Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File:                     nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier:          G0UzhkaJXG8tNnZ9Wjx7ln0NvjitTJ5LICw+FDX5JwI=
Subject key identifier:   A3:AF:84:ED:E5:45:60:16:75:29:82:D7:F0:6B:24:E4:01:27:09:B5
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer:       /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial:       01962F3DA154F22288D41A237668236F80D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number:          C5
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: F86xC6xwpLDuhs7A8wZygejUMX8.roa (hash: hqY5dyyDkeBwJW2ZEKNHXzfFF8UT2R+EbGGyWHizujw=)
                          2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: Z7L+9eib7QfXi3R7u4iUSMhg1oeTgvsGIRV+PbnUS0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a1:54:f2:22:88:d4:1a:23:76:68:23:6f:80:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=a3af84ede5456016752982d7f06b24e4012709b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:cd:9f:89:16:44:0d:5b:8e:0d:99:0d:e7:
                    31:a0:5a:b9:24:61:92:88:a6:30:81:36:7e:11:f9:
                    5b:85:5b:c5:5d:16:3f:0c:6b:69:30:9d:5b:71:e7:
                    35:bb:f8:db:6c:be:cb:bc:df:bc:d7:d0:3b:2e:2e:
                    bf:5a:72:63:21:c5:ff:cf:fc:f5:8b:b4:09:f0:0b:
                    27:52:e9:41:3d:1c:60:67:8f:4b:a6:fb:4c:12:8f:
                    fc:3d:71:0b:7f:0b:de:09:a9:2e:46:45:e1:61:2f:
                    0f:4f:e0:e2:0d:2e:8b:93:a5:ae:20:79:be:65:92:
                    dc:a6:3c:03:87:9e:0f:4b:6c:d8:c9:e3:2e:45:df:
                    c6:aa:9c:13:da:b5:1e:6d:b5:32:af:bc:4a:11:e2:
                    17:9c:5a:31:c6:97:0f:7e:3e:77:ea:9b:73:cd:70:
                    a2:f5:05:5f:b3:f5:6b:53:25:dd:f5:7e:d3:2e:2d:
                    bc:e7:0c:25:55:7c:3f:bb:cf:a9:fd:ff:0e:d8:85:
                    f2:39:cc:17:f0:27:c0:98:4b:ac:a1:be:2f:ed:81:
                    94:25:a4:f1:87:3e:80:38:36:08:95:59:63:85:a9:
                    4f:49:b6:2f:34:2d:f1:cc:14:63:82:97:25:1d:07:
                    b3:ee:b3:68:b9:db:73:38:e4:f7:f1:f7:ad:27:47:
                    fe:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AF:84:ED:E5:45:60:16:75:29:82:D7:F0:6B:24:E4:01:27:09:B5
            X509v3 Authority Key Identifier:
                keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:05:43:5a:19:0b:6c:11:1f:3e:ba:31:05:d6:8c:04:65:67:
         4c:f6:80:f0:84:4b:5f:d9:5a:03:f0:5d:ad:aa:12:8b:6d:a4:
         02:73:19:64:be:81:be:b2:f7:24:99:c2:bf:90:d3:5d:93:13:
         e5:98:ad:f7:4a:09:e7:40:5d:4a:66:cd:fa:c9:93:0c:27:58:
         b1:c0:31:a8:23:d4:08:8c:0a:e0:a3:1b:7d:06:ee:84:76:fc:
         19:ea:9d:7c:03:58:e6:ba:72:f4:4f:79:2e:81:8b:da:f3:92:
         a1:43:fd:39:1c:d3:b6:99:16:45:71:4d:c1:42:c8:c7:b3:5b:
         a9:19:de:44:f8:ca:52:b1:26:4c:8a:f0:85:a0:11:e4:14:9d:
         8d:d8:56:a5:dc:80:4a:45:cb:3b:6b:44:0a:14:9f:9e:82:9b:
         37:d9:c8:6e:2e:d2:2f:3c:b2:fc:26:ec:27:7e:55:20:ac:f2:
         a1:05:d5:41:e8:d3:8b:21:8c:71:e9:e8:77:4e:6b:9c:c3:6b:
         a0:88:6b:a5:e8:a2:cc:55:2c:c6:db:92:60:f4:0c:c9:fd:c7:
         5b:8c:f1:f0:d3:eb:14:3c:58:6b:50:85:3e:74:e7:70:d4:47:
         a1:0d:36:32:b7:8c:23:77:1e:f8:53:62:42:81:8b:89:81:a6:
         a5:04:e3:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPaFU8iKI1Bojdmgjb4DYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTA3YWEwNDZhODgxZmI4MDUwNTE5NTIwMTYzMDYwMjYw
ZDdmMzEwHhcNMjUwNDEzMTMwMTMwWhcNMjUwNDE0MTMwMTMwWjAzMTEwLwYDVQQD
EyhhM2FmODRlZGU1NDU2MDE2NzUyOTgyZDdmMDZiMjRlNDAxMjcwOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ3Nn4kWRA1bjg2ZDecxoFq5JGGS
iKYwgTZ+EflbhVvFXRY/DGtpMJ1bcec1u/jbbL7LvN+819A7Li6/WnJjIcX/z/z1
i7QJ8AsnUulBPRxgZ49LpvtMEo/8PXELfwveCakuRkXhYS8PT+DiDS6Lk6WuIHm+
ZZLcpjwDh54PS2zYyeMuRd/GqpwT2rUebbUyr7xKEeIXnFoxxpcPfj536ptzzXCi
9QVfs/VrUyXd9X7TLi285wwlVXw/u8+p/f8O2IXyOcwX8CfAmEusob4v7YGUJaTx
hz6AODYIlVljhalPSbYvNC3xzBRjgpclHQez7rNoudtzOOT38fetJ0f+uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOvhO3lRWAWdSmC1/BrJOQBJwm1MB8GA1UdIwQY
MBaAFJyQeqBGqIH7gFBRlSAWMGAmDX8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWIt
YjFlNjk4NzA4ZjU5LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kY2I2MTMtOTNlYi00ZTg2LTg5NWItYjFlNjk4NzA4ZjU5
LzEvbkpCNm9FYW9nZnVBVUZHVklCWXdZQ1lOZnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwVDWhkL
bBEfProxBdaMBGVnTPaA8IRLX9laA/BdraoSi22kAnMZZL6BvrL3JJnCv5DTXZMT
5Zit90oJ50BdSmbN+smTDCdYscAxqCPUCIwK4KMbfQbuhHb8GeqdfANY5rpy9E95
LoGL2vOSoUP9ORzTtpkWRXFNwULIx7NbqRneRPjKUrEmTIrwhaAR5BSdjdhWpdyA
SkXLO2tEChSfnoKbN9nIbi7SLzyy/CbsJ35VIKzyoQXVQejTiyGMcenod05rnMNr
oIhrpeiizFUsxtuSYPQMyf3HW4zx8NPrFDxYa1CFPnTncNRHoQ02MreMI3ce+FNi
QoGLiYGmpQTjJA==
-----END CERTIFICATE-----