Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File:                     NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier:          lab2EQdkCg2pTpThUB6ClYpjLcYX+ngcJ7mhkRZzoGI=
Subject key identifier:   1F:24:91:B3:54:DA:78:4A:A3:F9:BF:99:07:FA:13:1D:B1:AE:D4:E9
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer:       /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial:       01962F06EC63BFDADA26F3E6860D5DF24D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number:          10C7
Signing time:             Sun 13 Apr 2025 12:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:44 +0000
Files and hashes:         1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=)
                          2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=)
                          3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: uKEiFvUUT3PMdG/bjRVio5q9SNx6jLBi0nLF2EbEjz0=)
                          4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ec:63:bf:da:da:26:f3:e6:86:0d:5d:f2:4d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
        Validity
            Not Before: Apr 13 12:01:44 2025 GMT
            Not After : Apr 14 12:01:44 2025 GMT
        Subject: CN=1f2491b354da784aa3f9bf9907fa131db1aed4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:46:b1:b2:56:4f:e6:af:52:0e:77:6b:d4:
                    4b:68:4d:34:20:df:9b:e0:8b:54:f9:e1:52:19:c1:
                    35:6f:f6:6f:80:8b:4e:f1:dc:be:62:8e:2c:c4:64:
                    19:0e:87:76:48:9e:6e:d4:6b:8b:ca:ff:a6:27:35:
                    17:a4:aa:67:c5:d9:82:05:68:02:b4:a4:60:ac:a2:
                    92:2e:4e:84:0f:bb:40:70:a9:70:d2:0c:f0:b9:6c:
                    df:98:6a:e3:66:49:ae:98:88:be:d3:97:c9:88:0e:
                    64:8e:47:09:a4:2c:09:d1:3b:c5:e2:a6:af:c1:1b:
                    a7:56:35:9f:c7:ba:9e:f3:6c:5a:ba:ac:06:2a:63:
                    d1:f3:5e:2c:f9:19:8a:3f:fd:b5:80:3d:c9:a2:53:
                    f1:8e:bc:82:fe:61:15:c5:20:b2:fb:5b:a2:9d:18:
                    30:70:c5:2a:19:de:95:c2:2e:25:92:8f:9f:93:70:
                    a9:b1:06:79:79:be:05:28:a6:18:d6:4c:5b:b3:eb:
                    50:98:74:e4:0b:e8:8e:aa:cf:ce:9f:01:fc:4f:e3:
                    fe:de:d9:94:89:f9:79:a0:bd:d5:bc:d9:54:26:84:
                    9f:c4:19:2e:df:30:89:75:1a:4f:b2:c0:69:fb:5a:
                    2e:ed:cd:7b:c3:8d:a4:23:fc:98:b5:6c:a8:d5:18:
                    3c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:24:91:B3:54:DA:78:4A:A3:F9:BF:99:07:FA:13:1D:B1:AE:D4:E9
            X509v3 Authority Key Identifier:
                keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f6:5d:92:1c:41:50:e4:90:26:91:8f:dd:03:cb:07:e0:04:
         b7:71:bc:f7:f2:a4:ed:a2:77:1f:fc:38:78:8f:63:c7:5c:c2:
         a8:86:63:10:9c:4d:49:74:8e:3b:c1:39:92:67:a5:29:de:5d:
         d2:2c:60:7d:f7:da:de:57:f6:d9:d2:86:bf:f5:68:25:b1:70:
         3a:50:28:f6:ae:dc:2d:be:74:7c:87:11:c1:b8:c3:cc:2c:59:
         1a:fe:58:73:5e:c7:56:74:59:e7:26:35:14:bb:a5:31:13:7b:
         8c:f5:52:bf:57:29:fd:a0:e0:bf:2f:5c:e8:dd:97:90:49:f3:
         35:5e:ba:7a:34:be:14:06:e8:9e:e4:2e:5c:fc:61:d0:31:41:
         57:7a:ab:03:65:6f:47:de:a2:37:92:de:c0:d5:a4:f4:45:92:
         9a:a3:93:32:99:71:ac:78:88:ac:ff:67:d1:5d:81:07:a6:23:
         5d:e9:1e:8f:c0:be:51:43:9b:8d:7f:a7:3d:a7:9a:ce:0c:8b:
         16:15:29:4d:b6:51:0e:31:97:d5:5f:2a:c5:cd:af:39:53:b3:
         d9:7d:66:8f:b3:19:b5:0a:94:ca:53:da:a6:fa:86:60:ed:46:
         db:d5:50:40:6f:7b:a6:bb:c9:28:be:67:96:11:e6:f6:34:db:
         0e:f3:c0:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuxjv9raJvPmhg1d8k0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YjU1ZmIzNGQyOWY5NjI1NDUxMzJhMDI1YjUyNjQ0ZmRm
ZmJmNmYwHhcNMjUwNDEzMTIwMTQ0WhcNMjUwNDE0MTIwMTQ0WjAzMTEwLwYDVQQD
EygxZjI0OTFiMzU0ZGE3ODRhYTNmOWJmOTkwN2ZhMTMxZGIxYWVkNGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GhGsbJWT+avUg53a9RLaE00IN+b
4ItU+eFSGcE1b/ZvgItO8dy+Yo4sxGQZDod2SJ5u1GuLyv+mJzUXpKpnxdmCBWgC
tKRgrKKSLk6ED7tAcKlw0gzwuWzfmGrjZkmumIi+05fJiA5kjkcJpCwJ0TvF4qav
wRunVjWfx7qe82xauqwGKmPR814s+RmKP/21gD3JolPxjryC/mEVxSCy+1uinRgw
cMUqGd6Vwi4lko+fk3CpsQZ5eb4FKKYY1kxbs+tQmHTkC+iOqs/OnwH8T+P+3tmU
ifl5oL3VvNlUJoSfxBku3zCJdRpPssBp+1ou7c17w42kI/yYtWyo1Rg8nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8kkbNU2nhKo/m/mQf6Ex2xrtTpMB8GA1UdIwQY
MBaAFDa1X7NNKfliVFEyoCW1JkT9/79vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2Ut
ZjEwZjczYTllY2IzLzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yYmYwMGItYmZiYy00ZjZiLWExM2UtZjEwZjczYTllY2Iz
LzEvTnJWZnMwMHAtV0pVVVRLZ0piVW1SUDNfdjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvZdkhxB
UOSQJpGP3QPLB+AEt3G89/Kk7aJ3H/w4eI9jx1zCqIZjEJxNSXSOO8E5kmelKd5d
0ixgfffa3lf22dKGv/VoJbFwOlAo9q7cLb50fIcRwbjDzCxZGv5Yc17HVnRZ5yY1
FLulMRN7jPVSv1cp/aDgvy9c6N2XkEnzNV66ejS+FAbonuQuXPxh0DFBV3qrA2Vv
R96iN5LewNWk9EWSmqOTMplxrHiIrP9n0V2BB6YjXekej8C+UUObjX+nPaeazgyL
FhUpTbZRDjGX1V8qxc2vOVOz2X1mj7MZtQqUylPapvqGYO1G29VQQG97prvJKL5n
lhHm9jTbDvPA8A==
-----END CERTIFICATE-----