Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
File:                     NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft (raw, json)
Hash identifier:          5DEeQbJbxL1Kmo9uJtxdG0S0LmcxLARcWywxUomOgI4=
Subject key identifier:   68:14:97:D8:F8:0A:53:62:D0:E5:F6:17:9B:F6:C9:B7:35:2C:AA:2B
Authority key identifier: 34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02
Certificate issuer:       /CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402
Certificate serial:       01962E98A9A288B9A143C943B1A6A3E971C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft
Manifest number:          36
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: BC_CdjOB6RULGEZF7J94_vrGJec.roa (hash: JFygJvgYc7Kvmd7DMd2rl7uXMvNHWTmTg/wiD9RDlO4=)
                          2: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl (hash: tF4yPSI+Em6t8j6BiLMqoEsaJw11M2ShD2ClZpzdAf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a9:a2:88:b9:a1:43:c9:43:b1:a6:a3:e9:71:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=681497d8f80a5362d0e5f6179bf6c9b7352caa2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:41:43:d0:67:c2:30:a9:9b:f9:5d:4a:ad:
                    bc:58:5b:a8:49:af:71:37:fa:cc:a0:6e:7c:49:1c:
                    ec:0f:1e:42:2f:03:50:71:fc:8f:ad:f7:9d:f5:25:
                    48:90:f0:5e:c9:5d:1d:a6:f8:63:f5:7a:83:fc:44:
                    2d:dd:12:20:c4:7a:88:c6:10:60:26:f5:ac:b3:b6:
                    9b:f8:7e:87:93:58:e9:c7:fb:f6:88:51:6d:40:34:
                    ca:41:2b:7f:48:b0:26:21:95:0e:1e:3b:bc:51:85:
                    98:26:e5:a5:cf:a8:13:d3:9f:6b:16:63:c5:57:bf:
                    a3:6f:74:98:70:f6:17:07:01:3d:a9:3c:5e:0f:c8:
                    6f:3f:a5:be:c3:85:7a:a4:7c:e2:5c:a8:cc:67:76:
                    8a:1c:ec:5c:07:8e:81:64:9e:a1:c3:b1:b0:9c:0f:
                    ec:ba:c9:79:1b:d4:3b:2a:6c:8c:87:36:6d:23:69:
                    15:a3:07:5c:98:b2:65:a6:36:5a:94:3f:a2:f1:1b:
                    f9:65:31:33:df:56:7c:fc:39:e7:4f:0b:34:85:5f:
                    25:fd:9e:ef:1e:b7:cc:67:a0:3c:26:a9:8d:06:8d:
                    9a:97:6d:78:1b:bf:d2:ec:9e:18:aa:07:89:80:27:
                    c4:b9:21:e2:40:f8:88:ba:58:26:9d:99:0c:61:a6:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:14:97:D8:F8:0A:53:62:D0:E5:F6:17:9B:F6:C9:B7:35:2C:AA:2B
            X509v3 Authority Key Identifier:
                keyid:34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ac:28:db:e3:b8:46:d8:a9:4f:ce:f1:93:c4:eb:8b:6f:0b:
         ec:1f:81:49:28:de:8d:b4:5b:fc:01:1b:a8:c6:4e:ca:69:bb:
         1c:4e:c9:93:3b:a5:c1:bf:0b:6f:d8:0f:d3:fe:c8:c5:66:ba:
         3c:a3:a4:7c:2d:69:c7:04:83:97:20:f2:be:7f:1a:33:c9:8b:
         9d:72:c7:02:2e:c7:4b:bd:a2:9d:bb:29:bd:fa:bd:98:dd:22:
         a7:27:04:d2:73:aa:7c:11:61:d6:b1:af:92:33:5e:a2:32:eb:
         a3:61:39:86:a4:2e:4f:7e:8b:43:fe:bb:a2:7d:63:2e:4f:85:
         d7:f7:4d:fa:f4:2d:52:f6:f0:52:cc:53:01:35:74:7c:ca:5e:
         bf:6f:40:72:9f:b1:2b:d2:6e:67:b0:6d:bc:b3:fd:35:c7:4b:
         90:bf:ea:ea:8d:43:26:8e:f7:41:b4:cb:91:1b:92:9f:64:27:
         3b:66:01:af:b7:eb:b8:bb:25:49:10:77:94:5e:1e:73:07:5a:
         3f:40:5a:ff:27:82:41:4c:e0:c6:df:e1:4f:74:c5:c0:19:e2:
         56:aa:0e:ac:16:24:5d:5d:c7:b6:92:9e:06:00:b5:e7:ec:6a:
         13:38:ad:36:af:5c:e7:bb:27:54:46:2d:63:38:d0:5c:be:a7:
         8e:94:98:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKmiiLmhQ8lDsaaj6XHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZjRmYjdkNmE4Y2I4N2RkOWRhMDZkNzY2YTA4MzhjZjM1
NjA0MDIwHhcNMjUwNDEzMTAwMTE4WhcNMjUwNDE0MTAwMTE4WjAzMTEwLwYDVQQD
Eyg2ODE0OTdkOGY4MGE1MzYyZDBlNWY2MTc5YmY2YzliNzM1MmNhYTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNBBQ9BnwjCpm/ldSq28WFuoSa9x
N/rMoG58SRzsDx5CLwNQcfyPrfed9SVIkPBeyV0dpvhj9XqD/EQt3RIgxHqIxhBg
JvWss7ab+H6Hk1jpx/v2iFFtQDTKQSt/SLAmIZUOHju8UYWYJuWlz6gT059rFmPF
V7+jb3SYcPYXBwE9qTxeD8hvP6W+w4V6pHziXKjMZ3aKHOxcB46BZJ6hw7GwnA/s
usl5G9Q7KmyMhzZtI2kVowdcmLJlpjZalD+i8Rv5ZTEz31Z8/DnnTws0hV8l/Z7v
HrfMZ6A8JqmNBo2al214G7/S7J4YqgeJgCfEuSHiQPiIulgmnZkMYaY9qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgUl9j4ClNi0OX2F5v2ybc1LKorMB8GA1UdIwQY
MBaAFDT0+31qjLh92doG12agg4zzVgQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hY2JjNjUtODExYS00MjA5LWI2YjAt
YWUzNTViMmFlNmVmLzEvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hY2JjNjUtODExYS00MjA5LWI2YjAtYWUzNTViMmFlNmVm
LzEvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKwo2+O4
RtipT87xk8Tri28L7B+BSSjejbRb/AEbqMZOymm7HE7Jkzulwb8Lb9gP0/7IxWa6
PKOkfC1pxwSDlyDyvn8aM8mLnXLHAi7HS72inbspvfq9mN0ipycE0nOqfBFh1rGv
kjNeojLro2E5hqQuT36LQ/67on1jLk+F1/dN+vQtUvbwUsxTATV0fMpev29Acp+x
K9JuZ7BtvLP9NcdLkL/q6o1DJo73QbTLkRuSn2QnO2YBr7fruLslSRB3lF4ecwda
P0Ba/yeCQUzgxt/hT3TFwBniVqoOrBYkXV3HtpKeBgC15+xqEzitNq9c57snVEYt
YzjQXL6njpSYsw==
-----END CERTIFICATE-----