Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
File:                     NmTkRiopAqUvgm2uOFZXMe_FvdM.mft (raw, json)
Hash identifier:          T8m924SGfmiHZ8uWfhs82MviAUN19bjBPcWhaVmYQdM=
Subject key identifier:   FB:E2:8F:59:34:C3:AD:40:4C:15:1D:FC:21:F5:36:35:FC:EB:3E:68
Authority key identifier: 36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3
Certificate issuer:       /CN=3664e4462a2902a52f826dae38565731efc5bdd3
Certificate serial:       01962F747C339C25428684C745BDB06CDD0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft
Manifest number:          143A
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: NmTkRiopAqUvgm2uOFZXMe_FvdM.crl (hash: sm1bwud2A15jyv/cuVoms1V2f0QRtA0P10jG7EYIc2o=)
                          2: bRSiH3Ltu0n345442eKdUINyK3s.roa (hash: WObRy2TpZce8N0K21ZTeL8NwUXrbmFADn/Y+S73z7rk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7c:33:9c:25:42:86:84:c7:45:bd:b0:6c:dd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3664e4462a2902a52f826dae38565731efc5bdd3
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=fbe28f5934c3ad404c151dfc21f53635fceb3e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:3e:4d:58:1f:85:0c:42:99:2d:0d:f8:40:
                    8c:01:79:a7:91:e6:84:38:25:97:ae:69:a3:39:71:
                    d7:7d:c3:81:1a:27:b6:7f:7e:10:b6:ea:63:86:ee:
                    11:94:c0:ba:82:16:8c:5a:3a:64:d4:89:f7:2a:57:
                    59:6c:54:8f:dd:a7:32:fe:45:0b:71:bf:1e:25:a7:
                    dc:fc:13:d2:65:65:d9:be:32:da:26:9d:70:c7:fe:
                    63:f6:1e:cd:3f:b5:a4:bf:86:f3:ed:20:7f:b1:51:
                    40:83:e0:7d:f7:59:87:99:6c:5c:64:41:f8:cb:5a:
                    30:de:9d:4a:7a:c6:53:27:27:90:26:56:50:f8:95:
                    26:cd:cc:82:7a:6c:d0:1b:a6:44:d7:c9:71:cd:90:
                    6b:54:10:94:e6:fe:a9:89:5b:cf:60:c6:31:e6:f2:
                    3e:d2:16:9a:bf:1f:97:bb:a0:a9:23:41:9e:84:ae:
                    4b:ec:50:e1:8c:d7:33:9f:29:fc:fc:c0:8e:12:fb:
                    c1:2c:48:cf:50:d7:18:82:69:3f:bb:52:4a:ce:a9:
                    b8:58:b2:c0:6e:c0:8a:b4:4d:ba:d9:fa:76:05:fd:
                    2c:b6:8a:f3:90:f7:3b:36:14:90:09:e6:21:48:f2:
                    93:c2:94:e1:06:f7:f0:c4:0d:b7:aa:ea:b2:30:13:
                    b7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E2:8F:59:34:C3:AD:40:4C:15:1D:FC:21:F5:36:35:FC:EB:3E:68
            X509v3 Authority Key Identifier:
                keyid:36:64:E4:46:2A:29:02:A5:2F:82:6D:AE:38:56:57:31:EF:C5:BD:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmTkRiopAqUvgm2uOFZXMe_FvdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ba0085-3060-4c96-90da-a45b1a4ace56/1/NmTkRiopAqUvgm2uOFZXMe_FvdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:29:01:94:71:92:14:ef:16:a4:42:54:25:91:75:2d:28:f5:
