Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
File:                     NehMBjohgLI_X20xYqdbMJL1wY0.mft (raw, json)
Hash identifier:          bN9BHDGCROZ5jkQfwDrJxRfGwRpGbmgnPGa5ZaGfryw=
Subject key identifier:   E3:E4:7E:63:83:E1:14:FF:8D:38:E7:57:D4:E9:97:62:BA:26:05:50
Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
Certificate issuer:       /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Certificate serial:       01962ECF4FE72896572A86AF4D6FF6B2D617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: NehMBjohgLI_X20xYqdbMJL1wY0.crl (hash: 8Ais+2VFsrzjgpsRp+RnWosYIEPs+ScvAUkO1Z+6FKQ=)
                          2: W3mDa3qMM3UMHKwdjXNmQQYwzCo.roa (hash: uhcnNrB9w8L6u9yOsZumoNimMZDsDc9Fp+1S6uVCDDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4f:e7:28:96:57:2a:86:af:4d:6f:f6:b2:d6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=e3e47e6383e114ff8d38e757d4e99762ba260550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:29:2e:aa:8a:e9:3c:46:f6:ef:00:05:c0:
                    31:e5:33:88:e1:7e:40:62:f9:23:80:8c:6c:bd:54:
                    5c:ec:40:77:22:d1:55:44:ea:61:bb:50:31:85:8c:
                    8b:68:77:49:69:f3:2e:ee:2f:f4:cc:48:9c:b3:db:
                    a4:e2:9b:32:2e:f6:cd:b2:e1:52:70:3a:5e:75:0c:
                    0c:64:77:82:9a:7a:ef:32:d2:85:ac:2f:a2:02:de:
                    1b:d6:58:2d:30:29:68:cd:39:68:be:c9:69:d6:c9:
                    fa:77:33:5f:87:84:fa:86:36:4e:77:12:b3:eb:70:
                    d8:d5:68:f4:82:1d:54:61:5b:3d:ec:80:ad:30:de:
                    b0:55:e4:dd:26:f0:91:54:f3:63:08:00:d3:78:66:
                    b8:71:a0:03:7d:6c:98:66:58:f0:33:a0:2d:2e:34:
                    80:fd:ee:a0:19:3a:a4:70:ca:24:16:9d:c2:4e:40:
                    cb:3c:f6:12:c0:b8:46:60:f9:c2:22:e7:f4:f5:da:
                    c4:b3:50:dd:f2:51:cd:ce:e2:b4:0f:7c:0d:bf:58:
                    86:65:50:fe:d4:b3:a8:87:1f:88:21:d0:be:7f:b2:
                    2c:1a:a8:4a:d3:26:f4:07:c7:00:96:4b:53:ed:70:
                    d3:a7:ab:5c:90:84:b2:61:af:9d:ff:b8:54:5a:0c:
                    b9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:7E:63:83:E1:14:FF:8D:38:E7:57:D4:E9:97:62:BA:26:05:50
            X509v3 Authority Key Identifier:
                keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b7:a1:26:c9:2a:53:24:20:6b:eb:60:6b:e0:aa:a4:cd:43:
         d5:3f:00:18:56:52:20:e6:76:58:6c:9c:e4:cc:7a:6f:d5:bb:
         d8:2d:53:e0:06:99:6e:c3:6e:4b:6a:06:74:d5:97:66:a4:b5:
         e2:6c:f1:ec:44:24:fe:75:86:14:40:91:e4:2b:5e:f3:37:5f:
         d5:18:77:5d:31:46:a2:11:28:6f:85:51:5a:b8:dc:8f:a0:d1:
         6c:86:21:a5:bb:df:5b:fc:dc:54:d9:07:54:55:37:41:b7:9a:
         b8:ec:0c:59:59:76:a6:98:8c:85:28:96:85:9b:ed:6a:27:f8:
         c2:7e:76:7f:84:ed:ea:5d:fe:c4:ca:fc:39:5d:0b:58:a8:e8:
         55:8f:55:e2:02:01:48:43:bc:35:d1:8a:19:94:fd:43:c7:ac:
         d7:64:ec:37:e5:25:cd:a1:91:db:b8:22:54:07:26:8d:0a:49:
         88:02:f9:ca:09:3c:95:30:68:46:24:17:4f:85:a0:b2:a3:ae:
         23:45:0d:2a:66:38:c7:a5:df:d7:58:ff:e4:2f:6e:b7:46:b3:
         b5:6b:44:84:44:e0:ee:32:ee:51:2b:d0:31:f6:f3:49:89:1c:
         d3:97:be:7b:85:7f:85:ef:d4:cc:64:7b:7f:3f:21:03:17:1c:
         4c:98:c1:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz0/nKJZXKoavTW/2stYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTg0YzA2M2EyMTgwYjIzZjVmNmQzMTYyYTc1YjMwOTJm
NWMxOGQwHhcNMjUwNDEzMTEwMTAwWhcNMjUwNDE0MTEwMTAwWjAzMTEwLwYDVQQD
EyhlM2U0N2U2MzgzZTExNGZmOGQzOGU3NTdkNGU5OTc2MmJhMjYwNTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmgpLqqK6TxG9u8ABcAx5TOI4X5A
YvkjgIxsvVRc7EB3ItFVROphu1AxhYyLaHdJafMu7i/0zEics9uk4psyLvbNsuFS
cDpedQwMZHeCmnrvMtKFrC+iAt4b1lgtMClozTlovslp1sn6dzNfh4T6hjZOdxKz
63DY1Wj0gh1UYVs97ICtMN6wVeTdJvCRVPNjCADTeGa4caADfWyYZljwM6AtLjSA
/e6gGTqkcMokFp3CTkDLPPYSwLhGYPnCIuf09drEs1Dd8lHNzuK0D3wNv1iGZVD+
1LOohx+IIdC+f7IsGqhK0yb0B8cAlktT7XDTp6tckISyYa+d/7hUWgy5pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPkfmOD4RT/jTjnV9Tpl2K6JgVQMB8GA1UdIwQY
MBaAFDXoTAY6IYCyP19tMWKnWzCS9cGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82Y2E4NTItZWQ0Yi00MWQxLWE3YjYt
ODRhNzFjYzMyZDQ4LzEvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82Y2E4NTItZWQ0Yi00MWQxLWE3YjYtODRhNzFjYzMyZDQ4
LzEvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbehJskq
UyQga+tga+CqpM1D1T8AGFZSIOZ2WGyc5Mx6b9W72C1T4AaZbsNuS2oGdNWXZqS1
4mzx7EQk/nWGFECR5Cte8zdf1Rh3XTFGohEob4VRWrjcj6DRbIYhpbvfW/zcVNkH
VFU3QbeauOwMWVl2ppiMhSiWhZvtaif4wn52f4Tt6l3+xMr8OV0LWKjoVY9V4gIB
SEO8NdGKGZT9Q8es12TsN+UlzaGR27giVAcmjQpJiAL5ygk8lTBoRiQXT4WgsqOu
I0UNKmY4x6Xf11j/5C9ut0aztWtEhETg7jLuUSvQMfbzSYkc05e+e4V/he/UzGR7
fz8hAxccTJjB6w==
-----END CERTIFICATE-----