Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
File:                     NLQZ-koKFgUYgxjN9KIESZKFO5U.mft (raw, json)
Hash identifier:          JsMx9b1HJB1JsPQ9iOxb5gVZ2lDwq6ySOzZW/XwQZ3g=
Subject key identifier:   AD:81:88:FA:96:DD:6E:0D:99:1C:66:B1:AC:AD:20:9D:E9:B4:C2:7C
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Certificate issuer:       /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial:       01962DF412735C6B5B0A07002AB81F3D672D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft
Manifest number:          0DAD
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: CNQCSVKEMGXZWYhuFwFlfeJh3Us.roa (hash: HUYQM19IzL3twBwaH+2KXeSqoub/kejTXefcV/fEL14=)
                          2: CNv0NdNZKIhaMEB-_zcwx5XHpgI.roa (hash: jSc4O0ONF5PwUEe8AoTXbFWewQ1vQ1toZjhU7yhjZAU=)
                          3: NLQZ-koKFgUYgxjN9KIESZKFO5U.crl (hash: 4TZpQn1X/XehC1htvF08Fzxd1uneQev5pAIY7RqDkRI=)
                          4: wig6KC4gSVw0HyIKRBc2xTnuVN4.roa (hash: EHt3EBj8Qls7cfEcrr19uaUc9VJjWJHcYHVlVYE7DsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:12:73:5c:6b:5b:0a:07:00:2a:b8:1f:3d:67:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=ad8188fa96dd6e0d991c66b1acad209de9b4c27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:07:bb:88:3a:5b:a1:95:3c:eb:54:43:05:22:
                    2a:ea:fa:68:64:fd:6d:6c:79:ac:1b:f3:af:73:60:
                    94:d6:14:f6:86:db:2e:d0:15:74:4a:26:28:1c:9d:
                    08:fe:6c:21:ff:2f:ab:b2:d3:26:4f:53:8c:3a:4d:
                    e7:ff:3b:ff:75:dc:4d:f1:12:52:eb:1f:bf:8d:6e:
                    09:2a:7b:ee:2e:c5:74:16:fe:43:7e:cd:aa:4b:13:
                    d1:24:b8:0b:d9:f0:e4:2e:a4:1f:d2:ae:04:9e:e3:
                    f8:67:fc:b3:16:74:5a:97:b8:05:7e:72:e8:90:0f:
                    52:0c:ae:01:44:66:28:18:cb:01:cd:97:c8:c9:09:
                    d0:e0:29:a9:17:9c:ee:8d:9b:83:9f:06:0f:c8:cb:
                    4a:43:98:93:46:4c:18:d0:38:35:a4:2b:5e:83:ae:
                    96:5d:67:ee:be:e4:ed:4a:16:ad:ac:ab:bc:c4:68:
                    de:0e:2e:da:ff:89:77:42:47:08:21:ec:2a:9c:d0:
                    65:44:52:aa:5f:9b:f6:74:4e:a5:6b:64:70:c2:90:
                    e0:a1:a9:2d:a1:24:5e:b6:dd:fc:d8:39:64:9f:f6:
                    ab:ab:d4:ba:89:2d:b3:85:c5:48:b4:b3:58:a1:b0:
                    b7:76:8d:00:b1:e6:e3:8e:8d:7a:68:9d:da:56:ba:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:81:88:FA:96:DD:6E:0D:99:1C:66:B1:AC:AD:20:9D:E9:B4:C2:7C
