Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
File:                     NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft (raw, json)
Hash identifier:          DEqwEyRRE50cdrXX2AxjWLezWBi1GVzRfXRNZQrhIH4=
Subject key identifier:   5A:42:8C:C3:CD:03:AF:63:14:90:F3:0B:01:23:BA:0B:AA:9B:EE:E7
Authority key identifier: 36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57
Certificate issuer:       /CN=36d8c1a73b1595109d26067b4291f71dc1db9957
Certificate serial:       01962F7443593AED8DC65AC84808F2FC39FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft
Manifest number:          0EF6
Signing time:             Sun 13 Apr 2025 14:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:10 +0000
Files and hashes:         1: NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl (hash: Ljdxyj790mxJTzQf3mlEjfCxaWu+UA9/R59D8w4f/Rs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:43:59:3a:ed:8d:c6:5a:c8:48:08:f2:fc:39:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d8c1a73b1595109d26067b4291f71dc1db9957
        Validity
            Not Before: Apr 13 14:01:10 2025 GMT
            Not After : Apr 14 14:01:10 2025 GMT
        Subject: CN=5a428cc3cd03af631490f30b0123ba0baa9beee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ab:fd:8e:c2:36:55:6a:61:43:14:71:8d:b9:
                    17:d4:65:63:50:eb:22:01:89:07:fb:90:4f:86:45:
                    98:d9:d8:35:1e:67:1a:64:18:7c:98:62:f6:51:05:
                    2c:99:1d:82:dd:bf:a8:0e:ac:b3:cd:36:f5:6e:62:
                    9d:79:f9:50:e4:2f:74:f6:dd:1b:04:b9:f5:86:66:
                    a0:bc:29:89:59:cd:8c:77:42:dd:52:75:dc:8a:2e:
                    40:44:fa:fd:95:c5:02:7d:91:31:30:ad:71:62:a6:
                    96:33:cd:43:1f:5f:7e:cd:bd:8e:c0:e4:6f:df:7a:
                    92:d4:e3:2c:01:1a:71:46:25:31:64:4b:86:35:0b:
                    ec:08:e3:36:db:51:06:04:a1:ce:8e:cf:6e:0f:33:
                    62:ab:74:fd:8f:04:aa:37:2e:d7:25:07:52:d3:3e:
                    a3:fa:cb:c2:8d:2d:24:5b:c4:b3:7a:a9:a8:3b:0f:
                    9e:b1:1e:21:e6:91:cc:75:00:05:68:ba:83:14:f7:
                    7a:c7:c5:09:bc:ee:3e:9a:3c:3f:23:ee:e6:01:13:
                    99:92:6e:73:a1:4c:df:a9:8a:20:35:65:56:64:8c:
                    34:3d:f7:98:42:22:ae:6d:61:2b:e7:2b:c0:65:83:
                    48:70:7b:e1:c3:07:bc:5f:57:04:cb:56:72:ab:1d:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:42:8C:C3:CD:03:AF:63:14:90:F3:0B:01:23:BA:0B:AA:9B:EE:E7
            X509v3 Authority Key Identifier:
