Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
File:                     NHoE4awkx5d2NHg55RNMmqo4v1c.mft (raw, json)
Hash identifier:          IyPerJj+cXPukkVAAckv6va+FlZcZq4uU5s3nMbkPto=
Subject key identifier:   47:00:DF:EF:2E:51:AD:BA:3C:A3:1C:37:18:D1:44:E7:83:94:47:D6
Authority key identifier: 34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57
Certificate issuer:       /CN=347a04e1ac24c79776347839e5134c9aaa38bf57
Certificate serial:       01962F069167284C50BADAC2FF50C357FBA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft
Manifest number:          102F
Signing time:             Sun 13 Apr 2025 12:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:21 +0000
Files and hashes:         1: NHoE4awkx5d2NHg55RNMmqo4v1c.crl (hash: m60/dNn9MQtFp/3LBbv6tKNszEVy5TGiLRKicZZoCqs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:91:67:28:4c:50:ba:da:c2:ff:50:c3:57:fb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347a04e1ac24c79776347839e5134c9aaa38bf57
        Validity
            Not Before: Apr 13 12:01:21 2025 GMT
            Not After : Apr 14 12:01:21 2025 GMT
        Subject: CN=4700dfef2e51adba3ca31c3718d144e7839447d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:ca:f8:3f:f8:af:cd:3d:d3:7d:24:d2:a1:
                    9a:4c:f3:7b:d3:41:47:0a:c0:0c:b3:ec:88:de:4b:
                    06:2f:4f:28:6c:ad:3e:25:04:4e:3d:eb:5a:d4:7a:
                    4a:68:b7:48:cd:da:34:97:33:9d:33:47:f1:79:0f:
                    15:4c:d4:53:1c:ea:1e:14:e7:df:d7:48:27:20:43:
                    3c:80:27:ad:31:a3:c4:1d:8a:f7:1d:61:c2:e2:20:
                    c8:4d:ea:8f:bf:fc:06:c1:e3:2a:65:89:28:65:c6:
                    bc:3c:ee:5a:7c:70:01:0f:ea:14:4c:b0:1b:8d:85:
                    45:3b:53:34:90:94:3d:ca:2d:68:38:37:1d:97:98:
                    e9:90:a8:1f:d0:57:bf:00:6f:b2:4c:9f:d8:05:23:
                    0b:d6:71:70:cc:d6:65:05:d1:82:25:40:43:3e:4d:
                    99:9a:0e:ea:2a:b5:6a:9a:0d:d5:0c:07:ff:b4:b0:
                    b2:3d:b0:cd:94:00:19:06:df:30:e3:f4:35:21:02:
                    20:16:2e:32:10:aa:83:2c:7b:af:d7:35:8d:2e:52:
                    d7:80:00:a8:7e:34:d7:75:c7:84:58:3e:a5:54:1a:
                    6d:57:a7:bd:54:61:15:0a:33:52:9b:5e:79:b1:ef:
                    72:54:1f:d8:87:46:af:b6:95:09:e9:3f:70:24:6a:
                    d9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:00:DF:EF:2E:51:AD:BA:3C:A3:1C:37:18:D1:44:E7:83:94:47:D6
            X509v3 Authority Key Identifier:
