Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File:                     nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier:          g6jQwNsJ5gzUgdLSenYzxGwALPcF2/m3wcR8X1YU88U=
Subject key identifier:   40:DA:AB:CA:BE:6C:44:C2:73:5A:41:74:29:E0:78:A6:D3:3E:B4:EB
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer:       /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial:       01962DF41C70DF8FD73FE68E6BAD31CABF28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: kXO8pPvb-hoKLSUaH08K93t7DHU.roa (hash: mEKASbKS/omjY7FFNOE+1bv+eOkizDd5ZmtCBIdcrpw=)
                          2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: JA5FsWJ7Ie1TFqD49m4sONllekQt2s5qoh0M5cVDYWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1c:70:df:8f:d7:3f:e6:8e:6b:ad:31:ca:bf:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=40daabcabe6c44c2735a417429e078a6d33eb4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d7:6a:e3:e7:b3:d9:3f:f8:de:5b:8d:16:41:
                    5e:c1:aa:45:2d:75:bc:bb:b6:c1:43:87:0d:d9:4c:
                    55:07:2e:a5:b4:07:e3:5c:29:64:2e:4a:1e:8a:5c:
                    fe:1a:97:e9:91:82:d9:47:f2:4f:5c:f0:25:fb:c3:
                    6b:0d:13:9f:e0:1b:7a:ec:df:59:4e:bd:e5:a3:c1:
                    aa:c3:49:eb:7d:08:5a:ff:c0:e2:1f:bd:2d:84:6f:
                    00:ae:d4:7e:c4:f1:42:ff:40:39:12:91:4e:21:ae:
                    9d:f1:f9:d6:e1:73:80:b5:42:67:6f:7f:ad:b3:d0:
                    11:f4:6f:b1:37:03:36:1b:18:91:66:1a:96:fc:b5:
                    d1:9b:01:47:21:81:f2:4f:c5:0f:35:a4:fb:4e:60:
                    a4:70:d7:14:6a:e7:c7:36:fd:32:98:92:0a:be:7d:
                    99:f0:58:d0:d9:9d:79:9a:25:41:1b:59:1c:70:23:
                    d8:52:db:b2:62:e6:75:28:57:15:d5:89:f5:95:00:
                    91:24:38:a6:bf:04:06:0c:44:93:87:f8:6a:ee:84:
                    23:db:f5:b6:87:3c:91:ff:4e:08:0b:c8:cb:69:d0:
                    61:2b:08:d1:85:11:10:84:51:20:f7:82:29:3f:a2:
                    ad:dd:b0:8a:d6:b4:32:f7:9c:b1:7a:61:6e:0d:a5:
                    2c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DA:AB:CA:BE:6C:44:C2:73:5A:41:74:29:E0:78:A6:D3:3E:B4:EB
            X509v3 Authority Key Identifier:
                keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:41:ae:a0:5e:a9:44:bf:20:66:7a:67:b1:d7:bc:17:4d:2f:
         f9:16:60:b2:ed:42:54:54:ac:e6:74:09:c6:f1:48:a0:f2:f4:
         78:97:74:b9:56:4c:a0:ac:34:12:db:97:ec:25:ef:2f:d9:82:
         89:c3:8d:55:0d:99:76:98:f7:19:21:5d:00:3b:d7:5e:25:fa:
         81:e6:7b:a0:0a:3f:35:5a:f6:f1:de:e4:d4:19:f2:e8:3b:24:
         41:50:26:8c:e6:54:79:da:04:a0:16:58:8d:3e:bf:2c:2c:89:
         25:db:af:14:25:4f:e9:d7:fd:ce:2f:e2:63:7b:2b:76:ec:74:
         ec:0a:62:f5:f9:94:5b:47:a7:f5:42:82:68:05:d8:92:36:4b:
         c9:36:eb:f3:72:e4:07:db:01:7b:44:f0:52:a9:cc:ee:c1:d9:
         30:91:07:32:6e:1c:1a:39:c0:ec:06:6d:e4:c6:52:d9:0d:e7:
         73:39:52:ac:3f:25:da:57:8a:b5:c4:bb:49:bf:4f:17:3a:3b:
         28:1f:db:88:36:51:b9:9d:08:a1:32:58:cd:c2:e0:68:e9:6e:
         f2:d8:30:70:af:73:e2:5b:f4:b5:37:85:6f:9c:18:63:9c:b9:
         50:d1:9e:da:f9:e3:96:95:cb:54:86:66:0f:55:86:f4:fe:12:
         4e:06:30:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Bxw34/XP+aOa60xyr8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYTMxOWVhNTFjODAwM2FhZDk0YThlMjdjZTY5NDkyYWEy
ZTMzYTgwHhcNMjUwNDEzMDcwMTM0WhcNMjUwNDE0MDcwMTM0WjAzMTEwLwYDVQQD
Eyg0MGRhYWJjYWJlNmM0NGMyNzM1YTQxNzQyOWUwNzhhNmQzM2ViNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyddq4+ez2T/43luNFkFewapFLXW8
u7bBQ4cN2UxVBy6ltAfjXClkLkoeilz+GpfpkYLZR/JPXPAl+8NrDROf4Bt67N9Z
Tr3lo8Gqw0nrfQha/8DiH70thG8ArtR+xPFC/0A5EpFOIa6d8fnW4XOAtUJnb3+t
s9AR9G+xNwM2GxiRZhqW/LXRmwFHIYHyT8UPNaT7TmCkcNcUaufHNv0ymJIKvn2Z
8FjQ2Z15miVBG1kccCPYUtuyYuZ1KFcV1Yn1lQCRJDimvwQGDESTh/hq7oQj2/W2
hzyR/04IC8jLadBhKwjRhREQhFEg94IpP6Kt3bCK1rQy95yxemFuDaUsJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDaq8q+bETCc1pBdCngeKbTPrTrMB8GA1UdIwQY
MBaAFJyjGepRyAA6rZSo4nzmlJKqLjOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjct
MGFkM2M3OTYyYzA5LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82MTQ5NGMtMDc0NC00OTkxLWFiNjctMGFkM2M3OTYyYzA5
LzEvbktNWjZsSElBRHF0bEtqaWZPYVVrcW91TTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEGuoF6p
RL8gZnpnsde8F00v+RZgsu1CVFSs5nQJxvFIoPL0eJd0uVZMoKw0EtuX7CXvL9mC
icONVQ2Zdpj3GSFdADvXXiX6geZ7oAo/NVr28d7k1Bny6DskQVAmjOZUedoEoBZY
jT6/LCyJJduvFCVP6df9zi/iY3srdux07Api9fmUW0en9UKCaAXYkjZLyTbr83Lk
B9sBe0TwUqnM7sHZMJEHMm4cGjnA7AZt5MZS2Q3nczlSrD8l2leKtcS7Sb9PFzo7
KB/biDZRuZ0IoTJYzcLgaOlu8tgwcK9z4lv0tTeFb5wYY5y5UNGe2vnjlpXLVIZm
D1WG9P4STgYwdA==
-----END CERTIFICATE-----