Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
File:                     NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft (raw, json)
Hash identifier:          Tp8XhnqrxGwZwtza7wqNrYUHD6+/s5UTCa47KKxO32g=
Subject key identifier:   82:92:B9:6F:44:47:49:45:84:05:A1:C7:1C:62:61:31:33:D2:84:52
Authority key identifier: 35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99
Certificate issuer:       /CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
Certificate serial:       01962E2AD30C501C79A960AD23060E5BC14B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft
Manifest number:          09CE
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl (hash: XVwOYBLjRtMS8zFnNf/8lhBsODgj+pc+QGgMQ+IPR94=)
                          2: Zk0y4tHHB8Yu3r49IrGLEovlzps.roa (hash: Z8BlFARu3PiIVKgAzCmvXp/n3Elo4eu1cJ/tXUB0sZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d3:0c:50:1c:79:a9:60:ad:23:06:0e:5b:c1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351652b838ff2d9672ac8ca66ba660dd4e45d699
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=8292b96f444749458405a1c71c62613133d28452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6c:b1:c8:aa:4c:3c:74:7e:d7:31:d6:e2:5b:
                    e4:27:08:b0:44:ae:47:7c:8c:5b:73:a1:96:68:ce:
                    74:4c:35:0b:aa:01:14:d2:90:f5:5b:e1:2c:e7:df:
                    54:e6:0f:bd:e8:60:15:f6:2c:3f:00:af:3b:b0:f1:
                    3c:45:66:e3:33:76:e1:a8:ae:bc:db:25:aa:70:cf:
                    aa:3f:99:64:98:c2:2e:69:41:91:5d:2e:cb:a6:81:
                    9b:52:dd:dc:4a:93:b5:29:6f:d3:88:2c:12:70:3e:
                    2e:c0:20:c4:27:d4:13:af:04:5a:c3:08:e7:1f:86:
                    f6:8d:ae:b3:fc:e7:1c:2a:2c:3a:d4:68:5a:ca:8a:
                    ad:a2:6c:b0:94:b0:3c:a0:14:73:ee:c8:25:7b:80:
                    aa:20:33:61:63:34:59:c1:a3:69:ed:3c:b3:0e:8e:
                    4d:cc:95:17:97:8f:59:f8:49:bf:71:ca:ef:08:9e:
                    00:7a:58:37:d3:e9:d8:7c:52:ff:d9:6c:e8:e8:d1:
                    c1:ef:83:8b:01:53:ae:93:32:2f:05:42:6a:e1:a8:
                    b1:ab:d6:e2:73:0f:90:0b:1c:1c:3b:4d:25:7c:8b:
                    10:17:fb:a9:fc:9e:f3:72:ff:dc:e4:7b:3e:8d:73:
                    f7:2a:76:66:41:c0:05:e6:fd:cd:2e:b7:d7:4c:97:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:92:B9:6F:44:47:49:45:84:05:A1:C7:1C:62:61:31:33:D2:84:52
            X509v3 Authority Key Identifier:
                keyid:35:16:52:B8:38:FF:2D:96:72:AC:8C:A6:6B:A6:60:DD:4E:45:D6:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRZSuDj_LZZyrIyma6Zg3U5F1pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9ce60b-cbc4-40d9-98ad-1cd506070bb5/1/NRZSuDj_LZZyrIyma6Zg3U5F1pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:53:9b:d3:eb:dc:6b:66:dd:c0:e2:48:2e:de:bd:0c:9a:
         68:55:e2:92:95:21:9c:02:dc:99:fc:97:fd:a4:12:9d:46:0a:
         f1:f4:35:31:53:78:bd:b2:0a:5f:e3:fb:c5:47:7c:7d:4a:a9:
         5c:1d:43:a7:cc:cb:42:66:aa:8b:98:6d:20:22:ef:89:1e:64:
         87:83:6b:58:50:36:64:de:b4:b2:9e:8e:fd:0d:25:b5:96:ad:
         2e:8f:ad:f4:5a:ad:31:d2:be:1e:a0:0b:f2:9b:f7:74:bb:59:
         96:6c:e2:94:fe:0c:60:08:0e:fa:e1:22:a2:14:67:0b:d8:59:
         b7:85:e6:4d:cf:57:94:b4:da:21:54:54:c4:9f:58:69:27:8e:
         68:68:73:2a:e9:25:5e:a4:03:fb:66:07:b5:fb:64:4e:3e:51:
         41:73:a8:72:fb:e8:e2:74:d1:b7:88:f2:72:27:e5:db:89:38:
         d8:a9:a3:ee:e7:3f:32:c1:be:d2:22:38:2f:51:bd:f4:3e:bd:
         b0:bf:1e:dc:53:93:57:bb:90:46:80:a9:04:a0:ee:18:51:9c:
         12:09:10:9d:f6:ed:94:02:b8:60:b2:ca:be:e6:fd:04:ba:55:
         f9:d4:31:76:be:99:4b:4e:ff:90:18:f2:5d:37:ef:17:ce:27:
         88:5e:20:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKtMMUBx5qWCtIwYOW8FLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTY1MmI4MzhmZjJkOTY3MmFjOGNhNjZiYTY2MGRkNGU0
NWQ2OTkwHhcNMjUwNDEzMDgwMTIwWhcNMjUwNDE0MDgwMTIwWjAzMTEwLwYDVQQD
Eyg4MjkyYjk2ZjQ0NDc0OTQ1ODQwNWExYzcxYzYyNjEzMTMzZDI4NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmyxyKpMPHR+1zHW4lvkJwiwRK5H
fIxbc6GWaM50TDULqgEU0pD1W+Es599U5g+96GAV9iw/AK87sPE8RWbjM3bhqK68
2yWqcM+qP5lkmMIuaUGRXS7LpoGbUt3cSpO1KW/TiCwScD4uwCDEJ9QTrwRawwjn
H4b2ja6z/OccKiw61GhayoqtomywlLA8oBRz7sgle4CqIDNhYzRZwaNp7TyzDo5N
zJUXl49Z+Em/ccrvCJ4Aelg30+nYfFL/2Wzo6NHB74OLAVOukzIvBUJq4aixq9bi
cw+QCxwcO00lfIsQF/up/J7zcv/c5Hs+jXP3KnZmQcAF5v3NLrfXTJcpRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKSuW9ER0lFhAWhxxxiYTEz0oRSMB8GA1UdIwQY
MBaAFDUWUrg4/y2WcqyMpmumYN1ORdaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQt
MWNkNTA2MDcwYmI1LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85Y2U2MGItY2JjNC00MGQ5LTk4YWQtMWNkNTA2MDcwYmI1
LzEvTlJaU3VEal9MWlp5ckl5bWE2WmczVTVGMXBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEX1Tm9Pr
3Gtm3cDiSC7evQyaaFXikpUhnALcmfyX/aQSnUYK8fQ1MVN4vbIKX+P7xUd8fUqp
XB1Dp8zLQmaqi5htICLviR5kh4NrWFA2ZN60sp6O/Q0ltZatLo+t9FqtMdK+HqAL
8pv3dLtZlmzilP4MYAgO+uEiohRnC9hZt4XmTc9XlLTaIVRUxJ9YaSeOaGhzKukl
XqQD+2YHtftkTj5RQXOocvvo4nTRt4jycifl24k42Kmj7uc/MsG+0iI4L1G99D69
sL8e3FOTV7uQRoCpBKDuGFGcEgkQnfbtlAK4YLLKvub9BLpV+dQxdr6ZS07/kBjy
XTfvF84niF4gYw==
-----END CERTIFICATE-----