                keyid:34:7A:04:E1:AC:24:C7:97:76:34:78:39:E5:13:4C:9A:AA:38:BF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHoE4awkx5d2NHg55RNMmqo4v1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/fac86b-ff06-4888-838d-c44974add230/1/NHoE4awkx5d2NHg55RNMmqo4v1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:24:dc:93:5c:be:3d:8b:a6:26:5f:80:88:c0:db:c0:26:44:
         29:72:22:80:09:43:16:70:60:85:a4:8c:63:1f:96:fb:00:47:
         7f:9d:67:e6:5b:9b:98:34:a4:65:39:da:5b:aa:fb:b1:3d:aa:
         70:0b:2d:ad:5d:29:24:e1:9b:85:c9:3c:67:4f:3b:9d:ef:98:
         8a:82:4c:bb:3a:ea:12:3f:65:84:39:19:47:a7:51:d2:93:5e:
         ee:fd:fd:06:21:1f:cc:54:c6:0b:78:6e:f9:05:93:59:45:bd:
         b5:90:ff:51:e4:a1:f9:f1:44:30:71:b2:44:aa:e7:5d:5e:33:
         18:e4:fd:cb:ba:df:1d:21:ba:78:77:a5:82:49:b9:c1:b3:03:
         74:fc:0a:c3:5e:2b:ff:d1:9e:b9:0d:a2:d1:2d:03:c1:db:4b:
         58:3a:a5:e3:df:f5:4d:3b:9f:bf:85:de:d0:15:26:02:71:30:
         78:b3:db:6f:dc:38:17:e1:ec:19:69:e5:24:24:8b:dc:fb:02:
         e1:e8:3c:72:40:5a:61:c8:5a:a7:8a:c0:57:60:ba:c5:c4:a0:
         37:24:aa:dd:d3:7d:93:2c:3e:c3:2a:16:f5:87:05:ed:4c:ae:
         d5:7c:24:5e:38:a1:d7:cb:60:77:fe:27:c9:96:4b:64:62:92:
         f9:94:3d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpFnKExQutrC/1DDV/ugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0N2EwNGUxYWMyNGM3OTc3NjM0NzgzOWU1MTM0YzlhYWEz
OGJmNTcwHhcNMjUwNDEzMTIwMTIxWhcNMjUwNDE0MTIwMTIxWjAzMTEwLwYDVQQD
Eyg0NzAwZGZlZjJlNTFhZGJhM2NhMzFjMzcxOGQxNDRlNzgzOTQ0N2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5fK+D/4r809030k0qGaTPN700FH
CsAMs+yI3ksGL08obK0+JQROPeta1HpKaLdIzdo0lzOdM0fxeQ8VTNRTHOoeFOff
10gnIEM8gCetMaPEHYr3HWHC4iDITeqPv/wGweMqZYkoZca8PO5afHABD+oUTLAb
jYVFO1M0kJQ9yi1oODcdl5jpkKgf0Fe/AG+yTJ/YBSML1nFwzNZlBdGCJUBDPk2Z
mg7qKrVqmg3VDAf/tLCyPbDNlAAZBt8w4/Q1IQIgFi4yEKqDLHuv1zWNLlLXgACo
fjTXdceEWD6lVBptV6e9VGEVCjNSm155se9yVB/Yh0avtpUJ6T9wJGrZ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcA3+8uUa26PKMcNxjRROeDlEfWMB8GA1UdIwQY
MBaAFDR6BOGsJMeXdjR4OeUTTJqqOL9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mYWM4NmItZmYwNi00ODg4LTgzOGQt
YzQ0OTc0YWRkMjMwLzEvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mYWM4NmItZmYwNi00ODg4LTgzOGQtYzQ0OTc0YWRkMjMw
LzEvTkhvRTRhd2t4NWQyTkhnNTVSTk1tcW80djFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCTck1y+
PYumJl+AiMDbwCZEKXIigAlDFnBghaSMYx+W+wBHf51n5lubmDSkZTnaW6r7sT2q
cAstrV0pJOGbhck8Z087ne+YioJMuzrqEj9lhDkZR6dR0pNe7v39BiEfzFTGC3hu
+QWTWUW9tZD/UeSh+fFEMHGyRKrnXV4zGOT9y7rfHSG6eHelgkm5wbMDdPwKw14r
/9GeuQ2i0S0DwdtLWDql49/1TTufv4Xe0BUmAnEweLPbb9w4F+HsGWnlJCSL3PsC
4eg8ckBaYchap4rAV2C6xcSgNySq3dN9kyw+wyoW9YcF7Uyu1XwkXjih18tgd/4n
yZZLZGKS+ZQ95Q==
-----END CERTIFICATE-----