Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
File:                     NhIf0uc0bus8H451uTyE-VhB9EY.mft (raw, json)
Hash identifier:          pclQ/ys9O6zRQixGMK9R+YB88KCL8YZX+THpNyivsRo=
Subject key identifier:   D2:86:CB:E4:B7:01:BE:B9:A7:4C:6E:2E:4A:E5:E3:87:32:4B:26:EC
Authority key identifier: 36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46
Certificate issuer:       /CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
Certificate serial:       01962FAB7BD8347A1DC3A6C8CD4AA2779343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft
Manifest number:          0201
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: NhIf0uc0bus8H451uTyE-VhB9EY.crl (hash: KEQ2YcCZW0nKJm4uIIR2HbUqq6UbYQhgR2ZVUi8bf30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7b:d8:34:7a:1d:c3:a6:c8:cd:4a:a2:77:93:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36121fd2e7346eeb3c1f8e75b93c84f95841f446
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=d286cbe4b701beb9a74c6e2e4ae5e387324b26ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:00:ff:b6:a0:d4:9e:52:10:f2:d9:ba:62:
                    2b:35:46:75:16:b1:a7:67:d8:b0:f9:b3:4e:ad:96:
                    5b:e7:6f:b7:20:02:84:fd:61:f1:4d:cb:49:02:08:
                    fa:2b:bb:95:02:e4:ef:70:55:7f:4a:c0:b5:06:1a:
                    00:60:d8:ad:8c:ea:3c:b6:fe:f0:cc:02:fe:07:59:
                    8b:f7:8d:eb:fa:cd:91:c9:9e:40:10:6b:4b:e2:f6:
                    f5:67:d5:a0:9c:ee:05:41:e2:b3:b3:ed:0d:72:68:
                    1c:2c:82:06:80:88:3f:91:ff:cd:d1:86:65:e9:39:
                    31:9a:19:78:3b:3c:86:fc:62:ed:c9:ef:04:a2:7b:
                    69:62:e7:7f:a3:e0:30:ae:2c:f0:d2:0f:d9:b4:e3:
                    c7:30:04:06:07:bc:ab:2a:cb:d5:f9:aa:55:e6:8f:
                    4c:16:15:7d:bb:ce:36:d1:f6:01:bc:9c:9f:29:fc:
                    4b:cd:59:71:37:ef:27:93:69:73:66:ea:52:24:b8:
                    c1:8b:9e:d9:db:eb:77:2a:c1:fd:da:c9:e7:0b:71:
                    bd:e7:0c:ab:7c:28:8d:c2:b3:47:67:c1:43:49:bd:
                    75:78:2b:10:34:aa:2a:10:b9:2f:7c:95:20:c3:24:
                    7c:4b:1e:63:17:16:b1:7e:bd:1e:73:d3:12:71:60:
                    36:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:86:CB:E4:B7:01:BE:B9:A7:4C:6E:2E:4A:E5:E3:87:32:4B:26:EC
            X509v3 Authority Key Identifier:
                keyid:36:12:1F:D2:E7:34:6E:EB:3C:1F:8E:75:B9:3C:84:F9:58:41:F4:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhIf0uc0bus8H451uTyE-VhB9EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/21d560-cb15-46c3-af34-a89e937e29d1/1/NhIf0uc0bus8H451uTyE-VhB9EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:53:32:a1:40:a3:41:21:5e:74:ed:3e:61:aa:4d:82:04:da:
         56:9e:43:10:e8:6b:d8:bb:7f:c7:89:d1:df:70:1a:4a:4e:bf:
         9c:da:55:04:80:14:4f:79:ee:14:f1:43:89:ba:15:e0:8d:37:
         97:82:31:c3:0d:68:ec:c9:65:15:7d:7a:4a:e7:4a:f8:c8:71:
         0e:8e:e1:d3:4f:ba:0f:64:e9:e4:bd:32:c3:62:f4:4b:93:f5:
         b6:7d:e4:f1:a3:1b:e3:0a:2e:8e:9a:e8:07:da:7d:9c:2d:5c:
         48:ff:c4:c9:ff:46:8f:58:ae:7a:ba:33:13:66:d7:b0:26:24:
         ca:8f:14:a2:b4:ad:f9:73:a6:c1:4d:10:05:4f:48:cb:2f:0b:
         47:7e:be:d9:45:47:cb:55:a3:94:73:57:d2:f9:72:ae:98:ad:
         88:d0:9a:f9:36:36:12:7b:bf:43:60:fe:69:52:df:93:7a:e5:
         a9:ea:50:2d:23:72:88:7a:8b:61:cd:1a:ee:af:26:b4:e3:e8:
         09:99:1a:95:cb:9d:c4:9e:d3:e6:0c:39:21:3a:2b:80:c8:45:
         59:3d:52:31:9b:01:d6:0b:09:ae:c8:0c:ed:bc:0c:9f:ac:a2:
         78:cd:37:aa:af:05:ae:17:eb:3b:80:45:7b:37:60:df:10:a1:
         f2:4f:99:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3vYNHodw6bIzUqid5NDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTIxZmQyZTczNDZlZWIzYzFmOGU3NWI5M2M4NGY5NTg0
MWY0NDYwHhcNMjUwNDEzMTUwMTI5WhcNMjUwNDE0MTUwMTI5WjAzMTEwLwYDVQQD
EyhkMjg2Y2JlNGI3MDFiZWI5YTc0YzZlMmU0YWU1ZTM4NzMyNGIyNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRMA/7ag1J5SEPLZumIrNUZ1FrGn
Z9iw+bNOrZZb52+3IAKE/WHxTctJAgj6K7uVAuTvcFV/SsC1BhoAYNitjOo8tv7w
zAL+B1mL943r+s2RyZ5AEGtL4vb1Z9WgnO4FQeKzs+0NcmgcLIIGgIg/kf/N0YZl
6Tkxmhl4OzyG/GLtye8EontpYud/o+Awrizw0g/ZtOPHMAQGB7yrKsvV+apV5o9M
FhV9u8420fYBvJyfKfxLzVlxN+8nk2lzZupSJLjBi57Z2+t3KsH92snnC3G95wyr
fCiNwrNHZ8FDSb11eCsQNKoqELkvfJUgwyR8Sx5jFxaxfr0ec9MScWA2kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKGy+S3Ab65p0xuLkrl44cySybsMB8GA1UdIwQY
MBaAFDYSH9LnNG7rPB+Odbk8hPlYQfRGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQt
YTg5ZTkzN2UyOWQxLzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yMWQ1NjAtY2IxNS00NmMzLWFmMzQtYTg5ZTkzN2UyOWQx
LzEvTmhJZjB1YzBidXM4SDQ1MXVUeUUtVmhCOUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1MyoUCj
QSFedO0+YapNggTaVp5DEOhr2Lt/x4nR33AaSk6/nNpVBIAUT3nuFPFDiboV4I03
l4Ixww1o7MllFX16SudK+MhxDo7h00+6D2Tp5L0yw2L0S5P1tn3k8aMb4woujpro
B9p9nC1cSP/Eyf9Gj1iuerozE2bXsCYkyo8UorSt+XOmwU0QBU9Iyy8LR36+2UVH
y1WjlHNX0vlyrpitiNCa+TY2Enu/Q2D+aVLfk3rlqepQLSNyiHqLYc0a7q8mtOPo
CZkalcudxJ7T5gw5ITorgMhFWT1SMZsB1gsJrsgM7bwMn6yieM03qq8FrhfrO4BF
ezdg3xCh8k+ZCw==
-----END CERTIFICATE-----