Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
File:                     nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft (raw, json)
Hash identifier:          H/lmWoDxHjgeUhlCypSITSFw9p1NRmtpm7UFB3h+R7k=
Subject key identifier:   14:C9:9C:66:94:09:DC:48:FB:54:FA:65:9D:75:A5:67:8C:0C:96:EA
Authority key identifier: 9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F
Certificate issuer:       /CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
Certificate serial:       01962F741CA02D90D960A6E7B7E7C54D5BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft
Manifest number:          0CAC
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: SJakYTj9pb3r41qOMQrQf_YPYbc.roa (hash: tab9yW3GhAbdQLvfn40C4/W+qyYm4f+BamJUC4exFC4=)
                          2: nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl (hash: mJbqt6Yy1FsfgrfQY6kNbdI+AuwHQEyM75Lf9pT6iNk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1c:a0:2d:90:d9:60:a6:e7:b7:e7:c5:4d:5b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c7fa9eaf3856ca4e75041414e51d860180c926f
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=14c99c669409dc48fb54fa659d75a5678c0c96ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:41:bd:64:ac:8b:0c:85:d9:1f:c5:25:f6:90:
                    0e:8d:39:7b:16:5b:b3:b0:32:fd:b5:71:1b:79:f7:
                    da:a1:53:44:24:81:c0:c8:6e:5d:c6:91:73:c5:86:
                    68:0a:98:fb:51:a9:a2:f9:c5:6b:62:fb:29:2b:9c:
                    42:73:b7:79:62:61:02:fc:83:8d:5e:6b:e5:fb:4e:
                    6b:6a:66:7a:b7:7a:2f:c4:1c:d1:61:73:e3:35:dc:
                    ab:2d:b6:6e:1c:63:d7:e8:f6:d5:5d:dd:e9:48:ae:
                    c5:14:53:a4:42:52:d7:33:7a:60:4b:43:50:e1:dd:
                    36:38:c1:5c:48:91:08:e8:52:37:2c:ca:e5:00:29:
                    32:bf:1b:cd:08:13:de:82:f3:dc:17:53:92:e5:58:
                    d0:09:24:9f:7f:14:70:ce:2f:bd:bc:b2:22:5c:f1:
                    fa:f0:f6:1a:0c:63:97:cb:70:32:03:37:29:d5:48:
                    da:9b:64:9f:d0:65:a6:2c:83:e6:7d:d3:33:25:9d:
                    1f:75:f7:cd:a0:26:37:65:30:e9:4c:f7:ae:87:56:
                    76:64:73:b7:a4:70:c9:81:2f:3a:1d:16:a2:ab:15:
                    08:55:e7:9a:54:98:f7:53:25:8e:0b:92:dc:49:44:
                    1b:87:b9:30:17:a5:0a:03:28:51:c1:99:58:f6:a4:
                    16:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C9:9C:66:94:09:DC:48:FB:54:FA:65:9D:75:A5:67:8C:0C:96:EA
            X509v3 Authority Key Identifier:
                keyid:9C:7F:A9:EA:F3:85:6C:A4:E7:50:41:41:4E:51:D8:60:18:0C:92:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nH-p6vOFbKTnUEFBTlHYYBgMkm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7fbcc6-64fd-4874-ab49-825b47c15430/1/nH-p6vOFbKTnUEFBTlHYYBgMkm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:59:68:b9:ef:07:0a:8e:ac:c2:70:59:50:b4:32:2e:6d:49:
         3d:f7:b2:c3:9e:b6:b3:a4:94:51:67:6b:1a:25:2d:f6:eb:9a:
         9f:58:3b:dd:97:23:e2:a0:e1:8c:dc:ac:5c:56:b8:80:4a:c3:
         dd:fc:ba:60:f4:2a:b7:11:c6:c7:f0:dd:17:33:8a:a7:3a:10:
         65:3e:be:97:17:b3:71:b0:78:0c:71:0b:40:b4:eb:32:26:f3:
         28:a3:1f:a9:33:17:39:bd:b0:a3:f5:b0:ac:84:f1:f9:60:06:
         d8:00:4a:e5:e7:6a:5e:73:0d:85:34:e6:07:98:2f:df:db:3d:
         4c:29:0b:08:40:4d:b3:8a:5c:b2:17:3a:bd:9b:86:e1:96:1e:
         39:5b:ab:8a:97:05:0d:0d:ff:8c:2f:e1:40:f3:2e:71:9c:fa:
         7b:18:4e:9b:0f:ca:4f:f1:ef:56:0c:ce:d1:4a:9a:33:46:c9:
         e6:44:a1:18:b8:4c:b3:43:41:03:dd:75:e6:22:e2:7d:81:6c:
         be:a4:5c:92:77:38:5c:6a:9b:31:bd:8c:56:a5:0a:9b:0c:0b:
         4b:c1:33:f3:da:b6:30:f7:d0:3b:52:67:c6:bf:cc:84:14:63:
         5a:88:91:b5:20:7f:07:ab:b0:ce:89:ed:0b:f8:4a:c2:f5:e4:
         62:e5:a8:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdBygLZDZYKbnt+fFTVvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljN2ZhOWVhZjM4NTZjYTRlNzUwNDE0MTRlNTFkODYwMTgw
YzkyNmYwHhcNMjUwNDEzMTQwMTAwWhcNMjUwNDE0MTQwMTAwWjAzMTEwLwYDVQQD
EygxNGM5OWM2Njk0MDlkYzQ4ZmI1NGZhNjU5ZDc1YTU2NzhjMGM5NmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EG9ZKyLDIXZH8Ul9pAOjTl7Fluz
sDL9tXEbeffaoVNEJIHAyG5dxpFzxYZoCpj7Uami+cVrYvspK5xCc7d5YmEC/ION
Xmvl+05ramZ6t3ovxBzRYXPjNdyrLbZuHGPX6PbVXd3pSK7FFFOkQlLXM3pgS0NQ
4d02OMFcSJEI6FI3LMrlACkyvxvNCBPegvPcF1OS5VjQCSSffxRwzi+9vLIiXPH6
8PYaDGOXy3AyAzcp1Ujam2Sf0GWmLIPmfdMzJZ0fdffNoCY3ZTDpTPeuh1Z2ZHO3
pHDJgS86HRaiqxUIVeeaVJj3UyWOC5LcSUQbh7kwF6UKAyhRwZlY9qQWawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTJnGaUCdxI+1T6ZZ11pWeMDJbqMB8GA1UdIwQY
MBaAFJx/qerzhWyk51BBQU5R2GAYDJJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83ZmJjYzYtNjRmZC00ODc0LWFiNDkt
ODI1YjQ3YzE1NDMwLzEvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83ZmJjYzYtNjRmZC00ODc0LWFiNDktODI1YjQ3YzE1NDMw
LzEvbkgtcDZ2T0ZiS1RuVUVGQlRsSFlZQmdNa204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1loue8H
Co6swnBZULQyLm1JPfeyw562s6SUUWdrGiUt9uuan1g73Zcj4qDhjNysXFa4gErD
3fy6YPQqtxHGx/DdFzOKpzoQZT6+lxezcbB4DHELQLTrMibzKKMfqTMXOb2wo/Ww
rITx+WAG2ABK5edqXnMNhTTmB5gv39s9TCkLCEBNs4pcshc6vZuG4ZYeOVuripcF
DQ3/jC/hQPMucZz6exhOmw/KT/HvVgzO0UqaM0bJ5kShGLhMs0NBA9115iLifYFs
vqRcknc4XGqbMb2MVqUKmwwLS8Ez89q2MPfQO1Jnxr/MhBRjWoiRtSB/B6uwzont
C/hKwvXkYuWoGQ==
-----END CERTIFICATE-----