Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
File:                     NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json)
Hash identifier:          jMCkANG0KOM2OFpykxGlXzJc4LFJQhCrKbgcfwkWVLs=
Subject key identifier:   C8:2D:51:44:92:93:1C:D8:41:BE:F2:E4:AA:D9:D6:F8:8B:C5:41:97
Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0
Certificate issuer:       /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
Certificate serial:       01962E2B480F367B35AA16838D10210F6DB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft
Manifest number:          0490
Signing time:             Sun 13 Apr 2025 08:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:50 +0000
Files and hashes:         1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: tT257mh1cgbBZMYyseqTlS6ADDrTlWkncPvlMgy5ff8=)
                          2: _RGZJkC_maX9Rk5gq7HAO40xyLk.roa (hash: UMn242+aY7D7FSfVsCmwNFJLABV4j5b5GNVt9RDj5KE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:48:0f:36:7b:35:aa:16:83:8d:10:21:0f:6d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0
        Validity
            Not Before: Apr 13 08:01:50 2025 GMT
            Not After : Apr 14 08:01:50 2025 GMT
        Subject: CN=c82d514492931cd841bef2e4aad9d6f88bc54197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4e:f4:b7:6e:d2:c8:a1:99:4a:20:a8:56:ac:
                    b6:5d:c1:95:af:bc:fb:25:09:f3:9e:bb:e2:8c:53:
                    55:0f:c2:50:a5:1b:75:dc:5a:58:55:67:c6:c0:0e:
                    d0:52:e7:37:a6:32:0c:16:d2:ad:9c:73:6a:53:ea:
                    c7:77:7f:03:39:c7:85:98:1d:b9:d9:c3:bf:4d:81:
                    69:94:3f:40:0e:b7:84:52:5d:23:ee:8c:f5:88:45:
                    cf:0b:3a:54:ab:61:fd:43:c2:e7:91:e9:a5:cf:7d:
                    20:1f:38:9a:8a:cd:2a:fa:b5:34:a8:d5:80:00:da:
                    42:9a:c4:fd:a0:bf:30:c0:07:68:50:f6:4b:89:96:
                    88:4b:d1:5d:e0:15:aa:5a:78:50:54:fa:5c:58:55:
                    c7:0e:67:19:fa:b7:9e:40:94:eb:0a:93:cd:88:dd:
                    45:4e:b8:49:d1:60:fb:34:81:ea:53:f5:da:5d:88:
                    e3:e1:b7:ff:53:2e:8d:b3:a4:8d:55:bc:bf:e7:10:
                    6f:99:e5:21:76:9e:a9:d4:94:31:45:3b:30:4a:90:
                    61:ac:43:6c:55:67:3f:a9:96:c0:d2:30:57:49:e5:
                    ae:c2:89:89:a9:8a:62:e0:bc:68:0d:56:4e:02:25:
                    d5:2e:2d:a2:d7:e7:fb:ab:22:af:41:72:76:92:9b:
                    ae:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2D:51:44:92:93:1C:D8:41:BE:F2:E4:AA:D9:D6:F8:8B:C5:41:97
            X509v3 Authority Key Identifier:
                keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:88:c8:4c:ea:3a:b5:63:7b:41:f2:e6:df:e4:2a:66:83:99:
         0f:c8:bd:26:dd:d4:86:57:7a:86:0e:39:1d:c0:9f:e4:2e:99:
         de:70:c7:e9:cb:78:6c:7b:02:9e:d5:c1:d7:87:88:b4:16:95:
         7a:fa:7f:ab:80:31:71:c3:cf:e7:b7:78:e9:77:e6:f4:d5:27:
         b7:f6:e7:af:f8:63:eb:c2:fa:41:d5:fb:fb:1d:c4:e0:2f:e4:
         49:f5:66:28:94:40:00:b5:6f:30:3a:c4:d6:4f:db:32:25:b1:
         25:bc:d9:71:c6:17:32:92:31:d2:4f:f1:ec:92:6c:d5:f8:f3:
         92:b3:77:28:99:29:11:a8:bf:9c:bb:4b:08:8e:e1:59:28:2c:
         7a:7b:0a:68:df:da:26:ef:bf:1f:ac:3a:28:d5:5e:7e:81:d2:
         8e:f0:81:2a:a5:13:cf:76:9d:31:52:5f:7e:81:3a:07:aa:ba:
         83:8b:8d:c6:e1:78:3c:f4:ef:2d:26:03:f1:b9:7d:df:81:65:
         83:2d:c6:c8:94:cd:47:93:8a:44:61:af:e3:63:d3:7a:b3:6f:
         da:58:51:a4:8a:14:de:82:45:bf:88:8f:55:db:1a:ef:4c:78:
         9b:d7:5e:43:d8:c6:05:c7:fc:38:4c:4b:5d:31:24:85:e1:04:
         bb:49:52:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0gPNns1qhaDjRAhD22yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MGU1MzAxNGJmMDM4YWRlMGQ3N2FlNjc4ZmY2ZGYzNGNh
NTNkYzAwHhcNMjUwNDEzMDgwMTUwWhcNMjUwNDE0MDgwMTUwWjAzMTEwLwYDVQQD
EyhjODJkNTE0NDkyOTMxY2Q4NDFiZWYyZTRhYWQ5ZDZmODhiYzU0MTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxE70t27SyKGZSiCoVqy2XcGVr7z7
JQnznrvijFNVD8JQpRt13FpYVWfGwA7QUuc3pjIMFtKtnHNqU+rHd38DOceFmB25
2cO/TYFplD9ADreEUl0j7oz1iEXPCzpUq2H9Q8Lnkemlz30gHziais0q+rU0qNWA
ANpCmsT9oL8wwAdoUPZLiZaIS9Fd4BWqWnhQVPpcWFXHDmcZ+reeQJTrCpPNiN1F
TrhJ0WD7NIHqU/XaXYjj4bf/Uy6Ns6SNVby/5xBvmeUhdp6p1JQxRTswSpBhrENs
VWc/qZbA0jBXSeWuwomJqYpi4LxoDVZOAiXVLi2i1+f7qyKvQXJ2kpuuWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgtUUSSkxzYQb7y5KrZ1viLxUGXMB8GA1UdIwQY
MBaAFDQOUwFL8Dit4Nd65nj/bfNMpT3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNjA4MjgtODhkYi00ZTNiLTlhNDct
ZTE0ODIzNWI3NzIzLzEvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lNjA4MjgtODhkYi00ZTNiLTlhNDctZTE0ODIzNWI3NzIz
LzEvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARojITOo6
tWN7QfLm3+QqZoOZD8i9Jt3Uhld6hg45HcCf5C6Z3nDH6ct4bHsCntXB14eItBaV
evp/q4AxccPP57d46Xfm9NUnt/bnr/hj68L6QdX7+x3E4C/kSfVmKJRAALVvMDrE
1k/bMiWxJbzZccYXMpIx0k/x7JJs1fjzkrN3KJkpEai/nLtLCI7hWSgsensKaN/a
Ju+/H6w6KNVefoHSjvCBKqUTz3adMVJffoE6B6q6g4uNxuF4PPTvLSYD8bl934Fl
gy3GyJTNR5OKRGGv42PTerNv2lhRpIoU3oJFv4iPVdsa70x4m9deQ9jGBcf8OExL
XTEkheEEu0lSeA==
-----END CERTIFICATE-----