Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
File:                     NvdiEfPFj2yYr5nPZabx6P98Q7o.mft (raw, json)
Hash identifier:          l3Krws3hpLhLGdJ83/56t5Tn9M4sF0PttttQkdeAnbg=
Subject key identifier:   AC:73:24:66:ED:FB:D9:84:95:95:12:29:B8:D0:52:15:30:26:FF:B7
Authority key identifier: 36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA
Certificate issuer:       /CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
Certificate serial:       01962F74976D4337A7F31B30F3D060218AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft
Manifest number:          0EB1
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: IMiPI_sQJpS-dko-Db8d2-Qz-B0.roa (hash: fyR22c3qbngtIbooNJXlmC6fXpgIjnWVTMNZ/hhGG0A=)
                          2: NvdiEfPFj2yYr5nPZabx6P98Q7o.crl (hash: d/+R9oJE3hqSLmYq5AL8LOQGhEB+S+SwQRtxZ2o7Jpg=)
                          3: SAAncdb2H87xzD0WkojsMdkjI9E.roa (hash: bzjggaHNN8SzirhLiuBFGlBjgMu/vnVg8ZfnlYMY9GY=)
                          4: _E9iapjx7rmdCjMi6lOxJAzw41c.roa (hash: XzeBU1MqaK56hZttRGiRoj2k5rsX6aCywVY+pFC+b8Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:97:6d:43:37:a7:f3:1b:30:f3:d0:60:21:8a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36f76211f3c58f6c98af99cf65a6f1e8ff7c43ba
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=ac732466edfbd98495951229b8d052153026ffb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:06:10:27:10:eb:40:9b:8a:55:ed:35:b1:
                    65:18:f8:fb:c3:5a:ce:23:d4:36:45:20:18:37:74:
                    13:a4:cc:91:50:38:1c:82:10:92:5a:9a:8c:30:be:
                    3e:a4:16:0b:d5:15:4e:2c:89:c6:6e:67:7c:b2:61:
                    77:46:74:70:d4:58:aa:30:7c:da:ad:36:e7:11:ea:
                    71:78:51:77:3b:22:c5:33:f0:9c:83:58:c8:8c:8c:
                    25:f0:e0:83:a4:5a:dc:b4:55:95:5a:77:73:4d:98:
                    96:e2:65:4e:2b:30:65:f4:f9:dd:4a:5b:6a:42:89:
                    c5:ea:e4:c1:00:09:03:38:64:11:54:ab:d7:65:fb:
                    f7:f4:79:2e:ca:2e:63:d6:8e:05:a4:8b:2c:74:0c:
                    e1:fe:2c:a1:7f:b8:f4:e0:d6:5e:53:32:ed:f8:04:
                    1d:fd:67:54:1a:24:75:79:be:15:eb:e2:55:b1:b8:
                    b3:e7:aa:13:8d:64:c8:01:a8:14:30:a9:fd:a0:65:
                    54:c2:bc:0a:2f:2e:83:cc:40:49:c3:2a:f2:da:92:
                    20:67:cb:31:9e:ea:75:3e:68:45:7e:5e:35:05:f0:
                    13:94:60:e1:08:c2:d5:bb:40:a5:68:13:29:58:7a:
                    fd:69:54:f1:14:8b:46:f8:57:43:a4:b7:b0:69:41:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:73:24:66:ED:FB:D9:84:95:95:12:29:B8:D0:52:15:30:26:FF:B7
            X509v3 Authority Key Identifier:
                keyid:36:F7:62:11:F3:C5:8F:6C:98:AF:99:CF:65:A6:F1:E8:FF:7C:43:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvdiEfPFj2yYr5nPZabx6P98Q7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/fcad2d-86d9-42b1-b115-2fcf396253b8/1/NvdiEfPFj2yYr5nPZabx6P98Q7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a5:8c:2e:81:31:e7:ee:8d:cc:54:60:de:19:1e:7f:60:ef:
         1f:ed:93:e4:92:ad:ae:69:9a:26:f4:36:74:8a:cd:03:24:02:
         6c:28:56:86:ac:78:e4:d0:0b:9b:65:fa:7c:e3:c4:ed:08:16:
         3d:91:c7:ac:16:bf:7d:cc:0e:ac:eb:5c:d5:df:90:d5:56:23:
         aa:fd:f6:8c:25:3d:f2:e7:bc:7b:ba:c2:af:59:73:86:5d:e2:
         bd:a4:25:ca:0d:f5:ba:6a:b7:94:d7:41:53:ef:b5:78:83:d5:
         31:bd:4a:50:ae:7e:4c:70:78:a4:cd:49:9d:85:b1:8d:58:bc:
         b7:ce:5a:3a:9d:97:4b:09:a3:8e:0a:18:0a:e4:a7:5c:e3:03:
         f0:22:2f:8b:bc:94:e7:6d:8c:3f:aa:e3:a0:88:e4:d0:72:71:
         2a:87:40:ed:fc:8e:f1:6f:46:85:a4:1c:f7:c4:be:3d:dc:bd:
         26:3e:b6:fc:27:92:20:93:87:ff:5e:5b:3d:1f:6a:e9:02:e3:
         e0:d9:bf:54:15:ff:fd:a5:00:36:88:83:38:d6:53:5b:3b:ac:
         8c:30:4c:c9:15:90:ce:24:9b:37:4e:c6:85:be:52:fe:e2:05:
         c7:e4:de:ec:72:80:bb:5f:59:09:0c:00:53:22:3c:63:75:82:
         0c:a8:96:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdJdtQzen8xsw89BgIYrFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Zjc2MjExZjNjNThmNmM5OGFmOTljZjY1YTZmMWU4ZmY3
YzQzYmEwHhcNMjUwNDEzMTQwMTMyWhcNMjUwNDE0MTQwMTMyWjAzMTEwLwYDVQQD
EyhhYzczMjQ2NmVkZmJkOTg0OTU5NTEyMjliOGQwNTIxNTMwMjZmZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHEGECcQ60CbilXtNbFlGPj7w1rO
I9Q2RSAYN3QTpMyRUDgcghCSWpqMML4+pBYL1RVOLInGbmd8smF3RnRw1FiqMHza
rTbnEepxeFF3OyLFM/Ccg1jIjIwl8OCDpFrctFWVWndzTZiW4mVOKzBl9PndSltq
QonF6uTBAAkDOGQRVKvXZfv39Hkuyi5j1o4FpIssdAzh/iyhf7j04NZeUzLt+AQd
/WdUGiR1eb4V6+JVsbiz56oTjWTIAagUMKn9oGVUwrwKLy6DzEBJwyry2pIgZ8sx
nup1PmhFfl41BfATlGDhCMLVu0ClaBMpWHr9aVTxFItG+FdDpLewaUEkXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxzJGbt+9mElZUSKbjQUhUwJv+3MB8GA1UdIwQY
MBaAFDb3YhHzxY9smK+Zz2Wm8ej/fEO6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUt
MmZjZjM5NjI1M2I4LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9mY2FkMmQtODZkOS00MmIxLWIxMTUtMmZjZjM5NjI1M2I4
LzEvTnZkaUVmUEZqMnlZcjVuUFphYng2UDk4UTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6WMLoEx
5+6NzFRg3hkef2DvH+2T5JKtrmmaJvQ2dIrNAyQCbChWhqx45NALm2X6fOPE7QgW
PZHHrBa/fcwOrOtc1d+Q1VYjqv32jCU98ue8e7rCr1lzhl3ivaQlyg31umq3lNdB
U++1eIPVMb1KUK5+THB4pM1JnYWxjVi8t85aOp2XSwmjjgoYCuSnXOMD8CIvi7yU
522MP6rjoIjk0HJxKodA7fyO8W9GhaQc98S+Pdy9Jj62/CeSIJOH/15bPR9q6QLj
4Nm/VBX//aUANoiDONZTWzusjDBMyRWQziSbN07Ghb5S/uIFx+Te7HKAu19ZCQwA
UyI8Y3WCDKiWPg==
-----END CERTIFICATE-----