Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
File:                     NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft (raw, json)
Hash identifier:          Ig9eST2jjiNDZ2NGQAPSmAmki8X1CLMuGWTcHy4Y1/Y=
Subject key identifier:   D2:F2:AF:10:4F:EA:AA:0D:91:A4:88:8A:4E:42:8A:5C:5C:D7:A0:FD
Authority key identifier: 36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A
Certificate issuer:       /CN=36261c261756fa03ac57d1bfc4db856ef808975a
Certificate serial:       01962FAB545E8E7544C3EAF0A071A18446AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft
Manifest number:          12F7
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl (hash: dXkuVEcBQ9GFiw2IimQa6UN9j+2W/ayXU6VQpFMJXpI=)
                          2: dYJMd1xHra4qPvxWQ63pWL2NPkE.roa (hash: lMxX8BkZ02l91WMGdaFajJSu4NcGeGtSFmauEg/qSlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:54:5e:8e:75:44:c3:ea:f0:a0:71:a1:84:46:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36261c261756fa03ac57d1bfc4db856ef808975a
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=d2f2af104feaaa0d91a4888a4e428a5c5cd7a0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:f3:e2:61:2d:5d:d9:7e:bd:aa:a1:82:27:
                    53:a6:21:1f:43:f7:e7:92:a8:69:d7:ce:db:4d:ca:
                    ca:b3:0a:fb:44:c4:b2:83:47:01:60:b8:5d:3a:ab:
                    1a:c1:3d:d3:50:8b:75:f1:ad:e1:54:f7:79:85:72:
                    dd:4c:f8:79:fe:37:f2:33:a7:5e:c7:3f:cb:d1:18:
                    d6:33:1a:4c:fa:af:a8:8f:af:d4:6d:4e:b8:ef:9b:
                    97:8b:b1:8a:2f:3c:7e:bf:d7:ee:d3:d5:7a:e2:ad:
                    24:ee:75:40:86:6a:5b:e4:2a:fa:26:58:06:67:33:
                    7c:70:b6:ca:83:4b:99:3b:48:3b:2c:ed:a9:6a:14:
                    7d:00:8f:2e:4d:da:46:a4:09:29:b2:66:3c:07:6f:
                    bd:f3:b2:93:39:52:23:70:18:8d:31:15:6c:2f:6d:
                    05:64:18:1b:af:52:0e:54:bf:22:e9:b2:7a:27:53:
                    13:74:ed:0b:5a:7a:40:af:37:9a:20:79:c3:ad:65:
                    97:c6:41:43:de:eb:c5:5e:82:10:aa:5e:cd:69:cf:
                    aa:df:ba:e4:86:25:4f:0c:be:41:97:74:57:78:21:
                    88:83:ef:f5:15:b3:e2:7c:e2:5a:c5:e7:17:8f:a8:
                    fc:03:5b:57:6e:34:21:f2:27:aa:b3:e5:e6:c5:59:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F2:AF:10:4F:EA:AA:0D:91:A4:88:8A:4E:42:8A:5C:5C:D7:A0:FD
            X509v3 Authority Key Identifier:
