Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
File:                     nw9-mftNZUTyIt84qJjrFiwNgY4.mft (raw, json)
Hash identifier:          sZyuRIY36TCqzMrUcPZHyNs7PsHB4pVF+x9liuaubfg=
Subject key identifier:   54:9E:80:3F:D0:76:10:52:63:02:18:73:63:00:1D:8E:33:AA:EA:24
Authority key identifier: 9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E
Certificate issuer:       /CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
Certificate serial:       01962F06EDA675AD1E99E079A1F4AF67E8C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft
Manifest number:          09E4
Signing time:             Sun 13 Apr 2025 12:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:45 +0000
Files and hashes:         1: 1gkcm_O-6wWeQqVAGZBnyhP54qI.roa (hash: nieo21q7o118HqvWop5XjeCS8y3w5y5mZQj+D431JE0=)
                          2: nw9-mftNZUTyIt84qJjrFiwNgY4.crl (hash: XWlNoZLaCVXz+PPxKj77YfYA+v65t8pxFCxBt/VC77c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ed:a6:75:ad:1e:99:e0:79:a1:f4:af:67:e8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f0f7e99fb4d6544f222df38a898eb162c0d818e
        Validity
            Not Before: Apr 13 12:01:45 2025 GMT
            Not After : Apr 14 12:01:45 2025 GMT
        Subject: CN=549e803fd07610526302187363001d8e33aaea24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:c8:27:68:80:0c:91:6f:68:ad:c5:c4:69:
                    71:ec:ec:50:9b:af:52:17:c3:b0:59:5e:79:79:89:
                    af:34:2c:69:8d:56:67:5a:ba:d8:b9:95:90:9b:51:
                    b1:6a:6e:08:95:0f:ea:2f:c6:0b:c2:50:c4:b7:ae:
                    c7:59:88:55:89:08:35:0b:85:02:dd:ae:bd:2c:c1:
                    63:fb:a1:cd:07:66:12:2c:db:64:ad:c2:1b:fc:b6:
                    66:5c:10:c2:80:7d:59:b8:60:86:54:14:82:14:c5:
                    74:6f:16:2e:37:8b:5f:d5:67:1b:5a:b0:a4:7d:06:
                    dd:31:e8:d6:c5:11:ac:77:69:45:11:f8:86:30:b7:
                    5d:f1:a7:e5:fb:b4:a5:7a:e4:07:78:6e:1f:68:ab:
                    36:3d:45:8d:bc:37:eb:55:37:b8:14:21:88:8a:0d:
                    26:e0:4e:44:3c:75:c8:0e:d3:b3:0f:66:51:03:41:
                    bd:90:a5:7c:55:48:25:d6:19:e9:e4:90:1e:8a:8d:
                    31:88:ca:54:6a:26:5e:09:99:6d:dc:31:f9:76:80:
                    36:71:0d:d8:d6:e1:ed:da:e0:f5:37:c3:e8:32:d1:
                    52:b9:fd:02:2e:be:19:06:1c:cc:c9:f9:ba:c2:98:
                    ef:13:16:0b:6f:ab:3b:df:a5:b4:91:a8:7c:af:22:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9E:80:3F:D0:76:10:52:63:02:18:73:63:00:1D:8E:33:AA:EA:24
            X509v3 Authority Key Identifier:
                keyid:9F:0F:7E:99:FB:4D:65:44:F2:22:DF:38:A8:98:EB:16:2C:0D:81:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nw9-mftNZUTyIt84qJjrFiwNgY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/962ec5-38c7-4790-8962-0df566ea64dd/1/nw9-mftNZUTyIt84qJjrFiwNgY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d3:8c:1e:a7:0a:b2:46:2f:e8:89:68:25:ca:6b:b7:0c:61:
         7d:06:51:12:c8:dc:3f:5b:38:55:e6:b3:ae:be:65:0d:7b:ff:
         44:c1:c1:3f:e2:3b:2a:b6:2a:3a:2a:66:38:1c:ae:eb:dd:81:
         f9:10:46:b4:07:32:47:b0:84:92:c8:19:f7:04:9b:2d:a4:c1:
         a8:84:9a:da:5e:04:0f:aa:d4:c2:a6:90:3a:6c:aa:37:4b:99:
         e0:9b:d3:c0:5c:03:86:41:4f:5d:e1:80:ff:ba:ba:a2:50:da:
         93:d4:d4:5b:92:b4:d5:ea:b2:d3:90:44:ed:08:b4:4f:85:11:
         3d:bd:0d:a6:9e:49:ff:b2:5c:88:3a:4d:6d:16:d0:de:98:e8:
         bf:60:3a:d4:e2:4f:36:80:48:98:0b:bd:15:57:32:81:bd:b8:
         dc:93:8c:1c:84:d6:8f:cd:9a:80:1b:82:cd:eb:f4:1d:bf:d7:
         8d:43:01:12:68:3d:9b:5f:e2:88:fe:9c:c9:63:88:b8:ee:4a:
         ea:c3:79:48:74:32:10:db:4c:bc:18:11:1b:f5:44:74:ad:7c:
         da:8c:00:77:fa:40:e3:6a:ab:17:9d:6a:34:a9:20:bc:8b:a3:
         45:08:4e:0a:1c:b7:14:27:a1:96:82:a3:77:8d:b9:08:f6:8a:
         90:f0:67:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBu2mda0emeB5ofSvZ+jGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMGY3ZTk5ZmI0ZDY1NDRmMjIyZGYzOGE4OThlYjE2MmMw
ZDgxOGUwHhcNMjUwNDEzMTIwMTQ1WhcNMjUwNDE0MTIwMTQ1WjAzMTEwLwYDVQQD
Eyg1NDllODAzZmQwNzYxMDUyNjMwMjE4NzM2MzAwMWQ4ZTMzYWFlYTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1bIJ2iADJFvaK3FxGlx7OxQm69S
F8OwWV55eYmvNCxpjVZnWrrYuZWQm1Gxam4IlQ/qL8YLwlDEt67HWYhViQg1C4UC
3a69LMFj+6HNB2YSLNtkrcIb/LZmXBDCgH1ZuGCGVBSCFMV0bxYuN4tf1WcbWrCk
fQbdMejWxRGsd2lFEfiGMLdd8afl+7SleuQHeG4faKs2PUWNvDfrVTe4FCGIig0m
4E5EPHXIDtOzD2ZRA0G9kKV8VUgl1hnp5JAeio0xiMpUaiZeCZlt3DH5doA2cQ3Y
1uHt2uD1N8PoMtFSuf0CLr4ZBhzMyfm6wpjvExYLb6s736W0kah8ryK7KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFSegD/QdhBSYwIYc2MAHY4zquokMB8GA1UdIwQY
MBaAFJ8Pfpn7TWVE8iLfOKiY6xYsDYGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjIt
MGRmNTY2ZWE2NGRkLzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85NjJlYzUtMzhjNy00NzkwLTg5NjItMGRmNTY2ZWE2NGRk
LzEvbnc5LW1mdE5aVVR5SXQ4NHFKanJGaXdOZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9OMHqcK
skYv6IloJcprtwxhfQZREsjcP1s4Veazrr5lDXv/RMHBP+I7KrYqOipmOByu692B
+RBGtAcyR7CEksgZ9wSbLaTBqISa2l4ED6rUwqaQOmyqN0uZ4JvTwFwDhkFPXeGA
/7q6olDak9TUW5K01eqy05BE7Qi0T4URPb0Npp5J/7JciDpNbRbQ3pjov2A61OJP
NoBImAu9FVcygb243JOMHITWj82agBuCzev0Hb/XjUMBEmg9m1/iiP6cyWOIuO5K
6sN5SHQyENtMvBgRG/VEdK182owAd/pA42qrF51qNKkgvIujRQhOChy3FCehloKj
d425CPaKkPBnwA==
-----END CERTIFICATE-----