Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.mft
File:                     N4Dnho-7JhcXUGKl57nhwEnL33Q.mft (raw, json)
Hash identifier:          gtD5MFk+cWsrTzftDt1eNgJQJydffaHqr+fhkDrBblw=
Subject key identifier:   AC:F3:B0:61:C3:C5:F7:09:E9:6C:A9:B7:E9:9D:21:B3:59:C2:35:A6
Authority key identifier: 37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74
Certificate issuer:       /CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
Certificate serial:       01962F74D2AEE3D2A2B5AC547A08092914F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.mft
Manifest number:          098A
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: N4Dnho-7JhcXUGKl57nhwEnL33Q.crl (hash: ProtzR3k2ZN+bdp1KTJ5XfmvrAMKZ8QQ5+Ob/mJVzRs=)
                          2: OcSDY4xELCpejKKs2G0IGY9gwlQ.roa (hash: Oy20pivsJb/qy7M/APRR4A3JhiiBdYmX7xkK6y+vDfA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d2:ae:e3:d2:a2:b5:ac:54:7a:08:09:29:14:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3780e7868fbb2617175062a5e7b9e1c049cbdf74
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=acf3b061c3c5f709e96ca9b7e99d21b359c235a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:aa:2d:03:13:a0:21:99:90:8f:2f:9e:d3:
                    29:6a:2e:d1:15:7d:cc:99:b9:0c:d2:69:76:42:a4:
                    f4:5e:ce:bd:b7:a9:ed:af:7e:97:0d:41:42:48:64:
                    1b:7c:ca:d0:27:d3:a7:51:69:60:73:4d:2c:65:16:
                    8b:a4:f8:0e:99:8a:8f:ee:33:72:9a:89:ac:3d:a3:
                    54:54:e7:95:78:53:cb:36:6e:be:14:d4:ff:8e:38:
                    31:0d:a2:50:9d:91:06:68:c6:70:ae:36:fd:a3:4b:
                    66:e3:f5:8d:5c:9d:bc:aa:e2:5f:e4:cf:d5:c7:5b:
                    7f:a6:da:c1:12:13:ac:fc:1c:6e:9c:4f:6d:cd:d6:
                    9d:bc:0d:5f:b5:09:5a:b4:50:7b:80:f9:91:7e:5e:
                    9d:f0:0c:ab:ee:69:59:96:ba:a2:df:bd:5a:5a:c8:
                    0d:df:25:3d:fb:da:c6:98:70:74:57:8b:58:fe:c7:
                    6c:18:6e:31:8e:f0:f0:a9:6c:e5:39:37:e0:94:4b:
                    83:6d:3b:83:59:93:5b:bc:d0:5c:ba:d3:14:1a:09:
                    b2:c3:0f:a8:5c:3a:38:f4:21:74:47:78:b5:79:6d:
                    87:fa:b6:87:01:f2:65:2e:99:e6:dd:85:68:fe:57:
                    cc:fd:77:75:3b:17:6f:53:16:b4:df:cd:f1:e2:e9:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F3:B0:61:C3:C5:F7:09:E9:6C:A9:B7:E9:9D:21:B3:59:C2:35:A6
            X509v3 Authority Key Identifier:
                keyid:37:80:E7:86:8F:BB:26:17:17:50:62:A5:E7:B9:E1:C0:49:CB:DF:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4Dnho-7JhcXUGKl57nhwEnL33Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dcc48f-cfcc-4a58-a6d0-29b68e048a9e/1/N4Dnho-7JhcXUGKl57nhwEnL33Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:ad:b6:19:4e:d9:3a:ad:49:69:b2:1a:9e:a0:15:46:52:
