Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
File:                     nvnDHh7MuhkCs_YiWT3pcspxi1w.mft (raw, json)
Hash identifier:          DKf4qJeCzAsz4gxG/0J90ngj8hbmnGeCcsvVy8YOXBg=
Subject key identifier:   F4:CB:40:90:3B:71:58:3B:59:70:AE:39:37:DD:29:E8:1F:79:5E:9F
Authority key identifier: 9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
Certificate issuer:       /CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Certificate serial:       01962F74D9DD9D82CBABFE8FFCAA4FA0BAF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
Manifest number:          0C42
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: nvnDHh7MuhkCs_YiWT3pcspxi1w.crl (hash: FvQcmVeOrDDXNwUagAzvknFCwixpsA0vtsrQygDD3hk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d9:dd:9d:82:cb:ab:fe:8f:fc:aa:4f:a0:ba:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=f4cb40903b71583b5970ae3937dd29e81f795e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:3e:a1:12:59:2d:e9:d8:95:d5:9d:c1:79:
                    ac:38:d5:46:48:d3:a1:25:56:7d:b6:4f:a4:f1:ad:
                    9f:81:15:eb:c5:ec:8f:63:c2:fc:4e:79:4a:d4:53:
                    63:dd:00:46:0f:eb:77:14:ad:7c:92:ca:c8:36:df:
                    a4:ad:bf:4c:ff:c2:3c:4a:49:ee:2a:52:db:a7:ea:
                    03:95:b2:e5:ad:8c:21:79:46:3d:c0:53:04:9a:ef:
                    3e:51:21:c7:d8:68:6a:fe:40:53:f5:be:0b:b2:84:
                    c0:01:7f:16:3d:57:2b:1a:4e:ee:df:a2:16:7b:26:
                    d9:0d:59:4a:0e:28:fc:0d:48:1b:1b:ad:6f:d8:90:
                    d9:cd:47:f5:de:a5:10:4f:52:b3:c1:8d:0e:01:9e:
                    f1:44:a0:72:61:02:70:54:c2:f1:eb:b4:89:42:11:
                    5f:c8:a1:bb:42:ea:c7:7d:78:d5:e1:3d:73:64:d3:
                    f4:8c:b1:b8:1c:ed:df:3d:2e:4a:f1:d6:c6:94:ab:
                    a7:88:24:37:4a:1c:2b:4b:49:ab:1d:c3:5c:38:9b:
                    9f:1f:ff:94:26:46:43:46:49:91:c2:ab:6c:f3:63:
                    fa:61:14:84:a9:9e:b9:ea:4b:f6:5d:66:dc:0e:55:
                    6f:75:9a:62:5e:23:9d:5d:91:77:a8:cd:dd:2b:6b:
                    6b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CB:40:90:3B:71:58:3B:59:70:AE:39:37:DD:29:E8:1F:79:5E:9F
            X509v3 Authority Key Identifier:
                keyid:9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:53:4f:cd:24:25:55:47:1f:1c:0f:1d:1e:da:d9:c7:28:2a:
         3e:b5:51:39:d9:a8:d1:19:ca:47:59:42:5b:68:ca:b6:be:c2:
         4f:2e:f0:30:ed:03:54:6a:9f:d4:56:24:8d:5e:a9:95:4a:4e:
         04:aa:c8:ea:c2:d9:f4:ff:8f:dc:fd:e7:e3:52:f4:5d:49:83:
         84:e1:35:a7:c0:a2:50:bb:36:35:aa:7e:0a:ea:41:50:de:a6:
         a4:68:62:a7:5c:04:cd:69:ba:be:a7:d7:94:16:e2:30:d3:d9:
         95:84:44:33:1e:50:3e:65:c0:f4:24:cd:9d:d5:cd:ad:b4:99:
         1a:53:58:29:b8:3f:e2:ee:22:d6:c6:c0:72:6a:bd:84:f4:9a:
         27:10:3b:e5:53:63:8e:9f:eb:24:2d:9e:ba:be:60:27:81:f6:
         06:a6:48:5d:d2:54:fb:29:8c:ab:c3:4b:a6:5e:94:58:24:7c:
         2f:e9:21:3b:2b:8d:0b:71:d5:bd:b5:ae:0e:b2:64:db:a3:f9:
         c6:03:cb:d2:6c:ba:fc:5b:a6:ce:0b:0f:41:8a:2b:0b:3a:71:
         57:c7:32:dc:d1:02:ac:d4:e3:93:23:d2:60:a4:1e:57:bc:be:
         36:7c:37:86:ba:d3:f3:76:db:3c:44:c7:b7:64:34:71:43:47:
         0b:65:b7:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNndnYLLq/6P/KpPoLr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjljMzFlMWVjY2JhMTkwMmIzZjYyMjU5M2RlOTcyY2E3
MThiNWMwHhcNMjUwNDEzMTQwMTQ5WhcNMjUwNDE0MTQwMTQ5WjAzMTEwLwYDVQQD
EyhmNGNiNDA5MDNiNzE1ODNiNTk3MGFlMzkzN2RkMjllODFmNzk1ZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFI+oRJZLenYldWdwXmsONVGSNOh
JVZ9tk+k8a2fgRXrxeyPY8L8TnlK1FNj3QBGD+t3FK18ksrINt+krb9M/8I8Sknu
KlLbp+oDlbLlrYwheUY9wFMEmu8+USHH2Ghq/kBT9b4LsoTAAX8WPVcrGk7u36IW
eybZDVlKDij8DUgbG61v2JDZzUf13qUQT1KzwY0OAZ7xRKByYQJwVMLx67SJQhFf
yKG7QurHfXjV4T1zZNP0jLG4HO3fPS5K8dbGlKuniCQ3ShwrS0mrHcNcOJufH/+U
JkZDRkmRwqts82P6YRSEqZ656kv2XWbcDlVvdZpiXiOdXZF3qM3dK2trYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTLQJA7cVg7WXCuOTfdKegfeV6fMB8GA1UdIwQY
MBaAFJ75wx4ezLoZArP2Ilk96XLKcYtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZuREhoN011aGtDc19ZaVdUM3Bjc3B4aTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yZmE3YjgtYTQ4NC00N2RmLWIxYzIt
OTcyYzBmYWU2N2I4LzEvbnZuREhoN011aGtDc19ZaVdUM3Bjc3B4aTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yZmE3YjgtYTQ4NC00N2RmLWIxYzItOTcyYzBmYWU2N2I4
LzEvbnZuREhoN011aGtDc19ZaVdUM3Bjc3B4aTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVNPzSQl
VUcfHA8dHtrZxygqPrVROdmo0RnKR1lCW2jKtr7CTy7wMO0DVGqf1FYkjV6plUpO
BKrI6sLZ9P+P3P3n41L0XUmDhOE1p8CiULs2Nap+CupBUN6mpGhip1wEzWm6vqfX
lBbiMNPZlYREMx5QPmXA9CTNndXNrbSZGlNYKbg/4u4i1sbAcmq9hPSaJxA75VNj
jp/rJC2eur5gJ4H2BqZIXdJU+ymMq8NLpl6UWCR8L+khOyuNC3HVvbWuDrJk26P5
xgPL0my6/FumzgsPQYorCzpxV8cy3NECrNTjkyPSYKQeV7y+Nnw3hrrT83bbPETH
t2Q0cUNHC2W36g==
-----END CERTIFICATE-----