Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
File:                     NHQhDChBPiYoSCKr6DrW18D3ZPo.mft (raw, json)
Hash identifier:          Gj/35z96IgjNVWV9UuGoNXfxhBKEA9sDamOXefMc3J4=
Subject key identifier:   84:EE:62:BC:ED:F6:F6:00:A7:D5:6C:68:0D:79:21:DE:98:72:94:97
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Certificate issuer:       /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial:       01962F0666797E1F73AA4F226AC045B1BA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 12:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:10 +0000
Files and hashes:         1: 1bcuYr7QKJ5bW0bfcIYHS53yG6g.roa (hash: qd4P1coRqTY7B32E2jEnjJekCI9CLXdo/5/4fRHSsDk=)
                          2: 2yd3628VmNb462n9Ht_mrHJwpz4.roa (hash: jjvaAqc3q0c+UVUm7qyigUPHQ2zsUspQsTjOZ4ZjQ5E=)
                          3: 77kR0uenLneOf0_otMBTrdwkJ5I.roa (hash: kFgic4lpP8Yb+Wik/VcFSyZzSPM0vnTo7v0lGbnx3eU=)
                          4: An_xJWf4RJw4Ylw59J21Md85Jws.roa (hash: gk/epjcVW86jJdWfxESndHuaQolg8wlmkWBhHhLsN3Y=)
                          5: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (hash: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=)
                          6: NHQhDChBPiYoSCKr6DrW18D3ZPo.crl (hash: sA0x8EKOwMXmVb/pE3RGCRHdv7dYG6XsBKzt6h0G/jc=)
                          7: byk_uVbEcBcJ5E54PZILxzilXqs.roa (hash: JCkW4yYVwvgxvyj62HKMLWieGutHlsi8Ja6vFazZOyk=)
                          8: s_AA60Ddfygbd8EKAGEg6mSlXwc.roa (hash: ENuKCW/gynViV0FOCDZJgVAAEXvbRuvjapJ167NV/i4=)
                          9: zbORAgVCBGdwMFpkpNpVU4F-JYE.roa (hash: bnmHuORo7L7E/r6zgTIFCwfAOxo5IKx9z46OH+yKYpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:66:79:7e:1f:73:aa:4f:22:6a:c0:45:b1:ba:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
        Validity
            Not Before: Apr 13 12:01:10 2025 GMT
            Not After : Apr 14 12:01:10 2025 GMT
        Subject: CN=84ee62bcedf6f600a7d56c680d7921de98729497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:76:a3:aa:28:f6:88:90:7f:bc:24:2b:81:
                    ee:93:9c:c4:ba:36:cc:f4:fb:a2:db:ae:7d:6c:cd:
                    5c:47:25:78:ee:28:e8:76:d5:ae:2a:2a:cb:68:bf:
                    7d:c0:bf:84:d7:bb:40:fd:7b:ba:fb:47:7d:5e:48:
                    63:c5:db:86:fb:08:4f:6a:a5:cc:89:0b:77:a9:67:
                    ec:7b:39:09:33:64:74:ca:a9:5a:47:7c:09:c2:6c:
                    23:31:80:72:f7:14:63:69:9b:20:91:31:f8:6a:98:
                    49:60:8c:51:8b:b3:30:b2:89:4b:44:1a:ff:db:50:
                    45:ed:de:f3:4c:72:fc:21:c1:a4:21:4b:bc:c6:b8:
                    dd:a6:33:96:9d:86:ce:77:4e:63:0c:50:49:93:27:
                    62:18:15:81:fd:c0:68:55:3e:09:69:82:a3:24:11:
                    53:66:7e:0a:44:9b:e3:b6:f5:0e:f2:e9:f5:c6:3e:
