Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
File:                     Nz2PVXyuGOI12Ti608-uF8kbneY.mft (raw, json)
Hash identifier:          /R4Xl37kPkMp3fjkV5ui/IauVXmv5oHbDE8DPtnlV64=
Subject key identifier:   45:DD:3C:F7:CD:45:DD:66:A0:C7:E5:1A:E0:49:C3:8D:5C:F1:DF:6F
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Certificate issuer:       /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial:       01962ECF5648BBA0CE46FB8969748B0CA41F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft
Manifest number:          0BAB
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: Nz2PVXyuGOI12Ti608-uF8kbneY.crl (hash: UMYpU/anDpiV2i/Ad3gPvfOvYI6G+yYglEGgvO8Rfew=)
                          2: ozI4hI8kFkEQxCSmEwvkBXoCapM.roa (hash: nsuE7KYFnBTkOwSYDCdNStBanVXhSb5SsJb22tB9rcI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:56:48:bb:a0:ce:46:fb:89:69:74:8b:0c:a4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=45dd3cf7cd45dd66a0c7e51ae049c38d5cf1df6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:27:21:af:4e:5a:c5:77:70:05:3b:af:69:
                    96:d6:c0:45:a8:ff:a5:98:72:f4:bb:54:77:e8:24:
                    c2:81:76:4d:34:b9:e4:2f:1b:7c:13:63:20:de:98:
                    ed:72:06:02:14:83:c3:06:cb:9a:6f:2b:06:25:92:
                    4a:d5:bc:c9:3c:19:9d:d5:48:f6:fa:dd:f5:9b:9e:
                    49:76:bb:70:6d:cb:c7:37:02:98:29:0e:f6:e1:c4:
                    9f:a8:ef:40:4a:54:6a:2c:2c:ee:d0:a8:14:d9:55:
                    7a:d9:f7:29:1c:9a:3e:01:08:3e:24:1b:cb:05:94:
                    b3:b4:1d:56:1e:8e:40:38:e2:6a:6b:1a:7c:18:1d:
                    17:e4:33:73:96:05:ee:bb:80:59:1d:9a:92:2e:e9:
                    72:ce:24:56:2a:a7:76:e2:66:82:3c:4c:51:98:05:
                    31:b3:bb:f6:cc:43:3d:20:5d:1d:2f:4a:6d:29:fa:
                    9f:39:6e:41:4c:04:18:f8:bf:97:e2:f7:11:d5:a3:
                    2d:a3:f4:94:fa:8c:f5:30:04:b0:7d:f6:4f:b7:da:
                    5a:f0:92:69:fe:f1:41:04:ce:84:f6:70:76:f4:cb:
                    01:92:bf:d4:03:ea:f4:e3:25:11:08:b7:c6:09:0d:
                    15:42:89:a1:4a:4e:10:aa:53:81:37:46:ad:43:3a:
                    76:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DD:3C:F7:CD:45:DD:66:A0:C7:E5:1A:E0:49:C3:8D:5C:F1:DF:6F
            X509v3 Authority Key Identifier:
                keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:08:12:80:58:6f:8a:05:4f:02:ec:35:2f:19:2b:95:5a:26:
         ec:06:ee:ad:b4:d9:7f:e3:a6:fd:1b:de:36:22:38:21:42:a1:
         ba:8b:b0:ed:89:a7:77:18:09:08:83:2a:26:7d:62:f0:74:85:
         a2:b5:d6:f2:40:38:74:11:d4:08:c1:bb:09:9c:10:f2:3c:00:
         d9:0b:8b:2e:f6:53:1a:fe:28:b2:1b:5d:3c:ff:00:6c:96:99:
         c0:ee:6b:cf:16:05:c1:81:fc:2b:25:c7:ce:9f:ff:f3:1b:86:
         93:83:e9:63:2b:b7:63:0a:cc:9f:f1:c9:a7:03:2a:32:cf:cc:
         f7:99:2c:3d:89:00:5a:5a:c4:d6:65:3d:1a:67:37:73:3c:c7:
         cc:98:ff:b6:97:14:1e:3b:79:95:5f:69:7f:41:16:6a:c9:f0:
         ea:c7:67:84:95:ad:6b:c3:57:43:96:4f:2e:9d:41:24:e2:ba:
         d1:89:d5:13:e1:0d:a3:15:03:11:de:d7:29:e2:6c:47:66:35:
         ff:ea:36:09:c5:e2:6b:71:04:96:6f:a8:e0:5c:73:7f:1f:4b:
         89:fa:65:7d:b9:38:b5:ab:e0:6a:4d:f9:03:69:f6:66:30:c9:
         a9:c9:d4:ca:70:a5:45:66:65:f1:d6:c5:e1:91:77:df:24:a2:
         2a:f1:b0:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1ZIu6DORvuJaXSLDKQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3M2Q4ZjU1N2NhZTE4ZTIzNWQ5MzhiYWQzY2ZhZTE3Yzkx
YjlkZTYwHhcNMjUwNDEzMTEwMTAyWhcNMjUwNDE0MTEwMTAyWjAzMTEwLwYDVQQD
Eyg0NWRkM2NmN2NkNDVkZDY2YTBjN2U1MWFlMDQ5YzM4ZDVjZjFkZjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKMnIa9OWsV3cAU7r2mW1sBFqP+l
mHL0u1R36CTCgXZNNLnkLxt8E2Mg3pjtcgYCFIPDBsuabysGJZJK1bzJPBmd1Uj2
+t31m55JdrtwbcvHNwKYKQ724cSfqO9ASlRqLCzu0KgU2VV62fcpHJo+AQg+JBvL
BZSztB1WHo5AOOJqaxp8GB0X5DNzlgXuu4BZHZqSLulyziRWKqd24maCPExRmAUx
s7v2zEM9IF0dL0ptKfqfOW5BTAQY+L+X4vcR1aMto/SU+oz1MASwffZPt9pa8JJp
/vFBBM6E9nB29MsBkr/UA+r04yURCLfGCQ0VQomhSk4QqlOBN0atQzp2awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXdPPfNRd1moMflGuBJw41c8d9vMB8GA1UdIwQY
MBaAFDc9j1V8rhjiNdk4utPPrhfJG53mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzkt
Yzk5ZGQzOTBhN2Q2LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81MTc0MTEtMGM0Mi00ZDE4LTkwMzktYzk5ZGQzOTBhN2Q2
LzEvTnoyUFZYeXVHT0kxMlRpNjA4LXVGOGtibmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAgSgFhv
igVPAuw1LxkrlVom7AburbTZf+Om/RveNiI4IUKhuouw7YmndxgJCIMqJn1i8HSF
orXW8kA4dBHUCMG7CZwQ8jwA2QuLLvZTGv4oshtdPP8AbJaZwO5rzxYFwYH8KyXH
zp//8xuGk4PpYyu3YwrMn/HJpwMqMs/M95ksPYkAWlrE1mU9Gmc3czzHzJj/tpcU
Hjt5lV9pf0EWasnw6sdnhJWta8NXQ5ZPLp1BJOK60YnVE+ENoxUDEd7XKeJsR2Y1
/+o2CcXia3EElm+o4Fxzfx9Lifplfbk4tavgak35A2n2ZjDJqcnUynClRWZl8dbF
4ZF33ySiKvGwKA==
-----END CERTIFICATE-----