Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
File:                     NEwINt1cc7B3WQTqo7foekoMDPU.mft (raw, json)
Hash identifier:          L0aClVlMyio8hz28mfJiChHx0zjLkMs38kKKy/l+zTA=
Subject key identifier:   83:A7:62:81:9D:11:49:A1:74:7A:86:CD:91:CF:60:12:6D:18:BC:2F
Authority key identifier: 34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5
Certificate issuer:       /CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
Certificate serial:       01962ECF66C4C871AA174FFB8197212D974F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: BTCMCQxXpgg5K5ucl-jfs_-nD0A.roa (hash: 72PY3Qqmz1maPY+ZM8ykIYNT4ZWmcAK3NGiS506bQm0=)
                          2: NEwINt1cc7B3WQTqo7foekoMDPU.crl (hash: irnF2uYidAc217pG8yq8Kdmi6dc/E1im8MblFKEM25I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:66:c4:c8:71:aa:17:4f:fb:81:97:21:2d:97:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344c0836dd5c73b0775904eaa3b7e87a4a0c0cf5
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=83a762819d1149a1747a86cd91cf60126d18bc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:40:ff:86:41:8a:94:88:22:f0:53:23:ec:6b:
                    ba:8d:2a:18:4d:00:73:a4:bc:60:53:9c:5f:07:02:
                    16:2c:46:0e:5f:71:b3:9f:6e:fa:37:cc:7b:24:a1:
                    dd:4f:ec:f4:65:64:de:7b:89:ad:b3:dd:5a:a9:be:
                    62:c7:40:3d:16:99:23:37:56:cc:c3:19:7f:fc:2d:
                    27:46:ce:52:9a:eb:b6:bc:70:de:2c:b8:cd:2c:8b:
                    e4:cf:e8:88:39:e4:ff:47:04:2c:77:25:8d:32:53:
                    f3:76:35:c5:55:11:b8:81:b6:af:34:71:01:44:d9:
                    71:ee:a5:74:57:5d:66:e3:aa:10:f0:05:8b:74:35:
                    14:08:ff:d9:b2:c8:85:6e:50:14:25:9a:46:30:f2:
                    8c:a9:87:fa:b6:65:bd:83:e3:26:3e:a7:25:dc:0a:
                    c5:f8:9d:df:42:fa:88:66:5d:95:12:ba:71:63:f7:
                    4c:dd:bb:d6:8a:0c:48:40:f4:19:db:44:e9:77:3b:
                    c6:39:8f:b6:a1:b4:56:88:e7:3c:38:bc:f3:91:0a:
                    f9:46:2d:b7:46:48:f6:5b:5a:69:a8:02:15:8b:31:
                    c6:3c:dc:8e:10:0a:66:d9:cd:dd:4c:24:2d:7c:b0:
                    86:f4:c4:ca:5d:09:8e:2e:4f:2b:5d:4b:1e:d0:88:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:62:81:9D:11:49:A1:74:7A:86:CD:91:CF:60:12:6D:18:BC:2F
            X509v3 Authority Key Identifier:
                keyid:34:4C:08:36:DD:5C:73:B0:77:59:04:EA:A3:B7:E8:7A:4A:0C:0C:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEwINt1cc7B3WQTqo7foekoMDPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/010dc3-4cef-44e3-ae92-19e134712e92/1/NEwINt1cc7B3WQTqo7foekoMDPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d4:72:0e:93:64:b2:23:9c:70:a8:1a:18:38:2e:4a:c4:da:
         a6:7c:d8:c0:f6:1d:bd:16:c9:61:70:52:bf:4e:be:a1:7e:af:
         5f:f3:71:6b:6d:9c:05:3b:52:fb:ab:9d:d0:ff:99:d9:4f:0e:
         5a:ad:cf:0a:f3:a6:20:88:a7:f6:5e:bd:4e:cd:db:b2:62:61:
         5b:99:e5:d4:f4:61:6f:e2:93:82:ef:26:6b:6d:8b:91:18:ff:
         96:ba:be:2e:3d:bc:45:bb:5d:f4:09:49:58:c2:db:f8:a0:dc:
         d7:f6:9b:8f:59:99:9a:3a:60:a3:f8:8d:22:6f:1f:af:43:28:
         22:97:ba:39:f7:d6:bf:f6:8e:2b:1e:8d:72:34:90:84:11:10:
         d4:de:73:38:ed:60:44:97:8f:e1:4c:2f:20:12:ec:fd:da:2d:
         a4:35:56:7a:d2:c1:89:78:b6:c6:ef:4b:25:a3:cb:77:bc:4f:
         2d:ca:d3:99:28:1a:bb:67:13:1d:0f:d9:63:63:9d:7d:a5:fc:
         92:87:90:51:2f:85:a9:fc:b0:42:d6:41:df:0b:66:96:d5:4f:
         0d:cf:cf:78:bc:e9:73:4b:12:2d:2f:90:a3:3c:4e:29:c1:f0:
         af:c3:96:70:e0:58:2d:53:79:fe:9a:c1:1d:f1:79:23:10:65:
         f1:14:56:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2bEyHGqF0/7gZchLZdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGMwODM2ZGQ1YzczYjA3NzU5MDRlYWEzYjdlODdhNGEw
YzBjZjUwHhcNMjUwNDEzMTEwMTA2WhcNMjUwNDE0MTEwMTA2WjAzMTEwLwYDVQQD
Eyg4M2E3NjI4MTlkMTE0OWExNzQ3YTg2Y2Q5MWNmNjAxMjZkMThiYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70D/hkGKlIgi8FMj7Gu6jSoYTQBz
pLxgU5xfBwIWLEYOX3Gzn276N8x7JKHdT+z0ZWTee4mts91aqb5ix0A9FpkjN1bM
wxl//C0nRs5Smuu2vHDeLLjNLIvkz+iIOeT/RwQsdyWNMlPzdjXFVRG4gbavNHEB
RNlx7qV0V11m46oQ8AWLdDUUCP/ZssiFblAUJZpGMPKMqYf6tmW9g+MmPqcl3ArF
+J3fQvqIZl2VErpxY/dM3bvWigxIQPQZ20TpdzvGOY+2obRWiOc8OLzzkQr5Ri23
Rkj2W1ppqAIVizHGPNyOEApm2c3dTCQtfLCG9MTKXQmOLk8rXUse0IjcUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOnYoGdEUmhdHqGzZHPYBJtGLwvMB8GA1UdIwQY
MBaAFDRMCDbdXHOwd1kE6qO36HpKDAz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8wMTBkYzMtNGNlZi00NGUzLWFlOTIt
MTllMTM0NzEyZTkyLzEvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8wMTBkYzMtNGNlZi00NGUzLWFlOTItMTllMTM0NzEyZTky
LzEvTkV3SU50MWNjN0IzV1FUcW83Zm9la29NRFBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdRyDpNk
siOccKgaGDguSsTapnzYwPYdvRbJYXBSv06+oX6vX/Nxa22cBTtS+6ud0P+Z2U8O
Wq3PCvOmIIin9l69Ts3bsmJhW5nl1PRhb+KTgu8ma22LkRj/lrq+Lj28Rbtd9AlJ
WMLb+KDc1/abj1mZmjpgo/iNIm8fr0MoIpe6OffWv/aOKx6NcjSQhBEQ1N5zOO1g
RJeP4UwvIBLs/dotpDVWetLBiXi2xu9LJaPLd7xPLcrTmSgau2cTHQ/ZY2OdfaX8
koeQUS+FqfywQtZB3wtmltVPDc/PeLzpc0sSLS+QozxOKcHwr8OWcOBYLVN5/prB
HfF5IxBl8RRWbg==
-----END CERTIFICATE-----