Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
File:                     nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft (raw, json)
Hash identifier:          E7v1UKSYrOL0bo2iaitovHR3T3bQaBJWoLE84XrSda0=
Subject key identifier:   D0:EB:7B:79:EF:05:5B:50:B1:4C:C1:BA:61:A7:39:79:A9:2F:EA:65
Authority key identifier: 9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04
Certificate issuer:       /CN=9e42ca46688a837b575234ce6a1a326587d6c204
Certificate serial:       01962DF41EEAA958FDCDAFCD00D92792DD68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft
Manifest number:          0F8D
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: 2sz7XXaQR044rc-q4fD0WIzUxYQ.roa (hash: pi07prhyU4hZ/cG1dB+HetMAgpuPmtLhNCb2plULwQE=)
                          2: D2HSpId2VYXPjhlDPg7eWeC18Pw.roa (hash: UXPvVbmh0MzKjV4UFrcu58vEq8RZqO0eg1YthASI72I=)
                          3: UnUG9yNZwHFtxPW6hAKjubIbusM.roa (hash: xsmRUWemFAWw0xMxDEpqyiLbWsqfijBX0AOIJJiaM5U=)
                          4: nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl (hash: lhvytNavld0V3nK46Ans2l/wHSXBE5nlZD+kJTaa4FQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1e:ea:a9:58:fd:cd:af:cd:00:d9:27:92:dd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e42ca46688a837b575234ce6a1a326587d6c204
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=d0eb7b79ef055b50b14cc1ba61a73979a92fea65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:7b:31:de:f5:25:af:1d:45:06:c0:29:86:
                    73:58:fb:60:54:48:83:d0:08:8e:e4:60:c0:34:f6:
                    93:2a:e5:44:3a:16:df:a7:f1:b5:4c:b9:e4:d2:f5:
                    a2:00:17:18:98:a6:57:70:de:bd:60:7b:8a:a4:13:
                    2b:33:3f:5d:a2:97:4a:da:d7:8b:ae:a8:90:49:4b:
                    61:fc:b1:53:8e:2a:4f:84:8a:6e:1f:ed:4f:82:fe:
                    2d:52:47:1c:88:98:88:dc:24:fe:6c:79:e4:67:11:
                    18:6c:58:9c:73:29:f2:36:a6:ab:dc:8f:58:6d:c2:
                    52:7b:ed:5d:84:ac:19:be:1e:c4:76:b2:66:aa:b2:
                    c8:1f:a4:d9:59:91:05:b7:31:a0:72:ef:6e:5d:3a:
                    5c:de:90:5b:7b:9c:f0:c0:1d:9a:05:5d:bb:4b:cb:
                    54:94:2d:0a:4b:46:10:c5:1f:eb:4e:d6:90:3e:68:
                    56:33:c1:3f:f2:e2:5a:ae:29:48:89:79:a6:ab:33:
                    a4:e5:13:8a:8c:e0:36:81:0d:82:3d:5d:74:42:57:
                    1c:ae:d3:09:66:7b:13:ed:96:df:b0:75:f5:1f:b8:
                    d7:67:b4:ee:03:3a:94:6b:9c:a7:b5:7f:ba:9b:9f:
                    74:86:18:e3:5d:37:4e:d3:fd:49:cd:5e:d3:ae:78:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EB:7B:79:EF:05:5B:50:B1:4C:C1:BA:61:A7:39:79:A9:2F:EA:65
            X509v3 Authority Key Identifier:
                keyid:9E:42:CA:46:68:8A:83:7B:57:52:34:CE:6A:1A:32:65:87:D6:C2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkLKRmiKg3tXUjTOahoyZYfWwgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ee2793-a0c9-42dc-a6a2-329ba388b7cf/1/nkLKRmiKg3tXUjTOahoyZYfWwgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:be:41:56:01:59:bd:d7:77:53:fe:78:ac:f1:1d:87:64:25:
         96:cf:37:67:03:9a:e0:ec:81:49:dd:56:8e:27:37:a9:15:7a:
         2f:9f:58:85:bc:56:7d:4e:f9:16:0c:e0:88:f9:f7:9f:67:66:
         5d:81:be:60:78:9d:28:5b:1f:eb:ef:0b:5e:01:a9:3c:0f:b3:
         e9:02:22:f2:f0:8b:2d:b5:21:ee:6b:78:22:1a:c7:68:e8:af:
         6b:6c:9e:64:a5:78:63:1a:97:f9:64:64:bf:87:47:cf:14:40:
         b3:c2:cf:fa:05:14:57:39:42:72:4f:65:db:78:a3:5b:00:0e:
         93:d7:f2:b4:c2:1e:0d:b0:c1:55:51:96:34:00:74:34:ad:5f:
         ed:b7:01:98:8b:74:6d:ee:69:10:98:7f:48:02:16:d5:23:5a:
         63:27:bf:b7:2a:0b:28:59:a6:8d:2c:95:90:a5:5d:98:07:c0:
         d2:25:f9:14:56:97:d2:bd:a3:c9:3d:58:d4:25:c0:d9:72:dc:
         43:06:9a:43:67:3e:7b:6e:06:f6:a8:52:d5:07:15:ff:7a:bb:
         15:ac:eb:b1:5b:29:7c:59:b8:78:7f:7e:9e:ff:a8:19:e0:89:
         13:77:a4:75:07:ee:4a:28:4f:17:f6:9a:7b:a1:a6:c8:2f:8c:
         0a:6f:5f:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9B7qqVj9za/NANknkt1oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDJjYTQ2Njg4YTgzN2I1NzUyMzRjZTZhMWEzMjY1ODdk
NmMyMDQwHhcNMjUwNDEzMDcwMTM1WhcNMjUwNDE0MDcwMTM1WjAzMTEwLwYDVQQD
EyhkMGViN2I3OWVmMDU1YjUwYjE0Y2MxYmE2MWE3Mzk3OWE5MmZlYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9R7Md71Ja8dRQbAKYZzWPtgVEiD
0AiO5GDANPaTKuVEOhbfp/G1TLnk0vWiABcYmKZXcN69YHuKpBMrMz9dopdK2teL
rqiQSUth/LFTjipPhIpuH+1Pgv4tUkcciJiI3CT+bHnkZxEYbFiccynyNqar3I9Y
bcJSe+1dhKwZvh7EdrJmqrLIH6TZWZEFtzGgcu9uXTpc3pBbe5zwwB2aBV27S8tU
lC0KS0YQxR/rTtaQPmhWM8E/8uJarilIiXmmqzOk5ROKjOA2gQ2CPV10QlccrtMJ
ZnsT7ZbfsHX1H7jXZ7TuAzqUa5yntX+6m590hhjjXTdO0/1JzV7TrnhJ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDre3nvBVtQsUzBumGnOXmpL+plMB8GA1UdIwQY
MBaAFJ5CykZoioN7V1I0zmoaMmWH1sIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTIt
MzI5YmEzODhiN2NmLzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lZTI3OTMtYTBjOS00MmRjLWE2YTItMzI5YmEzODhiN2Nm
LzEvbmtMS1JtaUtnM3RYVWpUT2Fob3laWWZXd2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEr5BVgFZ
vdd3U/54rPEdh2Qlls83ZwOa4OyBSd1Wjic3qRV6L59YhbxWfU75FgzgiPn3n2dm
XYG+YHidKFsf6+8LXgGpPA+z6QIi8vCLLbUh7mt4IhrHaOiva2yeZKV4YxqX+WRk
v4dHzxRAs8LP+gUUVzlCck9l23ijWwAOk9fytMIeDbDBVVGWNAB0NK1f7bcBmIt0
be5pEJh/SAIW1SNaYye/tyoLKFmmjSyVkKVdmAfA0iX5FFaX0r2jyT1Y1CXA2XLc
QwaaQ2c+e24G9qhS1QcV/3q7FazrsVspfFm4eH9+nv+oGeCJE3ekdQfuSihPF/aa
e6GmyC+MCm9fiA==
-----END CERTIFICATE-----