                keyid:36:26:1C:26:17:56:FA:03:AC:57:D1:BF:C4:DB:85:6E:F8:08:97:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiYcJhdW-gOsV9G_xNuFbvgIl1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0bab1f-92d6-42f0-b952-442c080ae541/1/NiYcJhdW-gOsV9G_xNuFbvgIl1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:60:01:2a:18:dd:0e:74:3e:aa:91:54:ca:06:34:c2:c6:45:
         7a:04:25:81:80:13:d1:0b:72:07:3c:59:82:08:82:ab:6d:75:
         e2:7d:5b:63:56:93:9c:9f:0d:9d:73:74:b7:9e:7d:28:5b:bd:
         9c:ee:c9:0b:fe:4e:c8:91:20:a4:1b:91:64:fb:0c:fd:25:cf:
         ae:83:af:53:85:f3:7c:51:a0:4c:23:d9:13:8c:f6:b8:9a:a7:
         c0:75:ac:b4:56:d3:fb:ed:92:e9:ad:35:a0:ce:c1:b5:d7:47:
         d5:90:68:48:2a:76:4f:3e:f7:4d:0a:8a:23:b4:88:61:b4:2b:
         11:07:1b:59:20:f2:e8:d5:63:e9:61:3d:5a:77:0f:43:e5:b6:
         c9:3f:eb:bc:84:91:7e:ab:44:23:6a:6d:09:5c:b5:a2:83:a7:
         f9:a4:fb:d2:80:1e:d7:ee:37:fb:22:61:81:fb:c9:aa:dc:2c:
         dd:2b:0a:f4:4c:09:fe:5f:e2:b1:60:a3:b0:06:98:da:47:b0:
         ee:33:40:83:dd:39:56:90:d9:5d:cc:38:bd:a3:af:a6:fc:bd:
         22:6e:34:5b:a5:a9:33:05:f5:b9:3c:26:62:3d:c7:26:0e:0b:
         e9:3d:98:e1:22:15:ce:3b:1c:6b:ad:9a:9c:6a:e5:b5:e3:3d:
         24:15:b2:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq1RejnVEw+rwoHGhhEatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjYxYzI2MTc1NmZhMDNhYzU3ZDFiZmM0ZGI4NTZlZjgw
ODk3NWEwHhcNMjUwNDEzMTUwMTE5WhcNMjUwNDE0MTUwMTE5WjAzMTEwLwYDVQQD
EyhkMmYyYWYxMDRmZWFhYTBkOTFhNDg4OGE0ZTQyOGE1YzVjZDdhMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8nz4mEtXdl+vaqhgidTpiEfQ/fn
kqhp187bTcrKswr7RMSyg0cBYLhdOqsawT3TUIt18a3hVPd5hXLdTPh5/jfyM6de
xz/L0RjWMxpM+q+oj6/UbU6475uXi7GKLzx+v9fu09V64q0k7nVAhmpb5Cr6JlgG
ZzN8cLbKg0uZO0g7LO2pahR9AI8uTdpGpAkpsmY8B2+987KTOVIjcBiNMRVsL20F
ZBgbr1IOVL8i6bJ6J1MTdO0LWnpArzeaIHnDrWWXxkFD3uvFXoIQql7Nac+q37rk
hiVPDL5Bl3RXeCGIg+/1FbPifOJaxecXj6j8A1tXbjQh8ieqs+XmxVlA6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLyrxBP6qoNkaSIik5Cilxc16D9MB8GA1UdIwQY
MBaAFDYmHCYXVvoDrFfRv8TbhW74CJdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTIt
NDQyYzA4MGFlNTQxLzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wYmFiMWYtOTJkNi00MmYwLWI5NTItNDQyYzA4MGFlNTQx
LzEvTmlZY0poZFctZ09zVjlHX3hOdUZidmdJbDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemABKhjd
DnQ+qpFUygY0wsZFegQlgYAT0QtyBzxZggiCq2114n1bY1aTnJ8NnXN0t559KFu9
nO7JC/5OyJEgpBuRZPsM/SXProOvU4XzfFGgTCPZE4z2uJqnwHWstFbT++2S6a01
oM7BtddH1ZBoSCp2Tz73TQqKI7SIYbQrEQcbWSDy6NVj6WE9WncPQ+W2yT/rvISR
fqtEI2ptCVy1ooOn+aT70oAe1+43+yJhgfvJqtws3SsK9EwJ/l/isWCjsAaY2kew
7jNAg905VpDZXcw4vaOvpvy9Im40W6WpMwX1uTwmYj3HJg4L6T2Y4SIVzjsca62a
nGrlteM9JBWykQ==
-----END CERTIFICATE-----