Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
File:                     NRx7VgfFNmV_1XSPb2WySsEusX0.mft (raw, json)
Hash identifier:          SyniC+O62QdA6jjkqfovyHlz5UHSkj36O2ZzBm6R9AQ=
Subject key identifier:   83:7A:F7:E0:F9:35:04:3D:9F:EE:6E:95:48:23:E4:4A:06:C8:B5:DF
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Certificate issuer:       /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial:       01962DF3FE148E9E9FD9620B07B5F127C858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
Manifest number:          0DAB
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: 1VjnRsjH9J2pm4uVe978n-iNrLc.roa (hash: WbD1CWbWE7mMQBvGdpMQAUMcAbXTa0wFyWWbYENUrVA=)
                          2: NRx7VgfFNmV_1XSPb2WySsEusX0.crl (hash: pJOFEx9sfPw9/r4Ppr45swmU0hLmfoyHzqPMpkk5ycw=)
                          3: snr-oR1drnGUDE12am2Oc1SmmAE.roa (hash: ypW1nfFwE2qpQdtfuVLzUTdrQHGTdbKiKTowycflNh8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fe:14:8e:9e:9f:d9:62:0b:07:b5:f1:27:c8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=837af7e0f935043d9fee6e954823e44a06c8b5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:a0:20:e0:25:3a:c9:7f:b1:d1:d3:17:0b:
                    5c:c0:ca:db:c4:ec:1f:9c:f1:a4:24:cd:76:ee:04:
                    ef:b1:0a:7a:d1:4b:aa:ab:bf:6d:fc:80:b7:79:85:
                    da:6c:7e:41:15:5f:84:0a:89:a3:41:69:72:10:94:
                    3e:2e:aa:42:25:24:86:29:f2:3a:83:0f:28:b1:83:
                    d5:50:89:7d:a7:a7:69:d2:db:04:d1:57:64:98:98:
                    a6:e7:fc:ed:b3:78:b3:9b:41:c0:13:de:ef:48:32:
                    d8:96:dc:c1:42:e3:8e:48:bf:cc:b8:6c:31:86:47:
                    5f:6a:7e:ec:bc:03:2b:d6:c4:e3:7f:fc:b4:f5:62:
                    c5:d9:99:9d:d3:b2:10:c5:7c:0a:d5:e0:3d:2d:27:
                    38:d7:39:59:c5:ba:5a:09:62:b3:c7:ee:83:ab:f2:
                    36:79:27:5d:2f:7f:02:16:80:ae:61:bc:b7:ad:02:
                    7d:cb:b0:15:31:39:5b:e5:cb:0d:ff:95:40:a8:8b:
                    6e:b1:47:5b:2a:66:31:2a:a5:4f:e4:51:6b:ac:6b:
                    9e:6c:46:59:7b:51:81:32:39:4a:1c:9d:dd:33:e6:
                    90:ef:be:33:b8:45:82:88:1d:56:77:ba:fb:6b:73:
                    3f:88:b7:6d:ec:b3:a6:16:19:0e:e7:67:28:3a:29:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7A:F7:E0:F9:35:04:3D:9F:EE:6E:95:48:23:E4:4A:06:C8:B5:DF
            X509v3 Authority Key Identifier:
                keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2d:86:f6:2d:8e:83:37:ca:6f:76:b4:03:f8:d9:c6:2d:70:
         0f:e6:60:17:2d:2f:19:81:45:90:be:9b:e4:fd:66:0b:c6:14:
         9d:b4:00:a0:a0:8f:13:a4:78:ec:cf:17:bd:d4:18:4a:9b:bc:
         47:28:f9:42:21:d6:c4:9b:90:d4:31:f4:c6:1c:96:ab:36:f6:
         75:0c:78:b8:31:bc:6a:38:31:19:d7:20:6a:30:59:a1:91:ca:
         99:98:48:cf:2e:44:dd:df:6d:f8:23:5f:bd:16:cf:98:bb:10:
         52:8b:fe:df:7c:18:df:f1:26:df:39:c1:b2:99:a6:69:85:7e:
         95:4b:b0:a1:18:32:63:f1:7e:18:ee:92:66:08:67:36:64:81:
         8a:f0:e5:28:c8:83:1a:51:fb:b2:cb:34:e3:d1:41:fc:72:47:
         6d:57:67:00:27:96:7e:fe:65:ad:72:48:80:23:08:9c:15:73:
         cc:4b:5a:5d:27:00:57:3a:cb:f0:3f:db:15:75:68:79:bc:d2:
         99:aa:f2:07:c9:75:11:5b:3a:4e:39:2b:fe:3d:90:ea:d0:8d:
         9c:fc:94:4e:db:2e:98:2a:e9:58:5a:5e:7c:47:e3:a0:48:89:
         23:1d:5c:bf:2c:4b:44:0d:e3:21:db:5c:78:63:78:11:fb:9f:
         c0:81:96:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/4Ujp6f2WILB7XxJ8hYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWM3YjU2MDdjNTM2NjU3ZmQ1NzQ4ZjZmNjViMjRhYzEy
ZWIxN2QwHhcNMjUwNDEzMDcwMTI2WhcNMjUwNDE0MDcwMTI2WjAzMTEwLwYDVQQD
Eyg4MzdhZjdlMGY5MzUwNDNkOWZlZTZlOTU0ODIzZTQ0YTA2YzhiNWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL+gIOAlOsl/sdHTFwtcwMrbxOwf
nPGkJM127gTvsQp60Uuqq79t/IC3eYXabH5BFV+EComjQWlyEJQ+LqpCJSSGKfI6
gw8osYPVUIl9p6dp0tsE0VdkmJim5/zts3izm0HAE97vSDLYltzBQuOOSL/MuGwx
hkdfan7svAMr1sTjf/y09WLF2Zmd07IQxXwK1eA9LSc41zlZxbpaCWKzx+6Dq/I2
eSddL38CFoCuYby3rQJ9y7AVMTlb5csN/5VAqItusUdbKmYxKqVP5FFrrGuebEZZ
e1GBMjlKHJ3dM+aQ774zuEWCiB1Wd7r7a3M/iLdt7LOmFhkO52coOin1nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIN69+D5NQQ9n+5ulUgj5EoGyLXfMB8GA1UdIwQY
MBaAFDUce1YHxTZlf9V0j29lskrBLrF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jMWZmMjEtNWFjMi00ZTUwLTkzNmMt
NjUxNzA3YzkxZmQzLzEvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9jMWZmMjEtNWFjMi00ZTUwLTkzNmMtNjUxNzA3YzkxZmQz
LzEvTlJ4N1ZnZkZObVZfMVhTUGIyV3lTc0V1c1gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARy2G9i2O
gzfKb3a0A/jZxi1wD+ZgFy0vGYFFkL6b5P1mC8YUnbQAoKCPE6R47M8XvdQYSpu8
Ryj5QiHWxJuQ1DH0xhyWqzb2dQx4uDG8ajgxGdcgajBZoZHKmZhIzy5E3d9t+CNf
vRbPmLsQUov+33wY3/Em3znBspmmaYV+lUuwoRgyY/F+GO6SZghnNmSBivDlKMiD
GlH7sss049FB/HJHbVdnACeWfv5lrXJIgCMInBVzzEtaXScAVzrL8D/bFXVoebzS
maryB8l1EVs6Tjkr/j2Q6tCNnPyUTtsumCrpWFpefEfjoEiJIx1cvyxLRA3jIdtc
eGN4EfufwIGWQw==
-----END CERTIFICATE-----