Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File:                     N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier:          8EvqeJ10WIJs6jT8+20EQZsmUSF1rQ5FXZUKBYdg7Ho=
Subject key identifier:   BB:DA:7E:66:1B:4E:54:41:68:2A:D2:A7:74:8B:A8:CE:1A:96:C7:23
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer:       /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial:       01962F06F7C1EE4D5C1E1EAB2ACD0BC2042B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number:          103F
Signing time:             Sun 13 Apr 2025 12:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:47 +0000
Files and hashes:         1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=)
                          2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: Mi8ipKhE3ZQyT2vCUSVoLcKtMuHutazy69adH00xujM=)
                          3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:f7:c1:ee:4d:5c:1e:1e:ab:2a:cd:0b:c2:04:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
        Validity
            Not Before: Apr 13 12:01:47 2025 GMT
            Not After : Apr 14 12:01:47 2025 GMT
        Subject: CN=bbda7e661b4e5441682ad2a7748ba8ce1a96c723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:df:06:33:68:ca:78:ef:bb:59:4c:b9:95:88:
                    4b:ab:35:03:85:ce:1a:3f:4c:f2:ad:1f:81:6e:be:
                    f4:8a:c8:0f:4a:0c:7c:96:5e:4d:4d:53:1d:a4:6b:
                    58:1a:0e:cf:e1:ee:82:f9:f6:b3:09:c3:85:c8:c8:
                    d4:47:ed:6b:fe:c0:e9:1f:6e:90:e5:47:fa:b0:33:
                    69:ba:39:8b:4e:71:bf:7b:8f:1f:e4:2a:13:14:34:
                    40:d1:fb:6f:36:53:11:29:79:36:56:b4:d6:8d:2b:
                    29:25:6c:6a:9a:b3:70:9e:ec:1f:c0:87:47:48:91:
                    65:d6:34:91:aa:60:87:ec:0b:37:c5:f8:41:0f:bd:
                    f9:50:4d:a4:f0:c8:b2:d5:1b:80:d3:f7:07:6e:f8:
                    66:46:9f:a1:ed:95:ec:26:be:2f:69:59:d6:59:04:
                    a5:0d:43:e3:89:4c:1f:68:5e:f6:c1:c9:03:94:e7:
                    83:93:06:a0:33:ce:50:21:9f:f0:d8:5b:36:0e:09:
                    0d:01:e5:5d:ca:54:15:96:a2:83:2d:94:c8:6c:9d:
                    8b:f3:d9:34:07:45:d5:a6:44:81:79:76:7e:74:30:
                    e9:16:4c:dd:95:2e:19:11:04:40:a6:c2:53:7e:53:
                    f4:8a:24:0b:69:6f:74:7e:e6:76:3c:f4:c3:99:4b:
                    ba:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DA:7E:66:1B:4E:54:41:68:2A:D2:A7:74:8B:A8:CE:1A:96:C7:23
            X509v3 Authority Key Identifier:
                keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1c:ab:ba:4c:25:de:80:c8:21:89:2f:1a:f1:ae:d8:05:e4:
         af:69:43:3f:e8:cd:b8:ac:f2:62:90:24:c8:80:af:cf:d3:00:
         50:2c:b7:ee:6f:d0:91:49:f4:cd:3b:0e:a8:2d:72:f2:6a:86:
         19:00:bc:0e:ad:76:6c:cb:79:4d:a9:ce:31:1f:d2:8e:a8:9a:
         21:86:4d:50:54:38:73:e8:2b:0c:9d:3e:c1:4b:df:17:76:23:
         29:b3:3e:7e:07:40:f5:e7:4e:8c:ba:23:d2:ad:44:15:38:37:
         d9:8b:62:2a:95:df:e5:df:d7:b4:a3:5e:97:77:3b:6f:e0:cc:
         7b:87:8a:ba:bb:4a:02:e1:a4:32:52:dc:6d:02:fc:77:53:bf:
         8b:27:07:2f:11:1c:51:c7:4b:81:9a:f3:b8:32:30:6d:a8:fc:
         2c:8f:b8:da:8b:a0:22:24:14:27:f3:8f:b7:be:7e:62:ef:4f:
         91:11:39:60:d5:b9:17:e3:ec:4f:63:a3:6b:cb:23:97:5b:30:
         5d:16:68:1d:c5:9a:71:f7:2e:f3:2d:15:86:14:d9:fb:e4:00:
         d0:27:08:49:e4:e3:c6:39:78:66:48:8d:31:08:50:5b:b7:08:
         1a:36:03:ee:c9:1a:6c:52:46:f6:c6:ba:6e:8a:6c:06:5e:76:
         84:6d:de:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBvfB7k1cHh6rKs0LwgQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NjNjNzEwNmE1ZjI2NDAxNjJlNzk4MDU4M2VhYjViZDgw
MDhjNDUwHhcNMjUwNDEzMTIwMTQ3WhcNMjUwNDE0MTIwMTQ3WjAzMTEwLwYDVQQD
EyhiYmRhN2U2NjFiNGU1NDQxNjgyYWQyYTc3NDhiYThjZTFhOTZjNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN8GM2jKeO+7WUy5lYhLqzUDhc4a
P0zyrR+Bbr70isgPSgx8ll5NTVMdpGtYGg7P4e6C+fazCcOFyMjUR+1r/sDpH26Q
5Uf6sDNpujmLTnG/e48f5CoTFDRA0ftvNlMRKXk2VrTWjSspJWxqmrNwnuwfwIdH
SJFl1jSRqmCH7As3xfhBD735UE2k8Miy1RuA0/cHbvhmRp+h7ZXsJr4vaVnWWQSl
DUPjiUwfaF72wckDlOeDkwagM85QIZ/w2Fs2DgkNAeVdylQVlqKDLZTIbJ2L89k0
B0XVpkSBeXZ+dDDpFkzdlS4ZEQRApsJTflP0iiQLaW90fuZ2PPTDmUu6YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvafmYbTlRBaCrSp3SLqM4alscjMB8GA1UdIwQY
MBaAFDdjxxBqXyZAFi55gFg+q1vYAIxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTct
ODhhMGU0NTBhMTdiLzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTctODhhMGU0NTBhMTdi
LzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhyrukwl
3oDIIYkvGvGu2AXkr2lDP+jNuKzyYpAkyICvz9MAUCy37m/QkUn0zTsOqC1y8mqG
GQC8Dq12bMt5TanOMR/SjqiaIYZNUFQ4c+grDJ0+wUvfF3YjKbM+fgdA9edOjLoj
0q1EFTg32YtiKpXf5d/XtKNel3c7b+DMe4eKurtKAuGkMlLcbQL8d1O/iycHLxEc
UcdLgZrzuDIwbaj8LI+42ougIiQUJ/OPt75+Yu9PkRE5YNW5F+PsT2Oja8sjl1sw
XRZoHcWacfcu8y0VhhTZ++QA0CcISeTjxjl4ZkiNMQhQW7cIGjYD7skabFJG9sa6
bopsBl52hG3erw==
-----END CERTIFICATE-----