Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
File:                     NsxJTEqTS7s89Gulgk1mZsiUei8.mft (raw, json)
Hash identifier:          db5XeI6aZ6lexQh/GjTHEWqdJ2n2ClOTR3VE0S2rnD0=
Subject key identifier:   F4:4F:0E:63:57:0A:2C:44:4C:5D:36:25:BF:7E:F9:44:72:87:26:BF
Authority key identifier: 36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F
Certificate issuer:       /CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
Certificate serial:       01962F7482CC1770CC571045CB4D95FF9BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft
Manifest number:          04A8
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: NsxJTEqTS7s89Gulgk1mZsiUei8.crl (hash: g9JkwBDrPvc+R80KO5ffbn9OKgHvtNj0RVNXUBzKNZA=)
                          2: StdZuEMdBW7X4NXLCF7XI4ppVlw.roa (hash: iq6H8WyI/GcnhvxxJGW8O2+6IQ6zatbRbbXOnldRxIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:82:cc:17:70:cc:57:10:45:cb:4d:95:ff:9b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36cc494c4a934bbb3cf46ba5824d6666c8947a2f
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=f44f0e63570a2c444c5d3625bf7ef944728726bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:59:8a:db:ca:8e:4b:40:3f:65:ce:23:72:
                    53:27:fb:2d:d0:2a:c6:fb:fc:5f:53:c1:d6:80:3a:
                    97:20:36:47:ea:74:f5:25:2e:c9:64:af:2c:16:8b:
                    ec:4a:9a:88:cd:22:94:5e:ef:68:9e:b2:1f:01:16:
                    a5:e7:bb:c7:9c:10:8d:a0:b6:fd:54:02:2d:5e:28:
                    5b:79:16:f3:ce:6f:22:a3:e1:43:6d:be:2e:82:25:
                    47:b4:ce:3a:75:f3:c4:c0:49:3c:90:90:53:c3:0c:
                    3b:62:ce:9e:c5:f1:a5:d7:8f:b7:bc:51:30:00:5e:
                    82:4d:e1:02:36:e2:99:aa:96:81:c2:23:a9:6f:fb:
                    53:27:2e:51:cc:9c:cb:6d:eb:a1:45:74:85:48:b4:
                    d5:b7:58:e7:db:17:07:17:13:bd:43:57:ed:fd:95:
                    06:36:31:a2:ea:86:4f:71:2f:f1:f0:1d:33:21:13:
                    82:c7:e4:bb:37:f5:5e:38:1d:10:69:f9:5e:87:c4:
                    64:12:5e:b9:12:0b:95:52:4e:45:af:87:de:07:22:
                    89:ef:fd:b6:78:c1:44:8f:08:62:2a:0c:a8:06:e4:
                    cc:8a:81:17:f7:4a:90:fd:ec:2b:49:4c:bc:93:17:
                    ed:e0:a4:17:34:b1:59:bd:0e:da:14:bb:68:61:21:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4F:0E:63:57:0A:2C:44:4C:5D:36:25:BF:7E:F9:44:72:87:26:BF
            X509v3 Authority Key Identifier:
