3rW8UU264
MOrn7sq6UnCVX3ZE5itLI85jSMQyJu586E8uOiZ1nsCw544m4dcRSkGl+BfOKR5l
D1RbfhnFEUESxVcn1XDL1KA/BLrNsYeY/NrfkghrjI+Wg0Qa55KgzgLtcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByn8OaxPdNWHTpwoySmShmJQRNiMB8GA1UdIwQY
MBaAFJz2CP+t9gAIHukiKY5LKulq/0joMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMt
ODkxZWI1NDhiODkxLzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kNDVmMTEtNjdjMi00N2E1LTk5NmMtODkxZWI1NDhiODkx
LzEvblBZSV82MzJBQWdlNlNJcGprc3E2V3JfU09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzG3p2wK
i5ne22kD0MzxlAft1U99qvDGTsFNBZg29FUuhq4FqScy3J7wfIJhVJiapTp4Uxmj
fZTeID+cSDzxmzmWYW9fWekixSrUJRh63hgdtuqGXAYKF0uk3LqiUaMk/6iP3Wyc
vSRMDU6CPGgE7zZEJcLRzrvwd3pfgu2lxBFaqY8ObHR+qiHyx/GrhpZ+g/+bT28L
iBfBI9yoXcsTgexM8q8d9aqZL0wLMUCiQzRj0FP90wsQQpEi0nC4+9EqQ8JYEu6q
ieVhxB/1PEuc+/GMYVhcypkv5sCMiSgjt0yVP0W548vDU4q4X/d9D8pEujFD34JY
S7VAinr2EmxbFw==
-----END CERTIFICATE-----