Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File:                     NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier:          ndSI+QgHURpcMILkBt4bMKR7GKD0g07vTIyJ+oN9/ao=
Subject key identifier:   96:83:36:C5:89:DD:9C:07:EB:87:AC:08:6A:6B:8E:60:29:12:5E:97
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer:       /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial:       01962DF434D668266015E3C8EBE1CF8926AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: L5MQK89fxZaRwM_CqURZbBomtGM.roa (hash: dfoa3Oa+GHxXVfHS0ZcfFlTwLP7no4RhSrEEs8sBD0U=)
                          2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: bOvxZMPvgDZG7eJvKOWiKrI10V0v+2I20o43kIFh1nA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:34:d6:68:26:60:15:e3:c8:eb:e1:cf:89:26:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=968336c589dd9c07eb87ac086a6b8e6029125e97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:73:0d:5a:44:b8:6a:53:78:66:ed:af:f4:75:
                    6e:24:e5:02:9b:84:2f:c2:e2:d9:d6:3c:ef:a9:d7:
                    a6:ab:3c:25:3c:35:3d:18:99:4e:0c:a1:34:06:6f:
                    ac:c1:85:f1:a1:f5:f7:09:56:2d:2d:f7:ab:59:0a:
                    c6:ca:8b:66:8c:1b:d4:6e:ce:24:f0:39:94:03:2c:
                    e1:4b:a4:61:0b:15:77:07:fc:0b:f8:75:7d:8f:e8:
                    48:df:64:2f:0c:d1:72:3b:87:c1:b2:1c:5d:40:f1:
                    4d:a5:89:c8:98:93:a1:57:9f:8b:98:4b:71:5d:f7:
                    3d:cf:3b:74:15:01:0b:4d:16:ac:45:47:f2:a2:33:
                    a8:9e:63:13:29:13:0d:e3:80:e6:de:1c:69:56:80:
                    a5:d1:9b:1b:ce:4c:98:b6:e3:50:f5:1c:78:33:b2:
                    7a:36:c6:cc:b1:70:76:71:10:a5:2f:74:4b:da:1c:
                    be:c5:84:4a:7d:4d:8a:46:25:b0:c7:6e:6b:97:ca:
                    e6:f6:ec:2f:68:ab:ec:db:86:51:e2:31:93:6d:d5:
                    ed:26:16:92:9f:92:c5:7b:f4:ba:71:89:13:30:60:
                    97:bb:e9:c9:04:51:ff:04:dd:bd:63:5f:f4:80:c4:
                    34:39:4f:67:12:89:a6:6e:75:d1:6f:e9:fc:96:17:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:83:36:C5:89:DD:9C:07:EB:87:AC:08:6A:6B:8E:60:29:12:5E:97
            X509v3 Authority Key Identifier:
                keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:28:df:4f:f9:4e:d3:d2:ac:7f:d2:be:9c:04:35:d6:3d:e0:
         11:d6:0e:14:62:40:f3:cf:da:e6:d5:04:35:1a:1a:93:06:d2:
         15:0c:2c:8c:87:9b:52:4c:33:1a:62:aa:1c:fa:ec:b3:b7:25:
         69:66:9b:43:a6:29:92:b4:a0:cc:e4:5f:86:9c:bc:81:9c:a2:
         d4:1a:f4:43:bb:a1:b9:8e:c2:92:4a:47:fb:58:74:2a:4f:e6:
         42:71:de:f3:5a:45:d2:c6:df:de:f4:53:36:2d:68:a9:f5:0e:
         d8:f1:c4:f8:a1:aa:ea:31:7f:68:08:39:ad:1b:d4:81:07:4d:
         61:03:ab:1e:7a:27:87:71:85:d8:ef:20:c9:82:e7:81:2f:4b:
         c7:27:be:4d:de:56:c4:8c:1b:1c:e6:85:be:f4:40:89:e3:a3:
         9d:db:cf:35:ca:b2:b2:80:2f:7d:3f:70:12:e8:59:a0:4f:3d:
         ca:00:f4:8d:67:0f:c4:67:7d:34:a9:e2:ce:4d:fa:21:66:84:
         d1:3f:e6:bc:ae:03:c7:c7:55:63:f1:0e:ea:b1:c6:6c:fc:25:
         ea:5a:4f:ec:e5:eb:c3:3b:ac:11:b5:7f:ea:e2:57:29:55:55:
         25:5b:0a:22:7b:73:e6:87:41:23:c0:14:1c:82:20:7c:55:cf:
         2f:67:dd:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9DTWaCZgFePI6+HPiSatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2IxNmU0NGNmYmYwN2U5N2Y2ZjVlNDRhZTcxOGFhNTBk
MDUyOTEwHhcNMjUwNDEzMDcwMTQxWhcNMjUwNDE0MDcwMTQxWjAzMTEwLwYDVQQD
Eyg5NjgzMzZjNTg5ZGQ5YzA3ZWI4N2FjMDg2YTZiOGU2MDI5MTI1ZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3MNWkS4alN4Zu2v9HVuJOUCm4Qv
wuLZ1jzvqdemqzwlPDU9GJlODKE0Bm+swYXxofX3CVYtLferWQrGyotmjBvUbs4k
8DmUAyzhS6RhCxV3B/wL+HV9j+hI32QvDNFyO4fBshxdQPFNpYnImJOhV5+LmEtx
Xfc9zzt0FQELTRasRUfyojOonmMTKRMN44Dm3hxpVoCl0ZsbzkyYtuNQ9Rx4M7J6
NsbMsXB2cRClL3RL2hy+xYRKfU2KRiWwx25rl8rm9uwvaKvs24ZR4jGTbdXtJhaS
n5LFe/S6cYkTMGCXu+nJBFH/BN29Y1/0gMQ0OU9nEommbnXRb+n8lhfgdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJaDNsWJ3ZwH64esCGprjmApEl6XMB8GA1UdIwQY
MBaAFDbLFuRM+/B+l/b15ErnGKpQ0FKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmIt
MTBjYmM1OTdhNzFhLzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9jODA0M2UtZWE5NS00ODUxLWEyZmItMTBjYmM1OTdhNzFh
LzEvTnNzVzVFejc4SDZYOXZYa1N1Y1lxbERRVXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSjfT/lO
09Ksf9K+nAQ11j3gEdYOFGJA88/a5tUENRoakwbSFQwsjIebUkwzGmKqHPrss7cl
aWabQ6YpkrSgzORfhpy8gZyi1Br0Q7uhuY7CkkpH+1h0Kk/mQnHe81pF0sbf3vRT
Ni1oqfUO2PHE+KGq6jF/aAg5rRvUgQdNYQOrHnonh3GF2O8gyYLngS9Lxye+Td5W
xIwbHOaFvvRAieOjndvPNcqysoAvfT9wEuhZoE89ygD0jWcPxGd9NKnizk36IWaE
0T/mvK4Dx8dVY/EO6rHGbPwl6lpP7OXrwzusEbV/6uJXKVVVJVsKIntz5odBI8AU
HIIgfFXPL2fdNw==
-----END CERTIFICATE-----