                keyid:36:CC:49:4C:4A:93:4B:BB:3C:F4:6B:A5:82:4D:66:66:C8:94:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsxJTEqTS7s89Gulgk1mZsiUei8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7a9004-e4d9-4f54-9928-b9c816965a04/1/NsxJTEqTS7s89Gulgk1mZsiUei8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:06:7c:50:0a:8b:78:57:4e:16:6c:89:8f:e8:a5:90:1b:84:
         a9:dd:94:2b:2d:0a:c3:04:cf:40:6a:84:27:b4:84:90:25:e1:
         6b:52:9d:30:f6:73:cf:19:77:42:02:d9:c0:fc:42:08:2f:4c:
         9b:c6:f6:2b:45:9f:d1:59:0b:d1:5d:d3:29:dc:f4:5a:49:59:
         32:97:43:34:b7:78:b8:4b:c2:50:2c:c5:ec:bc:3b:c2:4b:78:
         87:bb:32:08:23:15:6f:50:30:58:87:29:8a:91:5d:72:c8:a2:
         2a:e6:b0:b0:ca:9a:c9:83:72:62:4b:5f:f6:31:a2:07:6c:f7:
         26:e4:9f:58:61:a3:ed:a3:d0:9a:26:b3:aa:63:fd:6f:86:47:
         0d:80:e7:82:d1:fd:55:80:e9:fe:71:35:62:c3:2d:e7:3f:59:
         2b:dc:f2:45:e3:a2:57:94:b2:2a:d9:f2:7d:c1:2f:48:ec:cf:
         36:1e:cd:5b:29:66:33:ec:7d:19:20:b0:6b:ed:79:6d:61:1e:
         f1:c0:f4:8e:1e:03:54:77:ab:ee:49:e6:e0:ce:09:c3:31:63:
         f0:3e:33:62:dd:24:1a:df:1b:c9:e2:9a:10:d8:ba:46:20:4f:
         ad:20:97:35:2d:d2:18:13:1f:2c:aa:e5:9c:ad:ee:8e:53:83:
         b0:14:ab:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdILMF3DMVxBFy02V/5vQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2M0OTRjNGE5MzRiYmIzY2Y0NmJhNTgyNGQ2NjY2Yzg5
NDdhMmYwHhcNMjUwNDEzMTQwMTI2WhcNMjUwNDE0MTQwMTI2WjAzMTEwLwYDVQQD
EyhmNDRmMGU2MzU3MGEyYzQ0NGM1ZDM2MjViZjdlZjk0NDcyODcyNmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+NZitvKjktAP2XOI3JTJ/st0CrG
+/xfU8HWgDqXIDZH6nT1JS7JZK8sFovsSpqIzSKUXu9onrIfARal57vHnBCNoLb9
VAItXihbeRbzzm8io+FDbb4ugiVHtM46dfPEwEk8kJBTwww7Ys6exfGl14+3vFEw
AF6CTeECNuKZqpaBwiOpb/tTJy5RzJzLbeuhRXSFSLTVt1jn2xcHFxO9Q1ft/ZUG
NjGi6oZPcS/x8B0zIROCx+S7N/VeOB0Qafleh8RkEl65EguVUk5Fr4feByKJ7/22
eMFEjwhiKgyoBuTMioEX90qQ/ewrSUy8kxft4KQXNLFZvQ7aFLtoYSGwLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRPDmNXCixETF02Jb9++URyhya/MB8GA1UdIwQY
MBaAFDbMSUxKk0u7PPRrpYJNZmbIlHovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5Mjgt
YjljODE2OTY1YTA0LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS83YTkwMDQtZTRkOS00ZjU0LTk5MjgtYjljODE2OTY1YTA0
LzEvTnN4SlRFcVRTN3M4OUd1bGdrMW1ac2lVZWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwZ8UAqL
eFdOFmyJj+ilkBuEqd2UKy0KwwTPQGqEJ7SEkCXha1KdMPZzzxl3QgLZwPxCCC9M
m8b2K0Wf0VkL0V3TKdz0WklZMpdDNLd4uEvCUCzF7Lw7wkt4h7syCCMVb1AwWIcp
ipFdcsiiKuawsMqayYNyYktf9jGiB2z3JuSfWGGj7aPQmiazqmP9b4ZHDYDngtH9
VYDp/nE1YsMt5z9ZK9zyReOiV5SyKtnyfcEvSOzPNh7NWylmM+x9GSCwa+15bWEe
8cD0jh4DVHer7knm4M4JwzFj8D4zYt0kGt8byeKaENi6RiBPrSCXNS3SGBMfLKrl
nK3ujlODsBSrxA==
-----END CERTIFICATE-----