Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File:                     neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier:          KsVfe5OQv3XkV2CA/TIuH4jkn2nAMh74OdTS2xBqr+k=
Subject key identifier:   A2:A9:A0:DA:9D:F3:71:D2:5D:20:16:AB:0D:B6:D5:00:AC:5B:F1:C2
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer:       /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial:       01962F0719F5563E2CBDF4FA9A689312DC2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number:          04AE
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: ZsqRMpcA5rVpeghbKlpto90ibM8.roa (hash: nVYdBvobjkBIWWz9Jd+uPsYyriFcHyHbwpsRZ8kZ4Ek=)
                          2: gM98BY1lyRIDiMmnpeavUnwI1rY.roa (hash: ve1xDMahiOfYFvEODore+1Lgn1TnHWQyebyINSLaR/8=)
                          3: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: Rc8nlJ1uiU+CJY2UibVpMkLTrfk8+q8UryxcX5E0mGA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:19:f5:56:3e:2c:bd:f4:fa:9a:68:93:12:dc:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=a2a9a0da9df371d25d2016ab0db6d500ac5bf1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:95:b7:0b:84:cc:38:6c:18:10:d4:8d:1e:
                    c5:f8:2d:c5:fe:dd:64:a0:9d:c6:9c:7c:b1:ec:3f:
                    fd:a8:e8:32:78:56:cf:5f:e4:e4:5f:fb:a2:23:4c:
                    0d:9d:2b:1a:45:da:ba:4a:ad:f8:4d:d4:9f:c5:e1:
                    df:4a:f4:91:84:0d:32:e4:05:29:87:f3:1b:62:3d:
                    13:23:9d:31:1f:b9:3f:ec:3b:7c:01:53:9f:1b:08:
                    8f:22:58:11:5c:4a:cd:c4:1b:17:d7:50:23:b2:15:
                    de:c6:f5:25:d4:50:2a:9d:37:86:ce:4f:67:cf:c2:
                    ae:d5:c1:dd:b2:79:86:47:ad:8b:57:33:27:be:b8:
                    66:e7:83:84:81:22:93:d7:50:ae:a8:3b:8b:5c:3b:
                    45:c5:5f:37:04:dd:80:bd:0f:9c:e2:38:e2:dc:c5:
                    f1:2c:bd:d4:60:11:e6:aa:12:d6:a7:71:f7:3e:53:
                    1e:f2:db:d5:9b:64:80:f0:92:db:11:c0:d1:6c:f8:
                    18:d0:ec:59:11:7e:eb:02:ed:1c:25:0a:5c:3a:47:
                    ae:e3:3f:68:68:a2:ae:d0:72:54:c5:3f:2a:64:34:
                    59:42:92:d0:b4:86:76:61:91:ce:fe:b7:02:40:0f:
                    b4:04:12:eb:01:8b:23:43:89:49:8d:3d:f6:66:b8:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:A0:DA:9D:F3:71:D2:5D:20:16:AB:0D:B6:D5:00:AC:5B:F1:C2
            X509v3 Authority Key Identifier:
                keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e6:3a:20:46:2e:aa:41:b4:ee:52:80:85:87:39:0b:2d:2d:
         58:b3:5d:29:c1:25:97:f5:58:70:17:2a:76:5f:d8:5d:65:28:
         c2:68:12:49:93:9d:50:37:d7:98:05:73:c2:11:46:13:65:58:
         74:02:65:1b:1c:04:24:e2:0e:a9:3b:bd:1c:a5:57:b5:0a:b8:
         1f:5d:00:11:dd:fb:fd:ea:9c:45:70:d5:14:b4:3d:19:e8:bf:
         5e:e1:56:91:ca:43:03:b7:b6:a8:6a:ff:37:a4:ef:6b:ac:51:
         b7:38:13:8f:16:73:d9:ed:0b:4d:81:b9:0c:55:11:7d:cb:c6:
         70:9a:7f:29:62:34:20:35:3d:5d:bf:35:d3:f4:61:b7:93:83:
         4c:cc:eb:e5:50:ca:53:72:17:66:e2:25:33:00:63:1b:8b:05:
         76:bf:77:01:bc:28:54:12:74:23:ac:47:38:8d:ec:c5:39:10:
         ea:db:89:dc:43:21:0b:de:69:f8:8c:50:b2:19:bd:c0:37:62:
         31:50:27:66:db:06:aa:50:e1:7b:3e:91:0d:9a:d0:b0:4f:92:
         68:39:67:d6:e8:0f:59:49:fc:df:8e:fa:e8:d9:03:39:57:aa:
         d2:85:0e:65:b9:73:d8:dd:6a:87:a6:b8:61:3e:c3:99:20:e8:
         d8:bb:28:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBxn1Vj4svfT6mmiTEtwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZTc4M2U5YWNkNTY5OTJmNTgzNWZiNDg4MjE4MzUwMGNh
MDNjODMwHhcNMjUwNDEzMTIwMTU2WhcNMjUwNDE0MTIwMTU2WjAzMTEwLwYDVQQD
EyhhMmE5YTBkYTlkZjM3MWQyNWQyMDE2YWIwZGI2ZDUwMGFjNWJmMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXaVtwuEzDhsGBDUjR7F+C3F/t1k
oJ3GnHyx7D/9qOgyeFbPX+TkX/uiI0wNnSsaRdq6Sq34TdSfxeHfSvSRhA0y5AUp
h/MbYj0TI50xH7k/7Dt8AVOfGwiPIlgRXErNxBsX11AjshXexvUl1FAqnTeGzk9n
z8Ku1cHdsnmGR62LVzMnvrhm54OEgSKT11CuqDuLXDtFxV83BN2AvQ+c4jji3MXx
LL3UYBHmqhLWp3H3PlMe8tvVm2SA8JLbEcDRbPgY0OxZEX7rAu0cJQpcOkeu4z9o
aKKu0HJUxT8qZDRZQpLQtIZ2YZHO/rcCQA+0BBLrAYsjQ4lJjT32Zric+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKpoNqd83HSXSAWqw221QCsW/HCMB8GA1UdIwQY
MBaAFJ3ng+ms1WmS9YNftIghg1AMoDyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmVlRDZhelZhWkwxZzEtMGlDR0RVQXlnUElNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80ZjA1Y2UtYTM4Mi00OWEwLTk5OTkt
ZTUyZjcwYzA2YzI5LzEvbmVlRDZhelZhWkwxZzEtMGlDR0RVQXlnUElNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80ZjA1Y2UtYTM4Mi00OWEwLTk5OTktZTUyZjcwYzA2YzI5
LzEvbmVlRDZhelZhWkwxZzEtMGlDR0RVQXlnUElNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+Y6IEYu
qkG07lKAhYc5Cy0tWLNdKcEll/VYcBcqdl/YXWUowmgSSZOdUDfXmAVzwhFGE2VY
dAJlGxwEJOIOqTu9HKVXtQq4H10AEd37/eqcRXDVFLQ9Gei/XuFWkcpDA7e2qGr/
N6Tva6xRtzgTjxZz2e0LTYG5DFURfcvGcJp/KWI0IDU9Xb810/Rht5ODTMzr5VDK
U3IXZuIlMwBjG4sFdr93AbwoVBJ0I6xHOI3sxTkQ6tuJ3EMhC95p+IxQshm9wDdi
MVAnZtsGqlDhez6RDZrQsE+SaDln1ugPWUn834766NkDOVeq0oUOZblz2N1qh6a4
YT7DmSDo2Lsouw==
-----END CERTIFICATE-----