Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File:                     N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier:          kimAv1nol+ZYKAlbidMjV3SUZM2jT9nz2eV6OQ32eaA=
Subject key identifier:   D1:56:C2:86:2E:98:25:2D:D6:23:CD:C7:96:DC:71:6E:6E:52:18:F0
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer:       /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial:       01962F748FCA488C58FFC58E533632C56AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:30 +0000
Files and hashes:         1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: zFV4+9veP4ARRSaZLv2hz3Zjxi9z94PqiJ/efwGr0/A=)
                          2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8f:ca:48:8c:58:ff:c5:8e:53:36:32:c5:6a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
        Validity
            Not Before: Apr 13 14:01:30 2025 GMT
            Not After : Apr 14 14:01:30 2025 GMT
        Subject: CN=d156c2862e98252dd623cdc796dc716e6e5218f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:ad:83:e8:19:b1:ba:26:3d:34:a3:a4:ea:
                    15:06:28:a9:8f:56:67:ea:eb:e2:a2:d8:4e:f7:35:
                    60:e3:6d:b0:d5:65:63:0b:fe:32:20:84:06:4b:b3:
                    06:ce:f3:28:84:cb:1e:36:e1:ca:66:05:c7:79:71:
                    09:c6:a3:19:9f:72:fa:a5:65:3c:95:ed:4b:cc:ab:
                    0d:d5:c9:91:a4:31:6c:4e:ae:fc:5b:76:bb:48:df:
                    66:87:73:08:20:ab:bb:53:84:58:0a:84:4b:2b:6d:
                    a6:bd:85:31:56:0d:c6:ca:52:d5:ef:d1:1e:57:de:
                    48:b8:3d:a4:f0:d9:da:c4:bb:13:6b:97:a0:e5:a1:
                    22:a0:2a:6d:01:0c:e8:b2:57:c6:30:f8:54:19:37:
                    f5:da:97:4e:ec:5a:6e:4f:f5:cb:53:76:65:7e:e2:
                    06:f0:af:92:a6:89:59:d3:d0:7d:84:cd:52:64:d9:
                    f6:26:e1:27:3e:cc:9b:ca:7c:d9:41:4d:b7:7e:fc:
                    cd:ce:67:5f:a4:b9:6f:a8:32:05:12:2d:26:0c:6d:
                    54:26:1b:ca:3f:21:c1:5a:d3:a6:8e:7d:1c:97:37:
                    b1:da:dc:26:67:09:af:5f:95:7e:b0:7a:1a:ec:03:
                    9b:a9:20:3b:75:c0:08:43:08:bb:82:36:1e:12:c1:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:56:C2:86:2E:98:25:2D:D6:23:CD:C7:96:DC:71:6E:6E:52:18:F0
            X509v3 Authority Key Identifier:
                keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:7e:da:f6:50:01:3d:6b:0a:ef:eb:69:47:6a:e7:4d:9a:a8:
         7d:6c:96:6d:43:bf:70:41:00:a0:d7:8b:a3:20:70:85:d3:45:
         7f:37:ce:96:20:47:49:9e:01:2d:86:31:03:d2:f3:85:de:4a:
         ef:52:5c:c8:31:48:eb:06:08:b4:15:e4:2f:94:ba:d2:2c:ee:
         f2:83:96:56:d5:97:6d:44:41:32:fa:82:80:fb:cf:4a:65:0b:
         2b:21:52:7c:b0:3f:4c:0a:ef:cd:35:9a:74:71:d6:19:ba:05:
         a2:78:66:44:af:f6:ea:ce:5f:eb:30:c0:d4:b7:27:17:0a:61:
         61:6a:3f:c8:ea:e0:8e:83:2d:2c:14:e3:52:5d:9d:b1:f6:5a:
         ed:a8:d5:1c:0f:af:83:5f:af:ac:61:65:07:b9:22:89:52:c5:
         dd:a2:c5:a8:a0:7c:61:28:e3:31:bf:26:e2:0a:85:7d:ad:ab:
         ca:b1:b4:f0:8c:2d:f0:e2:15:3c:e8:de:dc:67:f0:17:98:d6:
         a6:12:a0:4a:ba:d7:5a:bd:e7:6f:a0:28:92:b1:ad:e9:7b:47:
         64:6e:90:56:3a:7a:51:2a:52:e7:f8:5c:ca:78:c2:bf:ef:52:
         7e:bf:3c:d0:7a:13:d5:63:8f:68:ee:46:20:66:45:5c:a1:82:
         ac:3f:3c:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdI/KSIxY/8WOUzYyxWrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODkxYTQ3MjRhYWM2YjVkYTAwMDUzMjlhYTNhNWFiZTg3
Nzc5ZDYwHhcNMjUwNDEzMTQwMTMwWhcNMjUwNDE0MTQwMTMwWjAzMTEwLwYDVQQD
EyhkMTU2YzI4NjJlOTgyNTJkZDYyM2NkYzc5NmRjNzE2ZTZlNTIxOGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Ctg+gZsbomPTSjpOoVBiipj1Zn
6uviothO9zVg422w1WVjC/4yIIQGS7MGzvMohMseNuHKZgXHeXEJxqMZn3L6pWU8
le1LzKsN1cmRpDFsTq78W3a7SN9mh3MIIKu7U4RYCoRLK22mvYUxVg3GylLV79Ee
V95IuD2k8NnaxLsTa5eg5aEioCptAQzoslfGMPhUGTf12pdO7FpuT/XLU3ZlfuIG
8K+SpolZ09B9hM1SZNn2JuEnPsybynzZQU23fvzNzmdfpLlvqDIFEi0mDG1UJhvK
PyHBWtOmjn0clzex2twmZwmvX5V+sHoa7AObqSA7dcAIQwi7gjYeEsEsRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFWwoYumCUt1iPNx5bccW5uUhjwMB8GA1UdIwQY
MBaAFDeJGkckqsa12gAFMpqjpavod3nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUt
NTI0YzIxMDljYjA1LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUtNTI0YzIxMDljYjA1
LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqH7a9lAB
PWsK7+tpR2rnTZqofWyWbUO/cEEAoNeLoyBwhdNFfzfOliBHSZ4BLYYxA9Lzhd5K
71JcyDFI6wYItBXkL5S60izu8oOWVtWXbURBMvqCgPvPSmULKyFSfLA/TArvzTWa
dHHWGboFonhmRK/26s5f6zDA1LcnFwphYWo/yOrgjoMtLBTjUl2dsfZa7ajVHA+v
g1+vrGFlB7kiiVLF3aLFqKB8YSjjMb8m4gqFfa2ryrG08Iwt8OIVPOje3GfwF5jW
phKgSrrXWr3nb6AokrGt6XtHZG6QVjp6USpS5/hcynjCv+9Sfr880HoT1WOPaO5G
IGZFXKGCrD88aw==
-----END CERTIFICATE-----