Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
File:                     n6c21GmBzkhjlN_vnHOLfr62Gm0.mft (raw, json)
Hash identifier:          UWp69GXFmLMOtR4IZ5K50OeFw8YrjaL6d0RN9l+iVR0=
Subject key identifier:   94:64:09:00:A0:C8:C3:14:E8:56:A2:54:FD:00:12:35:D6:0B:D4:D7
Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
Certificate issuer:       /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Certificate serial:       01962F0651E9D95D30A0FB28FBBD10F1CE23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
Manifest number:          10DF
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: _h71B272PJZJXIBvxnSAiFkPc3o.roa (hash: 8epdxNIo68sqlqhgpXPr6uBYOM7OF4qT5O2HTRBPkF4=)
                          2: n6c21GmBzkhjlN_vnHOLfr62Gm0.crl (hash: sxR1X7PeN37O9WPcLuj12IXDfnXHkQl2U9z+5WIipA0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:51:e9:d9:5d:30:a0:fb:28:fb:bd:10:f1:ce:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=94640900a0c8c314e856a254fd001235d60bd4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:84:7e:2e:a7:b8:45:78:14:10:48:8f:77:
                    7e:d3:b8:4e:93:8f:b4:73:0c:dd:60:91:41:f8:08:
                    90:5d:8a:03:42:d1:71:6e:f7:d0:5d:d1:5b:eb:1d:
                    12:4f:ef:d4:44:cf:c5:80:d9:00:f2:f5:02:7d:03:
                    ff:de:49:5c:a0:bf:9e:7b:7c:73:f0:7e:65:7f:d2:
                    60:22:60:35:4d:ff:7b:bc:8f:f5:2b:53:8e:a0:a4:
                    b3:14:c0:b9:8a:45:49:73:af:56:48:4c:c1:d2:97:
                    c4:d1:12:92:ac:fe:06:b5:4c:95:79:a5:fd:44:ee:
                    c8:96:c5:4a:c8:8b:26:3c:f8:76:8f:48:0a:a3:01:
                    5a:11:be:26:d1:0d:64:12:b4:a9:a4:b5:6b:b7:3b:
                    2d:98:ce:55:b0:50:79:bc:90:3c:05:1d:6f:f6:60:
                    29:1c:23:c1:b8:b6:2f:b2:e8:02:96:91:5c:05:23:
                    25:cc:f0:f6:3c:80:45:6d:ee:28:f2:4d:8e:d3:00:
                    68:87:2b:69:d8:3b:2a:f2:cf:e9:6e:a5:c9:e4:3b:
                    03:24:e8:c6:f5:bf:1d:59:5b:77:18:aa:d4:58:27:
                    b0:ee:a1:9e:f2:78:6a:66:3f:01:a1:15:75:41:e6:
                    7c:2f:43:2d:dc:2d:4b:40:b9:85:ae:51:72:14:63:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:64:09:00:A0:C8:C3:14:E8:56:A2:54:FD:00:12:35:D6:0B:D4:D7
            X509v3 Authority Key Identifier:
                keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:14:a2:32:b9:d3:bd:41:41:24:5a:54:e0:e2:9d:bc:cb:e8:
         28:c1:78:a4:1d:c1:74:f6:8d:58:10:5e:cc:26:2a:23:cc:23:
         54:b1:23:e6:b3:b3:75:1a:75:68:35:72:96:2d:de:dc:0c:1a:
         f3:f4:1d:08:3b:0a:f2:d4:3d:77:7d:93:e1:9b:6b:f9:09:b5:
         15:10:ac:59:4c:d0:e7:e9:29:3d:76:1c:ec:ee:52:35:8d:51:
         67:e7:6b:62:97:ac:b6:23:61:f3:ac:d4:86:bd:af:e5:20:5b:
         dc:5a:18:97:98:d5:37:58:d6:7d:f5:2c:ee:22:57:6e:5f:11:
         af:d1:2b:01:f6:2a:2b:75:ae:bf:31:62:fd:7e:e0:b7:58:39:
         f1:93:a0:dd:81:5d:cc:cc:51:57:41:35:b0:62:05:79:85:a1:
         59:b9:6a:65:00:f4:8a:c2:65:6e:af:2a:67:dc:ad:4b:9d:53:
         0d:cf:cb:b5:ce:7e:28:33:3b:27:7d:be:cd:0e:d1:19:a2:92:
         ce:7d:70:ee:53:38:9b:d0:0e:63:b3:92:13:d6:f6:de:10:53:
         c8:a4:f4:61:b8:97:52:41:26:17:cc:dd:a2:23:a4:6f:6a:e2:
         b6:ef:63:82:96:e4:67:76:e8:79:81:72:27:4b:dd:c7:19:d2:
         d3:21:91:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBlHp2V0woPso+70Q8c4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYTczNmQ0Njk4MWNlNDg2Mzk0ZGZlZjljNzM4YjdlYmVi
NjFhNmQwHhcNMjUwNDEzMTIwMTA1WhcNMjUwNDE0MTIwMTA1WjAzMTEwLwYDVQQD
Eyg5NDY0MDkwMGEwYzhjMzE0ZTg1NmEyNTRmZDAwMTIzNWQ2MGJkNGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw16Efi6nuEV4FBBIj3d+07hOk4+0
cwzdYJFB+AiQXYoDQtFxbvfQXdFb6x0ST+/URM/FgNkA8vUCfQP/3klcoL+ee3xz
8H5lf9JgImA1Tf97vI/1K1OOoKSzFMC5ikVJc69WSEzB0pfE0RKSrP4GtUyVeaX9
RO7IlsVKyIsmPPh2j0gKowFaEb4m0Q1kErSppLVrtzstmM5VsFB5vJA8BR1v9mAp
HCPBuLYvsugClpFcBSMlzPD2PIBFbe4o8k2O0wBohytp2Dsq8s/pbqXJ5DsDJOjG
9b8dWVt3GKrUWCew7qGe8nhqZj8BoRV1QeZ8L0Mt3C1LQLmFrlFyFGM7wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRkCQCgyMMU6FaiVP0AEjXWC9TXMB8GA1UdIwQY
MBaAFJ+nNtRpgc5IY5Tf75xzi36+thptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYt
ZDI2MjgwM2NmNjQ0LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYtZDI2MjgwM2NmNjQ0
LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehSiMrnT
vUFBJFpU4OKdvMvoKMF4pB3BdPaNWBBezCYqI8wjVLEj5rOzdRp1aDVyli3e3Awa
8/QdCDsK8tQ9d32T4Ztr+Qm1FRCsWUzQ5+kpPXYc7O5SNY1RZ+drYpestiNh86zU
hr2v5SBb3FoYl5jVN1jWffUs7iJXbl8Rr9ErAfYqK3WuvzFi/X7gt1g58ZOg3YFd
zMxRV0E1sGIFeYWhWblqZQD0isJlbq8qZ9ytS51TDc/Ltc5+KDM7J32+zQ7RGaKS
zn1w7lM4m9AOY7OSE9b23hBTyKT0YbiXUkEmF8zdoiOkb2ritu9jgpbkZ3boeYFy
J0vdxxnS0yGRqA==
-----END CERTIFICATE-----