Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File:                     rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier:          IvU2vY3ELeEbtG7n0IRPjkPcRfVOMujLaZof5pG6V4o=
Subject key identifier:   A8:A5:B9:12:88:E9:71:90:CE:1B:0A:82:F1:6A:E5:04:65:C5:F1:5D
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer:       /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial:       01962F741BF3C223D60EFFFDB2E7C0596A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number:          0B79
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: FE0N8Kmo4OQXkTM86cmuHztqlpc.roa (hash: SAO+tGk+RLFdSMx2iDPle0Zv+2Ko3C4/o12jLuDIkhw=)
                          2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: fww00YbLGMGPl85Wy4kMoN6+YDYWwHr7ps991rT3HE0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1b:f3:c2:23:d6:0e:ff:fd:b2:e7:c0:59:6a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=a8a5b91288e97190ce1b0a82f16ae50465c5f15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f2:09:7c:74:0d:b4:55:f0:c2:cb:3a:13:8d:
                    88:b4:e1:8b:4a:4a:8e:c3:3a:b9:b9:e8:00:82:f8:
                    25:db:a6:03:07:fb:47:1d:b5:e3:d8:f9:48:2e:1e:
                    96:e3:31:6d:cd:fa:a3:d6:a4:68:74:e6:31:41:c1:
                    aa:46:a2:9a:ca:e9:ee:77:98:66:c4:a6:75:24:cf:
                    e3:9c:65:c0:c6:f0:95:19:f3:83:85:ef:67:f0:7d:
                    b3:0e:bb:61:d0:74:4b:72:33:9b:02:9c:8a:43:08:
                    49:7e:78:6d:d0:a2:32:67:5b:72:0b:b1:d1:9c:6b:
                    aa:a4:6b:6c:27:b2:15:05:8f:bd:63:26:66:9f:f9:
                    f9:55:46:f5:55:70:06:dc:92:25:bb:fd:ec:b6:cc:
                    5f:b4:7d:46:2a:b4:a5:97:6d:dd:24:5c:29:e3:17:
                    c9:85:84:b6:02:1a:bb:1c:b4:c9:d2:da:27:63:ca:
                    9d:03:bd:23:ac:81:4a:ac:7f:b6:68:ac:da:3a:a6:
                    a8:2b:de:0e:53:d7:0d:4a:2d:97:a3:33:d1:c1:99:
                    ce:0e:c7:00:81:e4:4a:9a:46:df:31:9b:3e:d6:17:
                    a3:33:d6:92:ec:ba:92:8a:61:1f:42:55:a8:51:14:
                    04:1d:70:22:a8:2b:65:e3:b6:58:28:2a:6d:06:eb:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A5:B9:12:88:E9:71:90:CE:1B:0A:82:F1:6A:E5:04:65:C5:F1:5D
            X509v3 Authority Key Identifier:
                keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ab:ac:57:bc:26:c5:fb:f5:63:08:d9:c7:97:29:84:6c:9f:
         3a:0b:06:1c:27:36:af:71:ee:91:1d:8f:e7:bb:45:18:bb:16:
         0a:44:82:92:ba:12:c8:38:5c:2a:c7:28:c8:b4:4f:47:e6:35:
         a7:d6:ab:9b:94:f0:4f:68:de:fe:36:20:b1:8c:50:f8:3f:3b:
         52:41:bc:b0:4e:87:b8:05:c3:c0:c6:74:53:19:05:8c:19:3f:
         f2:67:ce:ec:bf:e8:78:20:84:8b:bf:0e:49:4a:d5:95:e6:98:
         7a:a3:98:60:1d:2b:fc:a6:7a:62:2e:e0:ae:aa:c3:d3:13:27:
         e1:94:40:ac:04:37:ac:8f:c2:ff:5c:6e:a0:5b:a0:58:7c:93:
         1a:f4:25:be:a6:22:a0:55:f2:d1:01:73:fc:15:9f:1d:ed:46:
         e6:db:7b:2e:46:f6:30:a9:c5:22:75:14:25:c4:8b:68:d6:bc:
         74:f3:ef:c6:1e:b8:11:1a:39:23:10:d1:a8:5f:d2:c5:23:58:
         44:e6:22:68:10:be:4b:55:fc:5c:7f:d8:6d:56:f4:e4:00:a3:
         1a:9b:25:cb:09:fa:b5:1d:fc:e3:51:e7:d9:52:a2:e9:e5:3a:
         e4:18:2f:80:31:73:43:02:0b:be:82:54:bd:5b:d3:6a:de:3a:
         76:21:83:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBvzwiPWDv/9sufAWWouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMWZmZjllYjBjZjRjMGJhNzgxNGUzMjJlYzhlMDNkNGYx
ZjA3MTgwHhcNMjUwNDEzMTQwMTAwWhcNMjUwNDE0MTQwMTAwWjAzMTEwLwYDVQQD
EyhhOGE1YjkxMjg4ZTk3MTkwY2UxYjBhODJmMTZhZTUwNDY1YzVmMTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfIJfHQNtFXwwss6E42ItOGLSkqO
wzq5uegAgvgl26YDB/tHHbXj2PlILh6W4zFtzfqj1qRodOYxQcGqRqKayunud5hm
xKZ1JM/jnGXAxvCVGfODhe9n8H2zDrth0HRLcjObApyKQwhJfnht0KIyZ1tyC7HR
nGuqpGtsJ7IVBY+9YyZmn/n5VUb1VXAG3JIlu/3stsxftH1GKrSll23dJFwp4xfJ
hYS2Ahq7HLTJ0tonY8qdA70jrIFKrH+2aKzaOqaoK94OU9cNSi2XozPRwZnODscA
geRKmkbfMZs+1hejM9aS7LqSimEfQlWoURQEHXAiqCtl47ZYKCptBut8iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiluRKI6XGQzhsKgvFq5QRlxfFdMB8GA1UdIwQY
MBaAFK4f/56wz0wLp4FOMi7I4D1PHwcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEt
OWUxMDI5NGExOGVhLzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wZTlmYjktZjVhNy00NjZhLThmODEtOWUxMDI5NGExOGVh
LzEvcmhfX25yRFBUQXVuZ1U0eUxzamdQVThmQnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6usV7wm
xfv1YwjZx5cphGyfOgsGHCc2r3HukR2P57tFGLsWCkSCkroSyDhcKscoyLRPR+Y1
p9arm5TwT2je/jYgsYxQ+D87UkG8sE6HuAXDwMZ0UxkFjBk/8mfO7L/oeCCEi78O
SUrVleaYeqOYYB0r/KZ6Yi7grqrD0xMn4ZRArAQ3rI/C/1xuoFugWHyTGvQlvqYi
oFXy0QFz/BWfHe1G5tt7Lkb2MKnFInUUJcSLaNa8dPPvxh64ERo5IxDRqF/SxSNY
ROYiaBC+S1X8XH/YbVb05ACjGpslywn6tR3841Hn2VKi6eU65BgvgDFzQwILvoJU
vVvTat46diGDmA==
-----END CERTIFICATE-----