Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
File:                     NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json)
Hash identifier:          1AncCNuQnMhndfgtOMRKfUOquzxD/HWpsY2ZtSyF50o=
Subject key identifier:   9B:35:31:9B:38:4E:8F:48:AC:00:DD:B6:1A:AE:BF:BC:76:32:0A:A6
Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3
Certificate issuer:       /CN=36310a959489d1ac5b8796af626e07c3f1c171f3
Certificate serial:       01962E9899BCBF8885439AD2684ADF6DC142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: bIGTN+feNZry2/MiOvbnpHOewtTWPQGMQSbDfOTQb18=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:99:bc:bf:88:85:43:9a:d2:68:4a:df:6d:c1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=9b35319b384e8f48ac00ddb61aaebfbc76320aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:6e:7e:4c:46:37:e9:be:50:dc:1d:b5:17:
                    86:a7:f7:a8:b2:d6:0b:fb:a0:80:6c:89:ec:47:fb:
                    6f:d3:13:cb:27:3c:2d:b8:98:2e:f1:ed:93:7b:e5:
                    03:65:69:64:76:72:fd:6e:ef:d4:ad:f5:72:56:e2:
                    df:ed:ce:ec:1e:b8:6c:ff:4a:76:0e:8d:71:b7:f9:
                    5a:ad:71:9f:03:67:dc:ab:7a:f1:38:2a:18:98:67:
                    e0:8b:73:c2:9c:46:43:9a:8e:86:10:b3:23:f4:3a:
                    c6:da:23:f1:7e:6c:5c:71:5d:31:e0:ca:ce:53:cd:
                    51:14:04:8c:3f:32:5a:42:a5:a8:9c:30:92:c4:01:
                    8c:96:cb:b6:5d:00:d4:08:ed:48:cf:03:32:a3:ff:
                    32:8e:34:5f:77:35:5d:76:e4:30:bd:46:65:61:db:
                    b8:37:9b:d2:d3:e9:f6:ce:a9:1d:e2:e6:ff:e8:09:
                    1f:b4:53:02:24:a3:b7:aa:fd:ec:2e:44:48:6b:f1:
                    7f:e4:3b:da:a5:6a:7f:1d:38:2c:43:95:57:cd:3c:
                    b4:ff:4d:25:5d:62:77:67:9f:e5:fc:03:11:3f:e2:
                    bd:25:e8:05:31:de:ed:aa:22:ef:4e:27:0e:02:7f:
                    67:a6:18:02:c2:f9:65:cd:54:34:4c:90:ae:35:9c:
                    0a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:35:31:9B:38:4E:8F:48:AC:00:DD:B6:1A:AE:BF:BC:76:32:0A:A6
            X509v3 Authority Key Identifier:
                keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0b:0d:81:a5:21:15:60:3d:a2:7b:02:c2:52:80:d6:6e:73:
         08:df:84:39:6d:04:d3:5d:e7:f6:92:88:f8:42:c8:17:5a:8f:
         2b:39:bc:09:15:7d:25:d8:1f:f6:89:c2:51:1c:c1:1a:bf:fa:
         2a:8c:4e:76:ad:28:84:eb:22:5e:ee:9b:07:b0:4b:69:5d:ef:
         9b:2b:58:a1:72:81:c6:09:20:e4:06:31:59:77:5e:04:c9:62:
         17:37:af:8d:14:5f:e6:89:02:55:f3:71:df:ba:d1:51:00:b3:
         37:d7:f5:ec:2f:3a:64:5f:39:63:dd:3e:b6:69:d1:02:10:38:
         3b:d3:65:a8:dc:9f:c1:2d:56:2a:9c:9a:ba:d1:7f:57:b1:7b:
         55:32:aa:26:78:06:26:a2:60:aa:74:58:e6:65:f8:94:81:65:
         e3:4a:77:3f:98:16:80:6f:cd:ae:4c:86:3e:5c:4e:7f:8d:c1:
         cd:f5:73:02:3a:ae:76:0a:cb:c3:57:8d:d9:de:b3:32:a4:9c:
         ac:be:f5:85:cc:2c:e6:27:22:b4:3f:37:10:82:81:e5:46:1a:
         51:f7:b2:d0:22:9f:f6:0f:e0:1f:8e:0d:fc:31:c0:9e:3b:f7:
         1f:44:ae:06:eb:65:da:88:38:8a:50:75:4a:c8:0d:40:75:05:
         5a:26:1f:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumJm8v4iFQ5rSaErfbcFCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MzEwYTk1OTQ4OWQxYWM1Yjg3OTZhZjYyNmUwN2MzZjFj
MTcxZjMwHhcNMjUwNDEzMTAwMTE0WhcNMjUwNDE0MTAwMTE0WjAzMTEwLwYDVQQD
Eyg5YjM1MzE5YjM4NGU4ZjQ4YWMwMGRkYjYxYWFlYmZiYzc2MzIwYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwZufkxGN+m+UNwdtReGp/eostYL
+6CAbInsR/tv0xPLJzwtuJgu8e2Te+UDZWlkdnL9bu/UrfVyVuLf7c7sHrhs/0p2
Do1xt/larXGfA2fcq3rxOCoYmGfgi3PCnEZDmo6GELMj9DrG2iPxfmxccV0x4MrO
U81RFASMPzJaQqWonDCSxAGMlsu2XQDUCO1IzwMyo/8yjjRfdzVdduQwvUZlYdu4
N5vS0+n2zqkd4ub/6AkftFMCJKO3qv3sLkRIa/F/5DvapWp/HTgsQ5VXzTy0/00l
XWJ3Z5/l/AMRP+K9JegFMd7tqiLvTicOAn9nphgCwvllzVQ0TJCuNZwKXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJs1MZs4To9IrADdthquv7x2MgqmMB8GA1UdIwQY
MBaAFDYxCpWUidGsW4eWr2JuB8PxwXHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85M2Y2ZGYtYzNmNS00MDEzLWE3ZmMt
YmQ1YzNiYzExY2ZhLzEvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85M2Y2ZGYtYzNmNS00MDEzLWE3ZmMtYmQ1YzNiYzExY2Zh
LzEvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgsNgaUh
FWA9onsCwlKA1m5zCN+EOW0E013n9pKI+ELIF1qPKzm8CRV9Jdgf9onCURzBGr/6
KoxOdq0ohOsiXu6bB7BLaV3vmytYoXKBxgkg5AYxWXdeBMliFzevjRRf5okCVfNx
37rRUQCzN9f17C86ZF85Y90+tmnRAhA4O9NlqNyfwS1WKpyautF/V7F7VTKqJngG
JqJgqnRY5mX4lIFl40p3P5gWgG/NrkyGPlxOf43BzfVzAjqudgrLw1eN2d6zMqSc
rL71hcws5icitD83EIKB5UYaUfey0CKf9g/gH44N/DHAnjv3H0SuButl2og4ilB1
SsgNQHUFWiYfcg==
-----END CERTIFICATE-----