                    9b:b5:c6:79:05:08:9a:9c:08:4c:00:46:a1:be:a3:
                    ef:00:ea:59:e4:ab:48:b9:dd:cd:f4:e1:e3:aa:3e:
                    25:e7:01:d0:54:9a:9e:3d:88:0d:d6:7e:6b:52:41:
                    aa:27:e4:6f:08:5d:65:06:ce:03:6e:5a:ce:b8:27:
                    12:43:38:93:bb:d9:ee:99:e0:61:e4:ab:9f:51:45:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EE:62:BC:ED:F6:F6:00:A7:D5:6C:68:0D:79:21:DE:98:72:94:97
            X509v3 Authority Key Identifier:
                keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f2:28:b6:0f:1a:f8:a0:fd:2c:df:35:a9:09:04:ba:26:da:
         62:89:6b:22:88:e5:96:31:db:fb:83:3e:1f:3a:1b:4c:0e:1c:
         78:47:c7:75:9e:9c:17:68:15:8c:4e:54:99:9d:d6:1b:a9:c1:
         06:95:61:ec:04:d2:d2:54:b3:6c:0b:45:30:43:4c:32:bd:e3:
         02:6e:4f:05:62:d8:4c:7a:7c:d0:f8:74:78:dd:2c:2d:2c:48:
         58:42:69:79:54:01:3b:26:2f:36:b4:bf:f3:b9:13:60:50:bc:
         a1:e2:95:98:5a:04:dc:ef:46:f3:9e:49:96:5f:15:19:6d:71:
         93:d8:c3:35:c8:73:35:4c:8b:23:ad:5a:de:c3:e4:78:a5:66:
         ce:76:6c:c5:47:62:ca:5e:1f:a3:e8:38:5c:c8:9d:b2:cd:8e:
         e8:3e:33:96:e4:ab:46:d6:f2:d1:88:da:95:3e:60:1b:47:4b:
         0c:10:c6:f5:15:88:3a:e7:ad:45:02:fa:fd:4d:f3:8e:76:a4:
         4d:b0:28:b6:cb:d8:7a:ca:22:cd:29:8f:25:90:82:d0:dc:c0:
         3f:3b:03:50:6c:21:51:50:93:73:ea:a0:b8:76:a7:40:6a:21:
         34:6d:d3:6f:53:c0:bf:80:51:ea:b0:14:5a:37:87:41:8d:8d:
         72:d2:65:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBmZ5fh9zqk8iasBFsboUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm
NzY0ZmEwHhcNMjUwNDEzMTIwMTEwWhcNMjUwNDE0MTIwMTEwWjAzMTEwLwYDVQQD
Eyg4NGVlNjJiY2VkZjZmNjAwYTdkNTZjNjgwZDc5MjFkZTk4NzI5NDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4R2o6oo9oiQf7wkK4Huk5zEujbM
9Pui2659bM1cRyV47ijodtWuKirLaL99wL+E17tA/Xu6+0d9XkhjxduG+whPaqXM
iQt3qWfsezkJM2R0yqlaR3wJwmwjMYBy9xRjaZsgkTH4aphJYIxRi7MwsolLRBr/
21BF7d7zTHL8IcGkIUu8xrjdpjOWnYbOd05jDFBJkydiGBWB/cBoVT4JaYKjJBFT
Zn4KRJvjtvUO8un1xj6btcZ5BQianAhMAEahvqPvAOpZ5KtIud3N9OHjqj4l5wHQ
VJqePYgN1n5rUkGqJ+RvCF1lBs4DblrOuCcSQziTu9numeBh5KufUUWmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITuYrzt9vYAp9VsaA15Id6YcpSXMB8GA1UdIwQY
MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt
YjBjNzRiNzZlMTgyLzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy
LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwvIotg8a
+KD9LN81qQkEuibaYolrIojlljHb+4M+HzobTA4ceEfHdZ6cF2gVjE5UmZ3WG6nB
BpVh7ATS0lSzbAtFMENMMr3jAm5PBWLYTHp80Ph0eN0sLSxIWEJpeVQBOyYvNrS/
87kTYFC8oeKVmFoE3O9G855Jll8VGW1xk9jDNchzNUyLI61a3sPkeKVmznZsxUdi
yl4fo+g4XMidss2O6D4zluSrRtby0YjalT5gG0dLDBDG9RWIOuetRQL6/U3zjnak
TbAotsvYesoizSmPJZCC0NzAPzsDUGwhUVCTc+qguHanQGohNG3Tb1PAv4BR6rAU
WjeHQY2NctJlZw==
-----END CERTIFICATE-----