Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
File:                     nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft (raw, json)
Hash identifier:          QAIvE+vg6JN4nsROuvY1m3UjCSLoUEdnIlntq9QMeAQ=
Subject key identifier:   31:4A:5F:84:7B:E3:7B:7D:1B:C4:CF:3E:40:6F:54:8A:C6:F8:12:74
Authority key identifier: 9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72
Certificate issuer:       /CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
Certificate serial:       01962E61D1E1A1B0B613404FD79A69D040D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft
Manifest number:          0631
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: BlYqXPvciPfdyJ-GQUZOsP4jpLI.roa (hash: LmatIhZjxo/kiezrlbpjhiTczB9qo8t5QvMaWwqWJt0=)
                          2: nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl (hash: nDYQtXbDAgbMiAV9nXzwZo+gqLJGo2BsK3sbPqMi/Zo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d1:e1:a1:b0:b6:13:40:4f:d7:9a:69:d0:40:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f3640da7f1bc23ed4599f84a0853c8399f35d72
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=314a5f847be37b7d1bc4cf3e406f548ac6f81274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:f3:d1:aa:6f:0f:19:b3:09:96:34:2e:65:
                    db:25:98:3c:a2:2c:d7:6d:af:7d:ff:c4:c8:b0:19:
                    72:f4:d7:73:75:61:9d:69:99:1c:1d:e3:11:00:ff:
                    11:6c:87:51:9f:08:13:7c:5b:66:b6:d5:ca:cd:ef:
                    45:d8:45:d2:1f:cc:cf:c4:fa:ad:fc:06:26:50:c3:
                    75:23:15:3b:92:6d:71:f5:d9:f9:d1:1e:bb:5b:7f:
                    09:d0:cc:b7:40:bc:f0:37:fa:c2:55:41:b1:a6:0f:
                    af:ed:c8:90:9d:26:53:04:35:08:8d:dc:6a:1a:18:
                    37:16:77:e5:f5:d1:79:12:7d:88:9c:ca:31:30:e6:
                    5a:47:3b:35:35:53:db:f3:8e:7a:d2:cd:cb:9a:c0:
                    5e:81:03:10:c3:37:b7:80:98:2f:f1:0b:15:7a:16:
                    d6:82:d1:06:48:92:b5:63:4a:73:87:d8:33:9b:22:
                    f2:0a:29:2f:19:30:18:d2:37:cc:30:02:03:96:dc:
                    38:1a:88:0d:de:d4:c5:2c:fc:16:d7:ab:d2:3f:60:
                    e6:ad:14:95:9a:3d:48:30:d5:86:25:70:22:96:da:
                    2f:dd:79:f5:17:27:7c:51:ea:39:7a:35:10:f7:8f:
                    01:28:89:33:74:07:9d:16:10:0d:1f:37:d7:4a:cc:
                    67:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4A:5F:84:7B:E3:7B:7D:1B:C4:CF:3E:40:6F:54:8A:C6:F8:12:74
            X509v3 Authority Key Identifier:
                keyid:9F:36:40:DA:7F:1B:C2:3E:D4:59:9F:84:A0:85:3C:83:99:F3:5D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb47c2-f10b-4a77-8b03-edc336652ed7/1/nzZA2n8bwj7UWZ-EoIU8g5nzXXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e6:e3:5b:23:51:6c:fa:db:44:29:2c:bd:c2:a7:3d:8c:8e:
         61:6f:7a:92:2c:1a:76:94:5c:8b:4c:38:70:35:6a:f2:a5:8d:
         6d:3b:f6:50:0a:76:86:40:0a:0e:c6:e3:3c:ea:42:1f:1e:40:
         ce:d0:1d:e2:56:ac:02:29:3d:69:40:ac:a2:1c:37:6d:7b:2d:
         a0:ae:41:c0:3f:2a:90:10:f1:1a:25:42:65:bc:b8:6e:ce:3a:
         ca:04:9e:c4:2b:af:a2:b2:0f:40:7b:84:78:ac:33:06:0e:b9:
         8e:a3:6c:7f:a4:b5:e8:06:99:9e:c6:1f:57:b4:21:5f:6c:92:
         c2:d2:c3:65:d9:be:a4:21:ac:ed:08:e5:d4:41:c9:dd:6f:93:
         48:a2:51:89:5e:16:25:25:b3:bf:c4:bd:3e:00:53:f7:65:f8:
         e1:a8:90:4a:8c:c9:2e:7a:ce:23:fa:9e:fc:38:a9:72:15:f9:
         09:fa:f9:78:fa:dd:3a:d0:71:6f:78:fa:48:c3:88:42:93:0b:
         1c:3b:2a:b0:4c:a5:3a:5a:30:ea:07:3c:26:27:cb:f3:1d:be:
         c6:4a:9d:0e:01:dc:42:42:5a:14:23:be:27:c4:e4:a5:7c:93:
         a4:b9:d9:66:45:64:1f:0c:a4:d2:b9:ac:20:e9:07:d7:7d:f2:
         71:eb:b7:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdHhobC2E0BP15pp0EDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzY0MGRhN2YxYmMyM2VkNDU5OWY4NGEwODUzYzgzOTlm
MzVkNzIwHhcNMjUwNDEzMDkwMTI0WhcNMjUwNDE0MDkwMTI0WjAzMTEwLwYDVQQD
EygzMTRhNWY4NDdiZTM3YjdkMWJjNGNmM2U0MDZmNTQ4YWM2ZjgxMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvLz0apvDxmzCZY0LmXbJZg8oizX
ba99/8TIsBly9NdzdWGdaZkcHeMRAP8RbIdRnwgTfFtmttXKze9F2EXSH8zPxPqt
/AYmUMN1IxU7km1x9dn50R67W38J0My3QLzwN/rCVUGxpg+v7ciQnSZTBDUIjdxq
Ghg3Fnfl9dF5En2InMoxMOZaRzs1NVPb84560s3LmsBegQMQwze3gJgv8QsVehbW
gtEGSJK1Y0pzh9gzmyLyCikvGTAY0jfMMAIDltw4GogN3tTFLPwW16vSP2DmrRSV
mj1IMNWGJXAiltov3Xn1Fyd8Ueo5ejUQ948BKIkzdAedFhANHzfXSsxnuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFKX4R743t9G8TPPkBvVIrG+BJ0MB8GA1UdIwQY
MBaAFJ82QNp/G8I+1FmfhKCFPIOZ811yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMt
ZWRjMzM2NjUyZWQ3LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYjQ3YzItZjEwYi00YTc3LThiMDMtZWRjMzM2NjUyZWQ3
LzEvbnpaQTJuOGJ3ajdVV1otRW9JVThnNW56WFhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATebjWyNR
bPrbRCksvcKnPYyOYW96kiwadpRci0w4cDVq8qWNbTv2UAp2hkAKDsbjPOpCHx5A
ztAd4lasAik9aUCsohw3bXstoK5BwD8qkBDxGiVCZby4bs46ygSexCuvorIPQHuE
eKwzBg65jqNsf6S16AaZnsYfV7QhX2ySwtLDZdm+pCGs7Qjl1EHJ3W+TSKJRiV4W
JSWzv8S9PgBT92X44aiQSozJLnrOI/qe/DipchX5Cfr5ePrdOtBxb3j6SMOIQpML
HDsqsEylOlow6gc8JifL8x2+xkqdDgHcQkJaFCO+J8TkpXyTpLnZZkVkHwyk0rms
IOkH133yceu35w==
-----END CERTIFICATE-----