Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft
File:                     caNBPUB9it-Ktr5VcGCU7-nD1do.mft (raw, json)
Hash identifier:          I5QsBKTAvAH4GYnW5b/GXEhqAdDyk5iWVFpYmBXTroY=
Subject key identifier:   EF:F2:50:03:D7:E7:A7:81:5A:C1:48:F1:9D:44:A4:C2:01:50:B6:5A
Authority key identifier: 71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA
Certificate issuer:       /CN=71a3413d407d8adf8ab6be55706094efe9c3d5da
Certificate serial:       01962ECF4FC111FEA1D72E624FB68054DDE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft
Manifest number:          10B0
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: 7G7G7tpVmWd60uNlZ2vEN1k8ScQ.roa (hash: 2r8MgNw8qHVAZHcXcB+fjTECDN+jibhAZMIq0CBmNHM=)
                          2: caNBPUB9it-Ktr5VcGCU7-nD1do.crl (hash: DGI6kEoWb00ZtRia57Lp4SlLh066TJD1tVYn2vkP4o8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:4f:c1:11:fe:a1:d7:2e:62:4f:b6:80:54:dd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71a3413d407d8adf8ab6be55706094efe9c3d5da
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=eff25003d7e7a7815ac148f19d44a4c20150b65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:3a:32:5c:0e:1b:5a:7a:2a:7f:59:74:45:
                    db:08:39:d6:85:9c:85:ea:b5:de:21:12:d3:01:ba:
                    cf:af:e1:ab:a7:cd:83:5c:b1:22:1e:65:93:6e:ff:
                    2a:71:be:b3:ad:ff:4d:a8:7f:2a:8b:7e:c3:3e:76:
                    1c:ef:19:e4:48:99:0c:7d:f3:16:ff:0e:23:a1:5b:
                    64:75:74:dc:65:b0:b7:3b:97:d8:a9:e8:fb:2b:8e:
                    01:a0:7b:69:0d:f4:f1:03:7f:e9:04:46:e9:80:04:
                    46:72:46:a5:05:c9:02:56:34:a8:2d:c7:8c:06:f0:
                    8f:03:c2:54:f6:d7:00:3c:12:b3:0c:26:83:87:49:
                    20:55:13:94:ce:aa:16:34:48:81:3a:6a:bf:9a:53:
                    16:1f:f5:ee:e9:a2:d0:8b:92:dc:6e:6f:a2:f8:15:
                    e7:5f:28:8b:e8:b0:ef:aa:dc:95:21:37:9b:b2:56:
                    a8:9f:02:7e:f3:73:48:41:17:b0:1a:68:45:92:b4:
                    d8:6b:25:ab:f0:b6:33:1c:a5:03:8a:74:97:d2:46:
                    b7:cb:56:08:58:c3:ae:21:78:f8:3c:48:4a:37:26:
                    ee:b8:b2:0f:9d:37:88:0e:ed:74:8a:a9:b2:24:83:
                    fa:2c:08:11:44:78:65:c5:1c:8d:47:7d:71:1e:80:
                    1d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F2:50:03:D7:E7:A7:81:5A:C1:48:F1:9D:44:A4:C2:01:50:B6:5A
            X509v3 Authority Key Identifier:
                keyid:71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bf:cf:ae:77:ad:c8:82:1b:8e:f9:2a:ce:4b:ac:50:dd:dd:
