Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
File:                     1NF5zknld2uSyGwmwgsLQ_0KbLY.mft (raw, json)
Hash identifier:          nFMCIbXR2aDjzYskeI4ifO15BoIMaD07tboKqxiemkE=
Subject key identifier:   BB:93:8A:40:CB:B8:23:F1:71:4E:A2:18:62:15:5E:57:8C:1E:37:0C
Authority key identifier: D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6
Certificate issuer:       /CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
Certificate serial:       01962F067FC62A69F543BDE3EA94B06D1716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: 1NF5zknld2uSyGwmwgsLQ_0KbLY.crl (hash: hSbwLcBQ0H05VAS+ZNE+7QkHOHBLgMl/SxLmO3KNswU=)
                          2: BrC95qegfOa0TgThzqIEYO52pE4.roa (hash: NQcrpLx6LISXQiUt+m/hCop1708krlvAotMAH3yT+Qo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7f:c6:2a:69:f5:43:bd:e3:ea:94:b0:6d:17:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d179ce49e5776b92c86c26c20b0b43fd0a6cb6
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=bb938a40cbb823f1714ea21862155e578c1e370c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:58:5b:a0:bc:1a:fd:fe:08:c0:80:2b:1b:f0:
                    d6:a2:1d:6c:3e:1f:b8:c9:89:f8:b8:22:7e:47:d0:
                    f5:2f:42:d1:be:fa:1a:24:ec:c7:cf:b0:53:5b:f6:
                    85:96:cd:6b:28:f0:fc:83:4c:4e:3c:fc:f1:3e:d6:
                    fe:4f:de:f8:c5:71:16:f6:02:73:21:ac:f1:a6:19:
                    ed:9f:28:38:e3:4e:14:17:08:2a:23:b1:b0:db:1f:
                    88:9c:7d:46:37:e4:85:ef:6b:ab:80:e7:39:d5:05:
                    6b:fc:74:cb:33:6e:85:62:47:94:6f:0f:a5:0c:ce:
                    a2:45:4d:07:55:e4:a9:4a:73:27:0f:cb:05:77:e2:
                    e1:f5:49:93:68:4c:0b:2b:5a:35:a5:53:f3:21:ba:
                    93:3c:1b:36:de:39:8b:77:16:7b:bd:d9:15:cb:34:
                    16:55:f2:19:47:46:2a:8c:f0:74:b0:b5:73:76:f4:
                    8b:bc:73:72:19:bc:58:38:a4:d3:d2:9b:79:9f:76:
                    39:3d:77:9c:5e:6c:00:f2:7a:9b:01:ac:0c:2c:28:
                    3c:48:b8:d7:8c:e9:a2:d1:f3:77:8e:1d:12:1d:3b:
                    ef:a2:47:21:8d:53:a3:13:88:2e:66:e3:98:c8:93:
                    bd:f4:2a:44:87:43:25:65:d8:4f:24:ff:ae:8a:67:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:93:8A:40:CB:B8:23:F1:71:4E:A2:18:62:15:5E:57:8C:1E:37:0C
            X509v3 Authority Key Identifier:
                keyid:D4:D1:79:CE:49:E5:77:6B:92:C8:6C:26:C2:0B:0B:43:FD:0A:6C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NF5zknld2uSyGwmwgsLQ_0KbLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8b16cc-4db5-4198-924e-4032e190edc3/1/1NF5zknld2uSyGwmwgsLQ_0KbLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:23:9a:47:91:e8:52:f3:25:0b:36:f7:29:26:1e:ad:58:05:
         7a:7a:ce:df:7e:d0:de:ec:fa:0c:36:7a:96:86:44:57:45:5e:
         54:0d:a7:67:7f:b5:c7:d0:1f:35:1e:a7:65:e9:f0:63:40:f7:
         5f:d0:10:e5:1f:84:26:7f:f1:3d:97:22:b2:7b:a9:7e:41:51:
         91:4d:b2:07:c6:5a:d2:ec:93:b7:fe:64:10:84:e5:ce:33:3f:
         e0:db:59:c8:57:28:af:26:08:cd:7d:1d:86:42:2a:a8:e0:d6:
         aa:33:46:dc:c2:6d:bf:6b:02:bd:59:a2:69:82:1d:e8:0a:f5:
         7e:fe:5a:f4:b5:60:96:74:cd:79:73:54:26:d7:fa:79:23:30:
         3d:fa:b7:e4:a8:7e:74:84:8d:17:ad:48:e7:b6:5d:10:7a:37:
         48:7c:87:58:9c:8b:b6:e6:04:39:6e:2d:f9:0f:10:e7:e4:f7:
         99:be:54:ff:09:09:ff:33:17:69:f6:09:a1:30:a4:76:24:0c:
         00:55:08:d5:30:12:c8:e0:45:49:d4:43:4d:72:e0:97:4d:ea:
         c3:f9:04:f5:77:47:31:94:c4:3e:ee:08:2e:f1:2b:98:a8:3e:
         3b:c9:dc:2d:b2:94:ac:50:ea:e1:df:8c:d1:2a:43:83:a6:6c:
         05:85:4c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBn/GKmn1Q73j6pSwbRcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZDE3OWNlNDllNTc3NmI5MmM4NmMyNmMyMGIwYjQzZmQw
YTZjYjYwHhcNMjUwNDEzMTIwMTE3WhcNMjUwNDE0MTIwMTE3WjAzMTEwLwYDVQQD
EyhiYjkzOGE0MGNiYjgyM2YxNzE0ZWEyMTg2MjE1NWU1NzhjMWUzNzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FhboLwa/f4IwIArG/DWoh1sPh+4
yYn4uCJ+R9D1L0LRvvoaJOzHz7BTW/aFls1rKPD8g0xOPPzxPtb+T974xXEW9gJz
Iazxphntnyg4404UFwgqI7Gw2x+InH1GN+SF72urgOc51QVr/HTLM26FYkeUbw+l
DM6iRU0HVeSpSnMnD8sFd+Lh9UmTaEwLK1o1pVPzIbqTPBs23jmLdxZ7vdkVyzQW
VfIZR0YqjPB0sLVzdvSLvHNyGbxYOKTT0pt5n3Y5PXecXmwA8nqbAawMLCg8SLjX
jOmi0fN3jh0SHTvvokchjVOjE4guZuOYyJO99CpEh0MlZdhPJP+uimcvFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuTikDLuCPxcU6iGGIVXleMHjcMMB8GA1UdIwQY
MBaAFNTRec5J5XdrkshsJsILC0P9Cmy2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUt
NDAzMmUxOTBlZGMzLzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi84YjE2Y2MtNGRiNS00MTk4LTkyNGUtNDAzMmUxOTBlZGMz
LzEvMU5GNXprbmxkMnVTeUd3bXdnc0xRXzBLYkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSOaR5Ho
UvMlCzb3KSYerVgFenrO337Q3uz6DDZ6loZEV0VeVA2nZ3+1x9AfNR6nZenwY0D3
X9AQ5R+EJn/xPZcisnupfkFRkU2yB8Za0uyTt/5kEITlzjM/4NtZyFcoryYIzX0d
hkIqqODWqjNG3MJtv2sCvVmiaYId6Ar1fv5a9LVglnTNeXNUJtf6eSMwPfq35Kh+
dISNF61I57ZdEHo3SHyHWJyLtuYEOW4t+Q8Q5+T3mb5U/wkJ/zMXafYJoTCkdiQM
AFUI1TASyOBFSdRDTXLgl03qw/kE9XdHMZTEPu4ILvErmKg+O8ncLbKUrFDq4d+M
0SpDg6ZsBYVMFA==
-----END CERTIFICATE-----