Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
File:                     NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft (raw, json)
Hash identifier:          f1+W7mFEJJMV3TVzuu+52kMuvUhpWAxiqFwJqMzIqQQ=
Subject key identifier:   00:18:8D:B3:4B:B5:14:92:58:2E:F2:2A:FF:43:4D:EC:80:78:28:AD
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Certificate issuer:       /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial:       01962F748ECB62896F586E9DF95F9F7216C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft
Manifest number:          0B52
Signing time:             Sun 13 Apr 2025 14:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:29 +0000
Files and hashes:         1: 4jPyPZw3fj3g3jxwKw2HWrojQOs.roa (hash: KPFbCHVHeUU2XRC/hJ8YuwMme8By/aerz2iNVWzWJ/Y=)
                          2: 98C9emKFHKSWoxnRXQ4ADLcbKPE.roa (hash: CvGthRHI4SGJQkS5NvABpgXZA0TVYZ7H8kYAxXAYLqo=)
                          3: NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl (hash: 0ynL/G28mj70lThPA6HvtM8Urake7+TJK+syt7ZESyo=)
                          4: sYrkqtslIewoX_6wadaN2UhvCQg.roa (hash: Oj08Cr1VcQgzFndi/8RHmivr+b/zmwMkws7/hKkzL0k=)
                          5: ufwXrYHICWHfHKo6i-11Xy8XxDE.roa (hash: wzviVt1JzgPyofJmjOmZiOic44Kr4jKlAuGseoOoCMs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8e:cb:62:89:6f:58:6e:9d:f9:5f:9f:72:16:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
        Validity
            Not Before: Apr 13 14:01:29 2025 GMT
            Not After : Apr 14 14:01:29 2025 GMT
        Subject: CN=00188db34bb51492582ef22aff434dec807828ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b7:86:4f:8b:84:52:56:f9:79:7a:62:72:cf:
                    d2:f8:87:4f:c4:4c:f2:58:19:bb:3c:4b:6f:88:e5:
                    97:af:8d:df:36:99:30:83:a3:b9:c4:ee:3f:44:a2:
                    8c:64:b8:44:c8:2c:c7:bb:24:5b:39:3d:dd:f1:dd:
                    c4:1b:e4:e8:98:11:12:10:d7:18:b1:20:81:f6:63:
                    d1:de:5f:5d:f8:a5:c6:b2:76:5f:41:a2:ff:3c:25:
                    de:b6:f5:7c:e6:14:46:1c:b3:77:eb:49:12:73:92:
                    b0:84:32:e4:aa:8f:63:6d:06:76:df:03:fc:04:ac:
                    d0:b8:be:d7:06:6c:f4:d6:db:13:d1:8c:f3:31:cc:
                    34:78:78:ad:d0:ea:c8:75:11:65:91:9e:14:a7:95:
                    27:9e:d5:b2:76:d1:de:39:60:bc:e5:20:0c:93:71:
                    7c:19:5a:f1:47:d1:2f:5b:f0:b3:1f:82:1d:4c:8e:
                    59:e9:fd:c2:1d:94:ae:6d:1b:a6:60:17:f1:ba:e4:
                    1f:b4:60:ee:71:23:fa:5a:61:35:3f:10:ec:83:7c:
                    d8:5e:76:80:ef:d4:b3:d8:15:9f:84:c3:b9:5a:52:
                    55:b4:da:79:cf:ad:40:cc:2f:59:bc:50:5c:79:40:
                    92:65:12:88:cc:cb:0d:10:5d:f3:46:10:68:37:46:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:18:8D:B3:4B:B5:14:92:58:2E:F2:2A:FF:43:4D:EC:80:78:28:AD
            X509v3 Authority Key Identifier:
                keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d0:14:47:9e:4f:52:8b:f1:13:0a:7c:4c:04:a5:07:16:26:
         de:a6:a0:01:51:50:d1:1a:d0:3e:4d:f9:85:6e:53:fd:97:66:
         20:39:4b:da:5a:35:67:26:90:98:27:e3:8a:c7:7a:e4:5e:8c:
         c8:65:6b:65:81:6d:fd:47:8f:75:16:e5:74:dc:c0:8a:56:c1:
         23:89:16:1c:3b:cb:ca:60:f8:f8:c0:ad:33:49:4c:59:ae:01:
         7b:a5:b6:85:82:3e:e8:28:b1:9e:9d:0b:6c:f0:31:b2:0e:94:
         58:ec:ef:6d:f8:6f:7c:01:e3:93:1c:e9:d6:b7:f5:51:63:0b:
         f6:c0:bc:3b:83:af:3b:5c:57:d2:2f:32:60:c5:61:75:5f:43:
         a7:22:63:6c:0e:b8:53:4e:ca:19:36:8d:9e:2e:a4:55:50:44:
         97:5b:20:33:8a:08:58:d7:35:0e:58:d4:16:af:4d:2d:ec:e1:
         81:2b:bb:f0:50:7d:cd:34:e7:58:83:38:92:93:76:52:06:0f:
         35:27:d0:95:06:15:45:1a:a2:d6:7c:16:ef:7c:f0:35:1e:70:
         e3:15:2b:93:53:6c:76:b6:cd:e8:9f:b8:ac:10:9d:a5:ab:ec:
         79:54:dc:1b:71:1c:4b:fc:ae:e8:1e:bd:88:7e:55:7d:dd:a4:
         b5:19:a5:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdI7LYolvWG6d+V+fchbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTdjOWRlOTI3ZmE3NWJlYWVmNzg4NWYwZDg4ZjZmNGQy
YTBlZDYwHhcNMjUwNDEzMTQwMTI5WhcNMjUwNDE0MTQwMTI5WjAzMTEwLwYDVQQD
EygwMDE4OGRiMzRiYjUxNDkyNTgyZWYyMmFmZjQzNGRlYzgwNzgyOGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtreGT4uEUlb5eXpics/S+IdPxEzy
WBm7PEtviOWXr43fNpkwg6O5xO4/RKKMZLhEyCzHuyRbOT3d8d3EG+TomBESENcY
sSCB9mPR3l9d+KXGsnZfQaL/PCXetvV85hRGHLN360kSc5KwhDLkqo9jbQZ23wP8
BKzQuL7XBmz01tsT0YzzMcw0eHit0OrIdRFlkZ4Up5UnntWydtHeOWC85SAMk3F8
GVrxR9EvW/CzH4IdTI5Z6f3CHZSubRumYBfxuuQftGDucSP6WmE1PxDsg3zYXnaA
79Sz2BWfhMO5WlJVtNp5z61AzC9ZvFBceUCSZRKIzMsNEF3zRhBoN0YpOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAYjbNLtRSSWC7yKv9DTeyAeCitMB8GA1UdIwQY
MBaAFDUXyd6Sf6db6u94hfDYj29NKg7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTIt
ZmQzYjMwMDJjMGJiLzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy85NTRhZGUtODRiNy00NDZkLWE2ZTItZmQzYjMwMDJjMGJi
LzEvTlJmSjNwSl9wMXZxNzNpRjhOaVBiMDBxRHRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtAUR55P
UovxEwp8TASlBxYm3qagAVFQ0RrQPk35hW5T/ZdmIDlL2lo1ZyaQmCfjisd65F6M
yGVrZYFt/UePdRbldNzAilbBI4kWHDvLymD4+MCtM0lMWa4Be6W2hYI+6Cixnp0L
bPAxsg6UWOzvbfhvfAHjkxzp1rf1UWML9sC8O4OvO1xX0i8yYMVhdV9DpyJjbA64
U07KGTaNni6kVVBEl1sgM4oIWNc1DljUFq9NLezhgSu78FB9zTTnWIM4kpN2UgYP
NSfQlQYVRRqi1nwW73zwNR5w4xUrk1NsdrbN6J+4rBCdpavseVTcG3EcS/yu6B69
iH5Vfd2ktRmloQ==
-----END CERTIFICATE-----