Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
File:                     NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft (raw, json)
Hash identifier:          9AW5U/yDU6cTCUCari927kh8TTyL6QQzBUpFjcuevGI=
Subject key identifier:   F7:88:9D:F5:71:D6:B3:E6:A2:CB:AB:68:4D:CE:23:8B:18:36:7C:A4
Authority key identifier: 34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02
Certificate issuer:       /CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
Certificate serial:       01962E2B3E233D6B7C0BF7C575382A6F6415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:47 +0000
Files and hashes:         1: NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl (hash: y5weB7Iljo5kbDa43eKWRp4blbCdxCO5IR0AXMbhUz4=)
                          2: n9slDOW816oCeV0oI8sGph9zEHY.roa (hash: qD/TRD91aBYWewYzdvChC8Edlu2GICT4uFezEduAc7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3e:23:3d:6b:7c:0b:f7:c5:75:38:2a:6f:64:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f481a9ddcfb48591f78938c4fcc7b8b67c6302
        Validity
            Not Before: Apr 13 08:01:47 2025 GMT
            Not After : Apr 14 08:01:47 2025 GMT
        Subject: CN=f7889df571d6b3e6a2cbab684dce238b18367ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:13:dc:84:7f:b0:ff:e3:9c:cf:e0:b6:56:
                    3f:19:34:cf:af:4c:85:49:c2:0a:1a:1b:c6:4d:13:
                    f0:e8:4f:00:ed:26:75:f5:00:37:75:5e:01:3a:78:
                    d4:7b:2b:5a:09:10:c8:d3:76:9c:aa:b4:f2:3a:1c:
                    43:cc:75:14:3d:e4:71:9b:d7:fc:51:01:da:c9:81:
                    67:6f:87:c0:48:3f:cb:ac:8a:74:07:cd:dc:94:ab:
                    b0:f0:96:2e:f3:06:5a:46:d7:3d:62:17:a2:36:47:
                    ff:0e:c1:fd:c5:ce:99:08:de:1b:cb:18:13:34:ae:
                    b2:d4:77:62:8a:01:3e:60:f4:b0:05:53:47:be:24:
                    84:d0:2e:18:b2:cc:76:dd:f2:9c:07:9b:8b:1e:92:
                    e1:53:f7:bb:f8:57:7d:d0:59:15:f1:27:9d:92:ef:
                    0c:1c:30:69:d0:11:45:46:bb:c2:69:fb:cd:db:37:
                    0c:89:bd:8f:d5:15:2d:39:f0:6b:b3:33:72:08:a9:
                    0c:fa:5d:9f:34:22:17:64:6d:59:f3:b1:67:be:30:
                    69:38:1c:05:c4:b6:36:62:6b:3d:49:f7:24:98:33:
                    d8:b4:2d:34:4e:a3:91:de:fa:1c:0c:f1:ca:9f:cf:
                    19:27:fb:b2:5e:0c:6d:40:c8:68:f6:9a:a9:73:36:
                    b2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:88:9D:F5:71:D6:B3:E6:A2:CB:AB:68:4D:CE:23:8B:18:36:7C:A4
            X509v3 Authority Key Identifier:
                keyid:34:F4:81:A9:DD:CF:B4:85:91:F7:89:38:C4:FC:C7:B8:B6:7C:63:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPSBqd3PtIWR94k4xPzHuLZ8YwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3ad9c1-3e09-41ac-acca-d11339fe7df0/1/NPSBqd3PtIWR94k4xPzHuLZ8YwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ac:96:e0:be:57:78:67:36:21:51:37:ef:e3:c5:85:85:25:
         04:57:cf:1c:df:b3:7e:70:44:77:f8:45:35:36:8d:5f:e4:83:
         d7:39:b6:d0:77:4e:05:34:41:b9:d7:01:c6:77:1c:ef:37:e7:
         30:d2:b5:a4:cd:05:6c:d6:d7:55:ef:a3:72:86:80:7b:a7:fd:
         9c:d6:88:d6:d0:a9:b8:f3:f8:5a:ce:4d:bd:da:d9:a5:5c:35:
         3e:f5:fd:43:61:08:46:f5:32:6f:58:98:57:da:7b:20:df:c4:
         df:15:97:b7:41:fd:97:14:30:fd:f2:7d:b7:27:c1:64:8e:4e:
         57:88:b0:03:5c:5b:87:a3:07:85:ec:24:7e:3b:74:be:f2:92:
         a5:2e:6f:91:7d:c7:37:1f:ca:c9:0b:7e:25:7c:36:65:17:a9:
         90:82:88:c4:1b:e3:b9:58:93:ef:b0:96:fc:b9:0f:72:1c:15:
         95:b9:6f:ae:c2:6e:f8:aa:3a:de:29:36:c1:a2:40:6c:cd:4b:
         64:d0:3c:1b:4e:e3:cb:0a:3a:9c:28:7f:12:48:30:ba:c9:88:
         fd:4c:70:51:0b:de:79:41:a4:17:6e:b4:89:da:8b:32:b3:1e:
         37:e2:99:77:ad:1d:e9:57:17:bc:e7:fb:a7:70:1d:2a:7f:37:
         00:55:38:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKz4jPWt8C/fFdTgqb2QVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjQ4MWE5ZGRjZmI0ODU5MWY3ODkzOGM0ZmNjN2I4YjY3
YzYzMDIwHhcNMjUwNDEzMDgwMTQ3WhcNMjUwNDE0MDgwMTQ3WjAzMTEwLwYDVQQD
EyhmNzg4OWRmNTcxZDZiM2U2YTJjYmFiNjg0ZGNlMjM4YjE4MzY3Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cIT3IR/sP/jnM/gtlY/GTTPr0yF
ScIKGhvGTRPw6E8A7SZ19QA3dV4BOnjUeytaCRDI03acqrTyOhxDzHUUPeRxm9f8
UQHayYFnb4fASD/LrIp0B83clKuw8JYu8wZaRtc9YheiNkf/DsH9xc6ZCN4byxgT
NK6y1HdiigE+YPSwBVNHviSE0C4Yssx23fKcB5uLHpLhU/e7+Fd90FkV8Sedku8M
HDBp0BFFRrvCafvN2zcMib2P1RUtOfBrszNyCKkM+l2fNCIXZG1Z87FnvjBpOBwF
xLY2Yms9SfckmDPYtC00TqOR3vocDPHKn88ZJ/uyXgxtQMho9pqpczayOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeInfVx1rPmosuraE3OI4sYNnykMB8GA1UdIwQY
MBaAFDT0gandz7SFkfeJOMT8x7i2fGMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2Et
ZDExMzM5ZmU3ZGYwLzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8zYWQ5YzEtM2UwOS00MWFjLWFjY2EtZDExMzM5ZmU3ZGYw
LzEvTlBTQnFkM1B0SVdSOTRrNHhQekh1TFo4WXdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKyW4L5X
eGc2IVE37+PFhYUlBFfPHN+zfnBEd/hFNTaNX+SD1zm20HdOBTRBudcBxncc7zfn
MNK1pM0FbNbXVe+jcoaAe6f9nNaI1tCpuPP4Ws5NvdrZpVw1PvX9Q2EIRvUyb1iY
V9p7IN/E3xWXt0H9lxQw/fJ9tyfBZI5OV4iwA1xbh6MHhewkfjt0vvKSpS5vkX3H
Nx/KyQt+JXw2ZRepkIKIxBvjuViT77CW/LkPchwVlblvrsJu+Ko63ik2waJAbM1L
ZNA8G07jywo6nCh/EkgwusmI/UxwUQveeUGkF260idqLMrMeN+KZd60d6VcXvOf7
p3AdKn83AFU4Tw==
-----END CERTIFICATE-----