            X509v3 Authority Key Identifier:
                keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:64:68:99:2b:32:33:26:9b:bb:48:8f:30:db:27:49:6e:4f:
         37:00:8f:95:8d:3e:43:ea:99:db:10:0d:fe:f7:b9:42:04:4b:
         6b:67:cc:b0:44:71:0f:2f:f3:c9:cf:84:d1:76:7d:a5:b1:6e:
         99:d1:a9:d2:36:34:91:4f:3f:78:5d:bd:e0:1d:5f:83:98:e8:
         32:9b:de:95:fd:b7:2e:20:28:41:ca:9f:a1:2b:7c:6a:db:11:
         88:6d:f5:f0:06:ba:ec:d9:d8:cc:87:80:19:5c:12:e0:47:0b:
         ce:2f:22:7e:8c:f7:fc:e1:b0:5e:86:fb:6f:f3:b7:88:ba:e2:
         ab:d9:b3:f3:bb:c9:3e:c9:7a:37:38:f9:ee:1d:ad:c6:33:2e:
         4f:7f:61:51:07:1f:f4:c2:fb:c4:d9:d7:d2:b1:cd:61:06:fb:
         65:4d:ef:b4:e6:19:98:42:5c:c9:fb:e4:da:b8:7e:4b:70:61:
         45:62:13:e2:5d:a2:45:4a:44:e6:31:6f:18:20:c2:6e:c5:6c:
         99:45:53:de:d0:0d:f4:f8:c7:eb:ac:35:d5:d9:a9:60:84:b3:
         39:72:3f:5e:38:d3:e8:39:38:e1:66:d9:8f:3e:3d:64:3a:92:
         b1:9d:f6:6d:22:d8:5a:48:84:09:9a:17:d2:37:1d:a5:82:0a:
         91:1e:80:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9BJzXGtbCgcAKrgfPWctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YjQxOWZhNGEwYTE2MDUxODgzMThjZGY0YTIwNDQ5OTI4
NTNiOTUwHhcNMjUwNDEzMDcwMTMyWhcNMjUwNDE0MDcwMTMyWjAzMTEwLwYDVQQD
EyhhZDgxODhmYTk2ZGQ2ZTBkOTkxYzY2YjFhY2FkMjA5ZGU5YjRjMjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkge7iDpboZU861RDBSIq6vpoZP1t
bHmsG/Ovc2CU1hT2htsu0BV0SiYoHJ0I/mwh/y+rstMmT1OMOk3n/zv/ddxN8RJS
6x+/jW4JKnvuLsV0Fv5Dfs2qSxPRJLgL2fDkLqQf0q4EnuP4Z/yzFnRal7gFfnLo
kA9SDK4BRGYoGMsBzZfIyQnQ4CmpF5zujZuDnwYPyMtKQ5iTRkwY0Dg1pCteg66W
XWfuvuTtShatrKu8xGjeDi7a/4l3QkcIIewqnNBlRFKqX5v2dE6la2RwwpDgoakt
oSRett382Dlkn/arq9S6iS2zhcVItLNYobC3do0Asebjjo16aJ3aVrrlIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2BiPqW3W4NmRxmsaytIJ3ptMJ8MB8GA1UdIwQY
MBaAFDS0GfpKChYFGIMYzfSiBEmShTuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMt
ODc3NzU0NGM5Mjc1LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84Yzc5ZmItN2E1Ny00MjlkLTljMzMtODc3NzU0NGM5Mjc1
LzEvTkxRWi1rb0tGZ1VZZ3hqTjlLSUVTWktGTzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWRomSsy
Myabu0iPMNsnSW5PNwCPlY0+Q+qZ2xAN/ve5QgRLa2fMsERxDy/zyc+E0XZ9pbFu
mdGp0jY0kU8/eF294B1fg5joMpvelf23LiAoQcqfoSt8atsRiG318Aa67NnYzIeA
GVwS4EcLzi8ifoz3/OGwXob7b/O3iLriq9mz87vJPsl6Nzj57h2txjMuT39hUQcf
9ML7xNnX0rHNYQb7ZU3vtOYZmEJcyfvk2rh+S3BhRWIT4l2iRUpE5jFvGCDCbsVs
mUVT3tAN9PjH66w11dmpYISzOXI/XjjT6Dk44WbZjz49ZDqSsZ32bSLYWkiECZoX
0jcdpYIKkR6AiQ==
-----END CERTIFICATE-----