Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
File:                     n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json)
Hash identifier:          v7jHfGHmzBTUY8gnHD660AnySA5iPcf/2tTWVWurdXY=
Subject key identifier:   2B:59:9A:32:2A:68:FE:43:56:EF:E3:26:B9:5C:76:43:9B:48:B5:B2
Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92
Certificate issuer:       /CN=9ff3396374cbf5d767125f02dcf0f97296323092
Certificate serial:       01962F74E9B0CCBD9C7F63118E17D493F470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:53 +0000
Files and hashes:         1: g5PI0OIlX5tTjsen3s8hXQzEWx4.roa (hash: uE1lBW16SA+r7c4/Tg2mSsWjcv7alroQQDQoG/Ta6JA=)
                          2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: ODMfalLGQPYH1AiRzCzCtaxC6YtbuxrN+US5kKILNUo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e9:b0:cc:bd:9c:7f:63:11:8e:17:d4:93:f4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092
        Validity
            Not Before: Apr 13 14:01:53 2025 GMT
            Not After : Apr 14 14:01:53 2025 GMT
        Subject: CN=2b599a322a68fe4356efe326b95c76439b48b5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d0:81:d9:99:56:b4:f1:d7:a2:81:5a:d3:88:
                    10:40:ed:0d:df:99:d2:60:30:b1:0d:7e:f0:33:3a:
                    ea:cd:0c:3b:1d:6d:41:e6:a3:3a:f8:02:52:17:ea:
                    69:cb:85:90:e1:cc:5f:d8:b5:43:64:5e:97:8f:02:
                    69:c9:31:73:82:32:53:a0:23:50:be:f4:42:67:e0:
                    d2:a0:73:7f:bc:e4:b0:6a:ee:9a:af:7a:7b:1a:3c:
                    18:8d:65:b4:75:af:70:5b:b9:7f:82:50:38:6d:8b:
                    99:ec:65:ff:13:16:e7:70:f0:4e:85:c9:ee:99:aa:
                    b4:81:99:ef:95:33:94:2a:42:14:e7:cf:25:6b:ea:
                    ee:c7:2f:fb:9d:7f:e4:46:16:e4:15:2b:41:d0:97:
                    dc:d0:9f:2f:9e:32:8f:ad:e7:47:89:9b:a7:f3:0d:
                    7b:7f:68:e5:bc:7f:ab:07:a3:ab:81:c6:06:64:56:
                    bf:99:84:47:4f:f8:7c:2b:ce:30:c2:50:ad:cc:99:
                    43:2a:48:8a:27:2f:37:47:46:75:a8:53:82:44:a0:
                    4c:e9:38:89:b3:2d:3e:c1:88:ae:50:bc:cc:bd:c5:
                    e2:40:04:15:7f:25:d8:0a:e1:7d:61:de:1f:5e:e1:
                    fe:27:df:12:cb:f9:15:f7:7b:9a:99:19:c5:97:00:
                    1f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:59:9A:32:2A:68:FE:43:56:EF:E3:26:B9:5C:76:43:9B:48:B5:B2
            X509v3 Authority Key Identifier:
                keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0d:90:e5:1a:76:15:b6:5f:6a:d7:2f:10:02:e3:ec:d4:82:
         05:99:a7:a2:d9:a9:2d:5e:97:e1:22:0f:09:7e:5e:cb:da:e6:
         df:db:62:39:ab:0b:fb:98:76:58:ae:08:16:e6:07:49:8b:cc:
         27:88:62:15:88:92:41:75:e5:08:f5:d7:5e:aa:fd:1d:d5:18:
         14:87:35:a6:d2:99:1c:dc:69:b0:be:53:30:e2:10:c4:38:68:
         52:47:aa:7a:d2:cf:c7:b4:b2:e8:92:b9:ac:79:86:03:49:1d:
         b5:51:eb:ad:e2:b5:34:85:cd:2a:4a:82:02:a2:d5:5e:89:98:
         c6:a5:2f:64:a7:cf:5d:5a:48:69:f8:b0:38:c6:6b:1b:a9:7f:
         04:18:9c:55:39:ed:52:53:46:08:f7:b4:fe:6b:72:a1:13:c2:
         50:cb:e4:e9:f6:4a:e9:ba:6c:20:11:d7:48:68:91:27:fb:f0:
         70:e6:77:b7:0a:7b:08:c6:c9:89:ad:b4:30:7a:29:84:20:1e:
         96:d3:c0:1d:e5:74:cc:9c:4c:e4:e4:b1:23:a3:fc:b0:a4:6b:
         6f:72:a8:d7:92:fa:a5:0b:22:27:3f:48:b6:bd:8c:1c:6b:55:
         b5:66:c9:f5:81:11:e8:b1:7e:de:36:73:c7:90:cc:de:ea:34:
         0c:b1:56:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdOmwzL2cf2MRjhfUk/RwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzOTYzNzRjYmY1ZDc2NzEyNWYwMmRjZjBmOTcyOTYz
MjMwOTIwHhcNMjUwNDEzMTQwMTUzWhcNMjUwNDE0MTQwMTUzWjAzMTEwLwYDVQQD
EygyYjU5OWEzMjJhNjhmZTQzNTZlZmUzMjZiOTVjNzY0MzliNDhiNWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tCB2ZlWtPHXooFa04gQQO0N35nS
YDCxDX7wMzrqzQw7HW1B5qM6+AJSF+ppy4WQ4cxf2LVDZF6XjwJpyTFzgjJToCNQ
vvRCZ+DSoHN/vOSwau6ar3p7GjwYjWW0da9wW7l/glA4bYuZ7GX/ExbncPBOhcnu
maq0gZnvlTOUKkIU588la+ruxy/7nX/kRhbkFStB0Jfc0J8vnjKPredHiZun8w17
f2jlvH+rB6OrgcYGZFa/mYRHT/h8K84wwlCtzJlDKkiKJy83R0Z1qFOCRKBM6TiJ
sy0+wYiuULzMvcXiQAQVfyXYCuF9Yd4fXuH+J98Sy/kV93uamRnFlwAfEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtZmjIqaP5DVu/jJrlcdkObSLWyMB8GA1UdIwQY
MBaAFJ/zOWN0y/XXZxJfAtzw+XKWMjCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEt
ZTk1NTQ0ODNmZmE3LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEtZTk1NTQ0ODNmZmE3
LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkA2Q5Rp2
FbZfatcvEALj7NSCBZmnotmpLV6X4SIPCX5ey9rm39tiOasL+5h2WK4IFuYHSYvM
J4hiFYiSQXXlCPXXXqr9HdUYFIc1ptKZHNxpsL5TMOIQxDhoUkeqetLPx7Sy6JK5
rHmGA0kdtVHrreK1NIXNKkqCAqLVXomYxqUvZKfPXVpIafiwOMZrG6l/BBicVTnt
UlNGCPe0/mtyoRPCUMvk6fZK6bpsIBHXSGiRJ/vwcOZ3twp7CMbJia20MHophCAe
ltPAHeV0zJxM5OSxI6P8sKRrb3Ko15L6pQsiJz9Itr2MHGtVtWbJ9YER6LF+3jZz
x5DM3uo0DLFWnA==
-----END CERTIFICATE-----