         9f:14:08:62:86:d6:33:33:d8:1e:67:91:ba:93:ea:f4:ac:6f:
         b4:05:85:20:f4:7b:f5:06:9e:98:5e:79:8d:be:15:5c:03:4b:
         e5:ac:fe:4c:b5:72:28:70:ec:ef:79:e2:1d:99:a3:c9:08:f7:
         4e:d4:c8:0b:ea:92:9b:c8:bd:0e:22:7c:6d:ac:d4:e4:0f:aa:
         2d:b3:29:87:65:3f:36:83:9f:2c:c9:90:3f:f3:ee:81:02:2f:
         dd:37:05:61:ce:92:77:20:78:19:17:bc:1e:3e:1a:59:12:ce:
         00:25:b5:e3:4a:ef:68:8f:8a:fd:b1:41:c9:bc:6c:33:9a:9b:
         d5:ef:da:d1:89:c4:38:fe:bf:0c:2c:b9:c8:2d:e7:1d:4c:9e:
         b1:93:2c:d9:e4:a3:2e:14:50:b8:3d:4c:57:62:e5:da:e2:71:
         5f:67:37:91:6f:cc:5d:82:4d:a1:8b:b3:44:2f:7b:35:88:1e:
         83:5d:4e:a2:78:53:b3:3c:cf:e8:85:77:cb:28:03:5c:33:4d:
         9a:1e:a5:72:8f:68:5e:fe:10:1f:f5:57:fe:b9:fb:3f:ba:4f:
         db:be:ca:e8:af:60:67:89:02:85:53:17:26:23:dd:08:c7:f1:
         3d:34:c4:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz0/BEf6h1y5iT7aAVN3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYTM0MTNkNDA3ZDhhZGY4YWI2YmU1NTcwNjA5NGVmZTlj
M2Q1ZGEwHhcNMjUwNDEzMTEwMTAwWhcNMjUwNDE0MTEwMTAwWjAzMTEwLwYDVQQD
EyhlZmYyNTAwM2Q3ZTdhNzgxNWFjMTQ4ZjE5ZDQ0YTRjMjAxNTBiNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnE6MlwOG1p6Kn9ZdEXbCDnWhZyF
6rXeIRLTAbrPr+Grp82DXLEiHmWTbv8qcb6zrf9NqH8qi37DPnYc7xnkSJkMffMW
/w4joVtkdXTcZbC3O5fYqej7K44BoHtpDfTxA3/pBEbpgARGckalBckCVjSoLceM
BvCPA8JU9tcAPBKzDCaDh0kgVROUzqoWNEiBOmq/mlMWH/Xu6aLQi5Lcbm+i+BXn
XyiL6LDvqtyVITebslaonwJ+83NIQRewGmhFkrTYayWr8LYzHKUDinSX0ka3y1YI
WMOuIXj4PEhKNybuuLIPnTeIDu10iqmyJIP6LAgRRHhlxRyNR31xHoAdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/yUAPX56eBWsFI8Z1EpMIBULZaMB8GA1UdIwQY
MBaAFHGjQT1AfYrfira+VXBglO/pw9XaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2FOQlBVQjlpdC1LdHI1VmNHQ1U3LW5EMWRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81YjRiMzYtMWFjOS00ZDI5LWEwNjct
ODMyMGRlNDRkZjhiLzEvY2FOQlBVQjlpdC1LdHI1VmNHQ1U3LW5EMWRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni81YjRiMzYtMWFjOS00ZDI5LWEwNjctODMyMGRlNDRkZjhi
LzEvY2FOQlBVQjlpdC1LdHI1VmNHQ1U3LW5EMWRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMr/Prnet
yIIbjvkqzkusUN3dnxQIYobWMzPYHmeRupPq9KxvtAWFIPR79QaemF55jb4VXANL
5az+TLVyKHDs73niHZmjyQj3TtTIC+qSm8i9DiJ8bazU5A+qLbMph2U/NoOfLMmQ
P/PugQIv3TcFYc6SdyB4GRe8Hj4aWRLOACW140rvaI+K/bFBybxsM5qb1e/a0YnE
OP6/DCy5yC3nHUyesZMs2eSjLhRQuD1MV2Ll2uJxX2c3kW/MXYJNoYuzRC97NYge
g11OonhTszzP6IV3yygDXDNNmh6lco9oXv4QH/VX/rn7P7pP277K6K9gZ4kChVMX
JiPdCMfxPTTEPQ==
-----END CERTIFICATE-----