Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File:                     ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier:          s0mYTvU3oPn3CNSBb2F8pWXWioE3PNM+/2SknUjj0vQ=
Subject key identifier:   AC:BE:A8:D2:81:24:4F:77:90:F9:47:6B:42:CD:44:EB:8A:2D:FD:1D
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer:       /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial:       01962E2ABCA352EFE7077BFDF7C37531DCB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number:          14A7
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: Hq4qtu3Hmw7ihPLhHJm0o3HW0ME.roa (hash: cBO4YeU2VYitDB5gOiHBAGdFdmypsOGShw+oH/O7hOQ=)
                          2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: 8LqQPYsIHOAPu1HjD7t+QJxNapNwXYZgASYdXXp2rSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bc:a3:52:ef:e7:07:7b:fd:f7:c3:75:31:dc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=acbea8d281244f7790f9476b42cd44eb8a2dfd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:97:dd:c4:92:39:1f:09:19:e1:c8:d7:bd:ff:
                    ef:6b:51:69:12:45:c0:64:14:1f:cb:ac:45:c1:27:
                    c5:78:ec:e9:7a:83:5a:65:36:f4:b3:98:d0:ce:34:
                    05:d8:13:0c:e7:d2:b2:43:4c:03:73:6d:75:8c:15:
                    79:a8:22:86:36:9e:26:12:a4:e7:04:af:3b:f2:fb:
                    c7:dd:28:e3:f6:4f:9e:4b:3c:28:b5:9f:12:81:1c:
                    b6:12:ce:0a:53:ef:82:9b:d3:b9:0c:96:8f:6d:1f:
                    39:59:24:80:85:89:11:3e:c1:45:66:ee:4c:a3:ee:
                    56:81:dc:56:8b:09:4a:5a:34:97:8b:e4:ad:6c:30:
                    a4:9c:08:62:28:f7:30:73:17:fe:49:d2:2f:fb:15:
                    e7:fb:64:a6:6e:da:97:20:00:84:45:e9:95:5a:84:
                    8d:80:c0:35:1f:db:43:b4:c4:d3:26:39:24:2f:46:
                    0a:98:c3:36:9e:db:77:88:22:ce:17:16:91:2b:a2:
                    ae:dc:dd:c1:59:55:93:56:87:3c:88:7b:f5:59:61:
                    04:75:de:b7:f1:7d:33:2b:3c:22:ee:80:9e:06:8a:
                    32:d9:ed:38:4e:eb:8e:05:94:7e:f2:4b:77:a1:3e:
                    84:65:7b:4b:58:df:15:29:bf:0c:f9:b3:e2:d5:a9:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BE:A8:D2:81:24:4F:77:90:F9:47:6B:42:CD:44:EB:8A:2D:FD:1D
            X509v3 Authority Key Identifier:
                keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7f:33:8f:a4:bf:5a:b5:f6:93:80:26:39:8e:d5:c7:be:8c:
         80:e7:22:4a:f3:7b:3d:fd:a0:e6:4c:70:5c:1b:1f:0a:07:4a:
         ac:a2:02:73:25:a4:06:e4:2d:2b:92:b1:72:f2:3c:72:cf:d1:
         f2:73:2d:0e:95:9b:4c:bc:6e:ef:7c:ce:7d:ff:04:37:d3:25:
         c1:e3:19:c4:37:a2:ae:2c:91:1d:01:fb:a0:a3:6f:47:a9:1c:
         98:3e:11:46:16:1c:7d:ce:da:d5:13:66:04:e0:a9:0d:f8:21:
         0e:57:ac:37:9e:38:62:0e:6e:10:c0:81:ab:fd:e7:ff:b6:eb:
         ac:2c:61:ad:20:1f:7e:d1:05:5c:74:14:c4:73:be:a7:9e:64:
         23:9b:1e:bd:da:2c:d1:e9:44:9b:75:de:71:c7:53:a6:91:22:
         e0:2c:64:2c:c3:06:0d:08:76:9b:b6:51:83:bd:44:7e:69:e5:
         44:24:ed:32:f0:0d:28:21:dc:e3:f0:1f:80:a6:6b:05:f8:65:
         39:78:bb:a8:5d:3c:a0:b5:49:b9:c1:94:b4:e3:ae:b4:79:8c:
         10:b5:3c:9a:e9:5f:1e:9b:37:14:a2:b0:f5:61:43:4a:de:7b:
         a8:59:32:18:c0:4d:ae:b6:30:1b:b3:18:72:93:0c:7e:9d:11:
         cc:5b:7f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKryjUu/nB3v998N1Mdy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi
OTYzMDYwHhcNMjUwNDEzMDgwMTE0WhcNMjUwNDE0MDgwMTE0WjAzMTEwLwYDVQQD
EyhhY2JlYThkMjgxMjQ0Zjc3OTBmOTQ3NmI0MmNkNDRlYjhhMmRmZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15fdxJI5HwkZ4cjXvf/va1FpEkXA
ZBQfy6xFwSfFeOzpeoNaZTb0s5jQzjQF2BMM59KyQ0wDc211jBV5qCKGNp4mEqTn
BK878vvH3Sjj9k+eSzwotZ8SgRy2Es4KU++Cm9O5DJaPbR85WSSAhYkRPsFFZu5M
o+5WgdxWiwlKWjSXi+StbDCknAhiKPcwcxf+SdIv+xXn+2SmbtqXIACERemVWoSN
gMA1H9tDtMTTJjkkL0YKmMM2ntt3iCLOFxaRK6Ku3N3BWVWTVoc8iHv1WWEEdd63
8X0zKzwi7oCeBooy2e04TuuOBZR+8kt3oT6EZXtLWN8VKb8M+bPi1alizQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy+qNKBJE93kPlHa0LNROuKLf0dMB8GA1UdIwQY
MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt
ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi
LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX38zj6S/
WrX2k4AmOY7Vx76MgOciSvN7Pf2g5kxwXBsfCgdKrKICcyWkBuQtK5KxcvI8cs/R
8nMtDpWbTLxu73zOff8EN9MlweMZxDeiriyRHQH7oKNvR6kcmD4RRhYcfc7a1RNm
BOCpDfghDlesN544Yg5uEMCBq/3n/7brrCxhrSAfftEFXHQUxHO+p55kI5sevdos
0elEm3XeccdTppEi4CxkLMMGDQh2m7ZRg71EfmnlRCTtMvANKCHc4/AfgKZrBfhl
OXi7qF08oLVJucGUtOOutHmMELU8mulfHps3FKKw9WFDSt57qFkyGMBNrrYwG7MY
cpMMfp0RzFt/Ng==
-----END CERTIFICATE-----