                keyid:36:D8:C1:A7:3B:15:95:10:9D:26:06:7B:42:91:F7:1D:C1:DB:99:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/eecca5-c339-4918-a0a8-f61ec85d0f57/1/NtjBpzsVlRCdJgZ7QpH3HcHbmVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:2c:8d:60:1d:ac:c5:1b:3d:8e:42:3d:5f:74:7c:b9:ae:9f:
         34:9f:3d:f9:a9:0a:c6:5c:d7:cf:20:05:6f:21:38:52:92:e6:
         8f:67:4f:ac:e4:e4:a2:77:51:90:78:f9:67:8b:12:62:bb:46:
         ba:36:07:98:f3:de:86:6c:e9:69:f7:b9:ff:bf:1e:3a:cd:17:
         a4:27:ea:2d:9f:c1:73:b8:b4:22:76:df:cc:c8:2f:e7:73:9a:
         84:cb:cf:c4:08:78:a7:8d:4c:58:b4:4b:36:02:b3:1d:79:8b:
         83:94:91:e4:c3:ea:a3:9d:0a:e6:a2:70:83:a5:90:e3:7d:38:
         43:49:ff:bd:67:39:c8:06:29:16:f9:7c:0e:51:6f:d7:51:23:
         ae:2b:dd:6a:3a:a8:96:85:3d:b6:0f:f8:09:35:79:fa:0c:9b:
         d3:c2:ba:6f:f0:cf:57:ad:90:64:43:14:b7:1a:70:65:c4:68:
         88:bd:3e:58:8b:d5:84:2c:c4:60:c9:8e:e0:1a:6f:73:9c:1c:
         a8:6c:fd:90:c5:ba:74:e1:de:a3:be:11:80:3e:f0:30:4f:91:
         0f:d3:03:b9:c8:e7:e8:65:ad:ef:a1:63:53:f9:c8:d5:a9:42:
         c4:0c:30:ea:4a:8c:b7:fc:b2:c9:15:b4:07:64:54:e6:82:c1:
         79:ab:b2:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdENZOu2NxlrISAjy/Dn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZDhjMWE3M2IxNTk1MTA5ZDI2MDY3YjQyOTFmNzFkYzFk
Yjk5NTcwHhcNMjUwNDEzMTQwMTEwWhcNMjUwNDE0MTQwMTEwWjAzMTEwLwYDVQQD
Eyg1YTQyOGNjM2NkMDNhZjYzMTQ5MGYzMGIwMTIzYmEwYmFhOWJlZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qv9jsI2VWphQxRxjbkX1GVjUOsi
AYkH+5BPhkWY2dg1HmcaZBh8mGL2UQUsmR2C3b+oDqyzzTb1bmKdeflQ5C909t0b
BLn1hmagvCmJWc2Md0LdUnXcii5ARPr9lcUCfZExMK1xYqaWM81DH19+zb2OwORv
33qS1OMsARpxRiUxZEuGNQvsCOM221EGBKHOjs9uDzNiq3T9jwSqNy7XJQdS0z6j
+svCjS0kW8SzeqmoOw+esR4h5pHMdQAFaLqDFPd6x8UJvO4+mjw/I+7mAROZkm5z
oUzfqYogNWVWZIw0PfeYQiKubWEr5yvAZYNIcHvhwwe8X1cEy1Zyqx2TkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpCjMPNA69jFJDzCwEjuguqm+7nMB8GA1UdIwQY
MBaAFDbYwac7FZUQnSYGe0KR9x3B25lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lZWNjYTUtYzMzOS00OTE4LWEwYTgt
ZjYxZWM4NWQwZjU3LzEvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lZWNjYTUtYzMzOS00OTE4LWEwYTgtZjYxZWM4NWQwZjU3
LzEvTnRqQnB6c1ZsUkNkSmdaN1FwSDNIY0hibVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACyNYB2s
xRs9jkI9X3R8ua6fNJ89+akKxlzXzyAFbyE4UpLmj2dPrOTkondRkHj5Z4sSYrtG
ujYHmPPehmzpafe5/78eOs0XpCfqLZ/Bc7i0InbfzMgv53OahMvPxAh4p41MWLRL
NgKzHXmLg5SR5MPqo50K5qJwg6WQ4304Q0n/vWc5yAYpFvl8DlFv11Ejrivdajqo
loU9tg/4CTV5+gyb08K6b/DPV62QZEMUtxpwZcRoiL0+WIvVhCzEYMmO4Bpvc5wc
qGz9kMW6dOHeo74RgD7wME+RD9MDucjn6GWt76FjU/nI1alCxAww6kqMt/yyyRW0
B2RU5oLBeauypg==
-----END CERTIFICATE-----