         fe:b7:00:a2:8e:85:e4:04:80:5a:c5:ce:39:9d:78:41:f0:a7:
         76:20:50:37:28:a4:f9:4c:ab:96:8a:b7:2c:e2:f4:cd:b6:fd:
         df:1d:59:76:ea:58:df:d8:d1:d0:20:7c:29:d8:66:5f:48:69:
         75:17:6b:69:62:44:f9:e1:92:44:fb:9e:73:c7:ee:e5:81:92:
         82:85:39:55:01:39:7b:ed:cc:57:84:eb:f4:05:58:76:3e:b3:
         8b:32:ca:ff:f0:a5:4e:92:d9:46:cb:78:db:4f:ca:d9:94:7f:
         0f:ae:eb:db:c3:d1:09:2a:8f:e0:a0:9b:02:c1:5b:59:c4:f4:
         94:42:fe:85:28:ce:07:12:2a:87:97:c3:58:18:46:f5:ed:9d:
         4b:d2:27:2a:86:aa:d2:67:24:6b:da:da:f4:86:ed:8c:a5:42:
         00:6a:00:e1:a4:ce:55:49:9b:17:d4:5f:41:82:9e:dd:5d:63:
         f0:43:e9:99:55:73:35:49:be:f1:93:5a:89:e3:55:38:1c:bb:
         d0:6b:73:3e:40:78:ee:d9:58:79:52:c3:72:03:7a:3d:00:97:
         94:62:bb:af:2f:4e:f6:2c:b4:33:d6:95:36:37:18:22:eb:8f:
         bf:e2:31:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdHwznCVChoTHRb2wbN0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NjRlNDQ2MmEyOTAyYTUyZjgyNmRhZTM4NTY1NzMxZWZj
NWJkZDMwHhcNMjUwNDEzMTQwMTI1WhcNMjUwNDE0MTQwMTI1WjAzMTEwLwYDVQQD
EyhmYmUyOGY1OTM0YzNhZDQwNGMxNTFkZmMyMWY1MzYzNWZjZWIzZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqng+TVgfhQxCmS0N+ECMAXmnkeaE
OCWXrmmjOXHXfcOBGie2f34Qtupjhu4RlMC6ghaMWjpk1In3KldZbFSP3acy/kUL
cb8eJafc/BPSZWXZvjLaJp1wx/5j9h7NP7Wkv4bz7SB/sVFAg+B991mHmWxcZEH4
y1ow3p1KesZTJyeQJlZQ+JUmzcyCemzQG6ZE18lxzZBrVBCU5v6piVvPYMYx5vI+
0haavx+Xu6CpI0GehK5L7FDhjNcznyn8/MCOEvvBLEjPUNcYgmk/u1JKzqm4WLLA
bsCKtE262fp2Bf0storzkPc7NhSQCeYhSPKTwpThBvfwxA23quqyMBO30QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvij1k0w61ATBUd/CH1NjX86z5oMB8GA1UdIwQY
MBaAFDZk5EYqKQKlL4JtrjhWVzHvxb3TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm1Ua1Jpb3BBcVV2Z20ydU9GWlhNZV9GdmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iYTAwODUtMzA2MC00Yzk2LTkwZGEt
YTQ1YjFhNGFjZTU2LzEvTm1Ua1Jpb3BBcVV2Z20ydU9GWlhNZV9GdmRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9iYTAwODUtMzA2MC00Yzk2LTkwZGEtYTQ1YjFhNGFjZTU2
LzEvTm1Ua1Jpb3BBcVV2Z20ydU9GWlhNZV9GdmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqikBlHGS
FO8WpEJUJZF1LSj1/rcAoo6F5ASAWsXOOZ14QfCndiBQNyik+Uyrloq3LOL0zbb9
3x1ZdupY39jR0CB8KdhmX0hpdRdraWJE+eGSRPuec8fu5YGSgoU5VQE5e+3MV4Tr
9AVYdj6zizLK//ClTpLZRst420/K2ZR/D67r28PRCSqP4KCbAsFbWcT0lEL+hSjO
BxIqh5fDWBhG9e2dS9InKoaq0mcka9ra9IbtjKVCAGoA4aTOVUmbF9RfQYKe3V1j
8EPpmVVzNUm+8ZNaieNVOBy70GtzPkB47tlYeVLDcgN6PQCXlGK7ry9O9iy0M9aV
NjcYIuuPv+Ixow==
-----END CERTIFICATE-----