Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
File:                     nrUOU4bICaD65lMKpejZglJR3tA.mft (raw, json)
Hash identifier:          pWi16NiNXG4dT8ZMk1DPIkdnq1qzoPMWmhu2tzIQlGA=
Subject key identifier:   28:EC:E7:7B:A9:35:1E:1F:03:41:57:1B:F3:DE:C4:F1:8E:94:1B:1F
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Certificate issuer:       /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial:       01962E9860B4B9473121E9416BD645C08691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft
Manifest number:          092A
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: 6uPmSDff0EByzvtRkRIDzvcq-WU.roa (hash: zK2w8TbS49/+wZDp3eKjJMQhyK44gX7SwMqwg25dCxg=)
                          2: LUnk__H52Ka1UZQ74SFwt2XYOA0.roa (hash: STMUNAtIYTQ2D1f5QvDk6ta50/b1jlAx1bvn490hmQY=)
                          3: nrUOU4bICaD65lMKpejZglJR3tA.crl (hash: 1f5XxQTRG5X0JM8enToOph8AUG/uqN8mKkdjTEpKYkc=)
                          4: zMxPbRYvgl17LWHJg6U2GAicFt8.roa (hash: sMyOqb6B8V6aN1rTXFXBnVwwrNvJedSQ2XdYFSUKdwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:60:b4:b9:47:31:21:e9:41:6b:d6:45:c0:86:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=28ece77ba9351e1f0341571bf3dec4f18e941b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8d:fc:aa:e3:6d:e3:22:6c:88:2e:45:8b:8a:
                    fc:7d:3b:dc:59:9f:2a:9a:7f:9e:67:18:e2:a6:07:
                    23:7b:8b:4b:82:06:2c:5a:5a:cb:07:6b:9e:4e:73:
                    78:22:b8:20:0c:4d:c7:69:69:5f:4e:4f:30:a6:42:
                    eb:b2:45:d8:aa:c0:95:ab:3a:0e:5a:74:7f:86:d3:
                    00:33:95:2d:25:c5:74:dd:14:76:7e:8c:70:ff:9a:
                    d8:cc:7e:02:5a:15:a6:88:1a:a4:00:22:7b:d6:86:
                    ab:45:cb:52:18:eb:1a:0f:d4:f9:b5:68:5f:d6:e8:
                    90:90:41:08:a8:32:c4:01:5e:a3:a1:53:f8:3b:d2:
                    9a:fa:27:ba:12:bf:f3:3f:0e:4c:5f:5c:7d:ae:dc:
                    48:8b:d8:88:99:72:b7:fe:24:01:f0:dd:55:fd:d4:
                    8c:7d:c8:fb:04:07:dd:ba:02:2a:3f:7e:16:d7:61:
                    4f:94:4e:de:0a:78:8b:cc:21:a1:40:56:ff:ef:de:
                    f3:2d:d8:3b:69:b3:9e:08:fb:2a:f6:b1:5d:c6:11:
                    b8:6b:af:1c:bc:54:83:ef:96:9e:ed:b5:c0:86:d4:
                    c9:5e:bb:08:31:9d:c3:98:5a:90:24:1b:a9:7c:ab:
                    21:21:2e:3c:04:1b:10:8e:03:5b:60:4d:e9:c8:26:
                    48:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EC:E7:7B:A9:35:1E:1F:03:41:57:1B:F3:DE:C4:F1:8E:94:1B:1F
            X509v3 Authority Key Identifier:
                keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ee:5e:d6:4f:3e:bc:fc:b2:ac:98:59:ba:88:05:c5:70:86:
         ea:35:f9:28:72:76:65:ed:57:50:3a:d5:57:9b:ab:30:9c:6e:
         2b:96:68:aa:b5:ff:d0:4e:ad:d8:52:46:e0:b1:23:6f:bb:b7:
         d2:93:ec:44:99:ec:5f:07:a5:0c:3a:ac:57:09:f5:50:31:f2:
         b0:10:2f:3f:d1:27:22:57:18:ec:5b:fb:0d:f1:a9:c6:42:2d:
         69:b3:8e:b2:ec:fc:56:95:37:8e:6a:2e:ee:19:ff:00:ab:84:
         f5:19:c1:6b:05:52:96:4c:b1:48:fd:1f:eb:f0:38:a9:cf:5f:
         5e:50:6b:b5:89:84:bd:1d:02:56:3f:5f:8e:ac:50:ce:ff:54:
         3c:b8:6d:a7:fd:93:92:ed:bd:15:c6:fa:4e:75:98:5c:07:d5:
         47:f2:01:a7:68:1f:cd:c9:c0:ee:f3:44:2b:ec:09:40:db:c7:
         50:b6:fa:f2:8a:5a:37:b4:88:2b:8e:31:92:21:8a:d9:30:50:
         46:52:68:11:1c:ca:42:d7:3b:60:fe:13:93:31:0a:4b:a2:22:
         09:6d:9d:57:b0:8a:4f:ad:f6:6c:cb:f9:b6:f7:d8:ab:68:9e:
         5a:be:00:01:f8:f7:9d:56:9e:0f:3b:c2:0a:01:92:4d:57:9e:
         a0:ab:54:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumGC0uUcxIelBa9ZFwIaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjUwNDEzMTAwMTAwWhcNMjUwNDE0MTAwMTAwWjAzMTEwLwYDVQQD
EygyOGVjZTc3YmE5MzUxZTFmMDM0MTU3MWJmM2RlYzRmMThlOTQxYjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI38quNt4yJsiC5Fi4r8fTvcWZ8q
mn+eZxjipgcje4tLggYsWlrLB2ueTnN4IrggDE3HaWlfTk8wpkLrskXYqsCVqzoO
WnR/htMAM5UtJcV03RR2foxw/5rYzH4CWhWmiBqkACJ71oarRctSGOsaD9T5tWhf
1uiQkEEIqDLEAV6joVP4O9Ka+ie6Er/zPw5MX1x9rtxIi9iImXK3/iQB8N1V/dSM
fcj7BAfdugIqP34W12FPlE7eCniLzCGhQFb/797zLdg7abOeCPsq9rFdxhG4a68c
vFSD75ae7bXAhtTJXrsIMZ3DmFqQJBupfKshIS48BBsQjgNbYE3pyCZIFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjs53upNR4fA0FXG/PexPGOlBsfMB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxe5e1k8+
vPyyrJhZuogFxXCG6jX5KHJ2Ze1XUDrVV5urMJxuK5ZoqrX/0E6t2FJG4LEjb7u3
0pPsRJnsXwelDDqsVwn1UDHysBAvP9EnIlcY7Fv7DfGpxkItabOOsuz8VpU3jmou
7hn/AKuE9RnBawVSlkyxSP0f6/A4qc9fXlBrtYmEvR0CVj9fjqxQzv9UPLhtp/2T
ku29Fcb6TnWYXAfVR/IBp2gfzcnA7vNEK+wJQNvHULb68opaN7SIK44xkiGK2TBQ
RlJoERzKQtc7YP4TkzEKS6IiCW2dV7CKT632bMv5tvfYq2ieWr4AAfj3nVaeDzvC
CgGSTVeeoKtU2g==
-----END CERTIFICATE-----