Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
File:                     NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft (raw, json)
Hash identifier:          6GTDhF85p2SdrURe4hA3mBkEAt8WWpiGNVFjTEkw/0s=
Subject key identifier:   D5:BF:5D:66:78:06:55:8B:95:61:AE:C5:E5:2A:CD:AA:E9:01:4F:A8
Authority key identifier: 35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D
Certificate issuer:       /CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
Certificate serial:       01962FAB6F57874514E72610A111B601BD54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft
Manifest number:          0D69
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl (hash: Igg82zBZd2wFm5TVEXZQB9Waip3iSImTcdTSeKIOqAw=)
                          2: ZIEntIvRdoyNG_9f7umqM8GaOP0.roa (hash: fyIclvXxfmafIM00Oljz1bkGgUIAKrrEkFW8CDlF9q4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6f:57:87:45:14:e7:26:10:a1:11:b6:01:bd:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=353f17f4bbb19346dc5afc0c235879fbe6357c6d
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=d5bf5d667806558b9561aec5e52acdaae9014fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:dd:2d:88:69:dc:9f:9b:ee:97:19:99:db:
                    81:b2:60:84:ea:2c:37:f3:21:53:b8:c0:7e:b6:92:
                    0c:e2:de:3c:80:9b:d4:cc:16:4d:ec:16:7c:02:fb:
                    20:6a:c6:22:be:82:3b:51:43:8a:91:71:ab:9e:49:
                    3f:2f:72:d3:a6:c7:cb:8f:93:78:08:34:4b:cf:5c:
                    fa:20:54:71:83:a6:de:bd:3d:39:67:db:54:50:e7:
                    34:2b:3d:03:d5:21:1f:d8:13:b4:8d:20:68:4c:b5:
                    25:34:32:40:51:80:04:16:66:c7:7b:a1:40:0d:29:
                    11:11:3e:9b:0c:e0:8d:69:d7:25:50:73:cb:84:96:
                    94:77:ff:71:19:7e:81:e4:45:da:c0:89:a3:cf:9b:
                    ad:d4:16:f2:dd:15:0e:77:10:f5:2f:90:ac:03:4d:
                    48:5f:55:d5:cb:c7:15:06:43:df:0a:c2:bc:4b:b6:
                    77:ff:d8:e8:60:05:bb:73:2d:d6:b2:06:fd:a3:9e:
                    d3:5b:76:f6:dd:ad:ba:65:57:4b:b0:72:4f:21:ac:
                    df:e4:17:80:2e:11:8f:2b:bd:06:66:7a:c8:4d:4e:
                    2a:b0:6b:b3:a9:b9:ba:ea:5c:21:28:15:1d:44:1b:
                    60:26:31:02:3d:ca:b3:93:fd:de:83:83:c7:53:a1:
                    6e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BF:5D:66:78:06:55:8B:95:61:AE:C5:E5:2A:CD:AA:E9:01:4F:A8
            X509v3 Authority Key Identifier:
                keyid:35:3F:17:F4:BB:B1:93:46:DC:5A:FC:0C:23:58:79:FB:E6:35:7C:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NT8X9Luxk0bcWvwMI1h5--Y1fG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0a24b5-b9ad-48a6-adf7-9fd84c79b0ef/1/NT8X9Luxk0bcWvwMI1h5--Y1fG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f2:a3:aa:60:cd:fc:f9:99:aa:7b:ab:9b:cc:24:b5:7c:2f:
         2d:2f:64:97:5d:e4:5e:ee:e5:e7:69:ab:56:7b:5c:84:2e:1b:
         4f:71:7a:1b:12:c2:42:a2:34:d0:13:17:3f:1b:6d:63:c0:ef:
         b0:6a:fb:fe:8c:ca:c0:56:3f:56:81:cd:11:6d:d4:d9:8b:2c:
         e9:af:ce:73:75:f2:d8:47:00:58:f1:fb:a3:98:92:8f:4b:f9:
         b8:d6:c5:98:f5:d2:5d:35:69:ee:49:97:63:80:9e:f6:a3:eb:
         b9:cd:ee:33:90:8e:8e:c2:5e:29:8e:0f:93:d3:65:18:a3:ee:
         94:ca:d3:20:8b:fb:82:4e:4e:69:64:5a:3d:5e:ea:d2:7d:2e:
         11:24:f8:8f:42:f0:d9:9d:c1:8b:c7:01:db:f4:87:b7:d7:59:
         e1:35:1b:cd:dc:cf:81:b5:8a:d1:6e:f1:61:5f:9c:c0:21:d0:
         56:e0:de:47:f4:da:2f:16:88:7b:bb:3d:74:2d:60:30:9c:40:
         04:0e:88:c5:4c:2d:bc:a3:fb:25:d8:db:68:ad:65:ba:f4:98:
         5d:48:d1:8f:7a:a7:c7:a9:e7:6f:ae:f4:6d:23:3d:78:19:aa:
         d1:24:92:f4:31:ed:55:64:62:d2:e9:74:af:06:c3:e2:70:61:
         f9:c9:b1:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq29Xh0UU5yYQoRG2Ab1UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1M2YxN2Y0YmJiMTkzNDZkYzVhZmMwYzIzNTg3OWZiZTYz
NTdjNmQwHhcNMjUwNDEzMTUwMTI2WhcNMjUwNDE0MTUwMTI2WjAzMTEwLwYDVQQD
EyhkNWJmNWQ2Njc4MDY1NThiOTU2MWFlYzVlNTJhY2RhYWU5MDE0ZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgfdLYhp3J+b7pcZmduBsmCE6iw3
8yFTuMB+tpIM4t48gJvUzBZN7BZ8AvsgasYivoI7UUOKkXGrnkk/L3LTpsfLj5N4
CDRLz1z6IFRxg6bevT05Z9tUUOc0Kz0D1SEf2BO0jSBoTLUlNDJAUYAEFmbHe6FA
DSkRET6bDOCNadclUHPLhJaUd/9xGX6B5EXawImjz5ut1Bby3RUOdxD1L5CsA01I
X1XVy8cVBkPfCsK8S7Z3/9joYAW7cy3Wsgb9o57TW3b23a26ZVdLsHJPIazf5BeA
LhGPK70GZnrITU4qsGuzqbm66lwhKBUdRBtgJjECPcqzk/3eg4PHU6Fu6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNW/XWZ4BlWLlWGuxeUqzarpAU+oMB8GA1UdIwQY
MBaAFDU/F/S7sZNG3Fr8DCNYefvmNXxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjct
OWZkODRjNzliMGVmLzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wYTI0YjUtYjlhZC00OGE2LWFkZjctOWZkODRjNzliMGVm
LzEvTlQ4WDlMdXhrMGJjV3Z3TUkxaDUtLVkxZkcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/KjqmDN
/PmZqnurm8wktXwvLS9kl13kXu7l52mrVntchC4bT3F6GxLCQqI00BMXPxttY8Dv
sGr7/ozKwFY/VoHNEW3U2Yss6a/Oc3Xy2EcAWPH7o5iSj0v5uNbFmPXSXTVp7kmX
Y4Ce9qPruc3uM5COjsJeKY4Pk9NlGKPulMrTIIv7gk5OaWRaPV7q0n0uEST4j0Lw
2Z3Bi8cB2/SHt9dZ4TUbzdzPgbWK0W7xYV+cwCHQVuDeR/TaLxaIe7s9dC1gMJxA
BA6IxUwtvKP7JdjbaK1luvSYXUjRj3qnx6nnb670bSM9eBmq0SSS9DHtVWRi0ul0
rwbD4nBh+cmx4w==
-----END CERTIFICATE-----