         05:de:94:b9:c0:3b:e0:24:57:96:d5:ca:21:19:db:eb:31:b3:
         37:59:ad:a2:f5:9e:d4:4a:b1:ac:06:0d:e4:e2:ac:46:54:86:
         73:eb:61:82:34:e9:17:bf:11:ce:cb:f1:8e:f1:d3:ef:78:10:
         63:33:e9:a0:8a:98:da:43:29:7a:99:1c:51:a6:02:1b:9d:1f:
         f9:60:2f:4e:76:aa:41:5d:b8:ee:ad:6e:e2:06:da:5e:dc:1b:
         20:f8:50:0e:00:d3:e2:00:1e:97:08:5d:d1:8b:1f:d9:89:b4:
         ad:8f:2b:50:27:40:c7:05:28:d9:33:5b:80:77:02:ad:36:13:
         c7:bf:e0:b6:c7:51:85:b8:0c:ee:d9:20:f7:37:1d:66:4d:af:
         bf:49:7c:86:7d:e5:db:a4:23:e1:be:cf:d3:94:17:b5:11:95:
         53:aa:df:f4:29:03:93:20:d0:a4:08:5f:7c:9d:85:23:96:44:
         ce:f5:20:84:50:e1:6f:d5:6a:d7:f6:79:59:e3:03:d8:4c:04:
         61:5e:f7:c7:15:4b:a2:74:65:58:d1:c1:42:e1:01:79:98:48:
         94:f7:fd:c0:a4:53:d8:40:f7:bc:e9:e4:cb:61:57:83:b0:53:
         54:cb:d9:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdNKu49KitaxUeggJKRTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODBlNzg2OGZiYjI2MTcxNzUwNjJhNWU3YjllMWMwNDlj
YmRmNzQwHhcNMjUwNDEzMTQwMTQ3WhcNMjUwNDE0MTQwMTQ3WjAzMTEwLwYDVQQD
EyhhY2YzYjA2MWMzYzVmNzA5ZTk2Y2E5YjdlOTlkMjFiMzU5YzIzNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqKqLQMToCGZkI8vntMpai7RFX3M
mbkM0ml2QqT0Xs69t6ntr36XDUFCSGQbfMrQJ9OnUWlgc00sZRaLpPgOmYqP7jNy
momsPaNUVOeVeFPLNm6+FNT/jjgxDaJQnZEGaMZwrjb9o0tm4/WNXJ28quJf5M/V
x1t/ptrBEhOs/BxunE9tzdadvA1ftQlatFB7gPmRfl6d8Ayr7mlZlrqi371aWsgN
3yU9+9rGmHB0V4tY/sdsGG4xjvDwqWzlOTfglEuDbTuDWZNbvNBcutMUGgmyww+o
XDo49CF0R3i1eW2H+raHAfJlLpnm3YVo/lfM/Xd1OxdvUxa0383x4umH8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzzsGHDxfcJ6Wypt+mdIbNZwjWmMB8GA1UdIwQY
MBaAFDeA54aPuyYXF1Bipee54cBJy990MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjREbmhvLTdKaGNYVUdLbDU3bmh3RW5MMzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kY2M0OGYtY2ZjYy00YTU4LWE2ZDAt
MjliNjhlMDQ4YTllLzEvTjREbmhvLTdKaGNYVUdLbDU3bmh3RW5MMzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kY2M0OGYtY2ZjYy00YTU4LWE2ZDAtMjliNjhlMDQ4YTll
LzEvTjREbmhvLTdKaGNYVUdLbDU3bmh3RW5MMzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh8itthlO
2TqtSWmyGp6gFUZSBd6UucA74CRXltXKIRnb6zGzN1mtovWe1EqxrAYN5OKsRlSG
c+thgjTpF78RzsvxjvHT73gQYzPpoIqY2kMpepkcUaYCG50f+WAvTnaqQV247q1u
4gbaXtwbIPhQDgDT4gAelwhd0Ysf2Ym0rY8rUCdAxwUo2TNbgHcCrTYTx7/gtsdR
hbgM7tkg9zcdZk2vv0l8hn3l26Qj4b7P05QXtRGVU6rf9CkDkyDQpAhffJ2FI5ZE
zvUghFDhb9Vq1/Z5WeMD2EwEYV73xxVLonRlWNHBQuEBeZhIlPf9wKRT2ED3vOnk
y2FXg7BTVMvZdw==
-----END CERTIFICATE-----