Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
File:                     nk-ubSwl3V8vsWtPvqKE5mWMEro.mft (raw, json)
Hash identifier:          IblegPWO7GsSCMhDwVU+MpFrot8dugtgUtS5/E5fTNI=
Subject key identifier:   BD:AB:A7:77:CE:F1:92:58:3C:5C:3C:75:AF:46:55:CC:4F:45:0F:A0
Authority key identifier: 9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA
Certificate issuer:       /CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
Certificate serial:       01962F063E0C3F9A1C69B7289CF6D2710144
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft
Manifest number:          0EE5
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: FLJa1uRgHO4pR545s0EjhCR4g9I.roa (hash: 5Qe+7lHXv9Hk16E4Tqlbe5q64TOWj9YSYqv2nWFzqeY=)
                          2: nk-ubSwl3V8vsWtPvqKE5mWMEro.crl (hash: hcmOyZzjbb3abUHkoCi0aQ/uKmW+kAlnbYfleyRyNf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3e:0c:3f:9a:1c:69:b7:28:9c:f6:d2:71:01:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4fae6d2c25dd5f2fb16b4fbea284e6658c12ba
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=bdaba777cef192583c5c3c75af4655cc4f450fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:5e:37:69:1d:88:b0:13:d0:b9:12:e6:8e:
                    3c:26:bd:eb:d9:ba:11:ef:d9:99:43:cc:b0:aa:a8:
                    e5:94:89:ee:c0:cd:1d:2c:ea:6b:37:93:b1:1c:f5:
                    fb:ee:35:83:fd:a7:2e:fe:df:14:93:4d:d7:2f:89:
                    98:24:22:b3:38:8a:4f:68:60:7c:ee:ef:a9:46:5e:
                    93:4a:16:a1:5b:aa:15:79:bd:86:76:1d:f3:35:66:
                    6d:46:ca:30:04:2b:f6:da:6b:99:83:16:ae:c1:26:
                    05:3a:59:48:e9:dd:1a:39:99:71:3b:73:58:0e:98:
                    7a:5c:c9:f3:b4:af:11:3d:42:59:1b:6f:8a:cc:c2:
                    43:64:75:0b:88:73:14:9b:5d:ef:62:82:10:c0:5f:
                    13:22:40:2c:de:92:6a:ef:6a:8d:bf:2d:1d:42:a7:
                    3d:d5:8c:7b:9b:30:21:83:14:25:8b:3b:b8:82:56:
                    0a:9a:5d:7d:c7:18:7e:43:f4:c8:2d:d3:ee:72:df:
                    f4:53:9f:20:0f:ce:f0:57:60:23:81:d1:bc:2e:12:
                    3d:2d:75:89:8b:16:25:e8:ed:63:ed:f6:0c:cc:cf:
                    fc:50:a1:1f:1a:7b:a6:12:06:ad:74:7f:6f:ae:db:
                    8e:9b:13:68:4b:22:fc:97:e4:0c:74:12:a7:29:fb:
                    43:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AB:A7:77:CE:F1:92:58:3C:5C:3C:75:AF:46:55:CC:4F:45:0F:A0
            X509v3 Authority Key Identifier:
                keyid:9E:4F:AE:6D:2C:25:DD:5F:2F:B1:6B:4F:BE:A2:84:E6:65:8C:12:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nk-ubSwl3V8vsWtPvqKE5mWMEro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ac3260-7069-44f2-9ea9-394ff928f570/1/nk-ubSwl3V8vsWtPvqKE5mWMEro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:3d:3c:15:7c:ce:02:f0:68:a9:34:e8:97:74:59:40:38:
         da:a4:53:ac:15:9b:5b:3d:f2:1e:0c:7f:02:f6:58:fa:e7:3b:
         86:dd:99:02:3f:fc:04:7c:61:d8:8d:27:74:ba:16:3f:bf:8b:
         65:3f:83:51:a8:ba:e5:71:b6:44:a1:b3:ec:0b:b3:fa:6d:54:
         93:9e:23:b8:a3:a6:b5:62:c5:8c:e5:4e:e6:e0:3f:45:1d:e3:
         7e:d2:2f:6e:49:e9:cd:31:49:c4:58:24:99:34:8a:93:21:38:
         55:a9:b0:16:88:39:99:21:80:9e:c2:a9:fe:63:04:10:08:4f:
         4e:53:23:80:1d:a7:a3:fe:12:73:5b:cb:be:1f:9d:19:ff:c5:
         d9:1f:33:0f:85:e5:cf:88:1e:e8:07:b9:d5:f9:0c:37:35:2b:
         d3:b3:2c:9c:45:db:0c:97:30:c7:96:aa:40:6e:f7:4e:49:5a:
         09:ec:53:36:a4:b9:2e:55:42:45:f2:8d:e5:bb:41:ae:0c:a1:
         2b:1d:68:55:52:05:11:84:2b:b0:17:2c:c3:7f:60:72:e5:71:
         53:ee:62:00:2d:6d:25:3b:8f:e2:4c:55:e5:c6:05:a1:b7:8a:
         77:50:ec:36:88:1b:16:3b:3f:be:64:89:c2:ac:fb:b8:a9:80:
         61:b3:b5:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBj4MP5ocabconPbScQFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNGZhZTZkMmMyNWRkNWYyZmIxNmI0ZmJlYTI4NGU2NjU4
YzEyYmEwHhcNMjUwNDEzMTIwMTAwWhcNMjUwNDE0MTIwMTAwWjAzMTEwLwYDVQQD
EyhiZGFiYTc3N2NlZjE5MjU4M2M1YzNjNzVhZjQ2NTVjYzRmNDUwZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmheN2kdiLAT0LkS5o48Jr3r2boR
79mZQ8ywqqjllInuwM0dLOprN5OxHPX77jWD/acu/t8Uk03XL4mYJCKzOIpPaGB8
7u+pRl6TShahW6oVeb2Gdh3zNWZtRsowBCv22muZgxauwSYFOllI6d0aOZlxO3NY
Dph6XMnztK8RPUJZG2+KzMJDZHULiHMUm13vYoIQwF8TIkAs3pJq72qNvy0dQqc9
1Yx7mzAhgxQlizu4glYKml19xxh+Q/TILdPuct/0U58gD87wV2AjgdG8LhI9LXWJ
ixYl6O1j7fYMzM/8UKEfGnumEgatdH9vrtuOmxNoSyL8l+QMdBKnKftDXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2rp3fO8ZJYPFw8da9GVcxPRQ+gMB8GA1UdIwQY
MBaAFJ5Prm0sJd1fL7FrT76ihOZljBK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTkt
Mzk0ZmY5MjhmNTcwLzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hYzMyNjAtNzA2OS00NGYyLTllYTktMzk0ZmY5MjhmNTcw
LzEvbmstdWJTd2wzVjh2c1d0UHZxS0U1bVdNRXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTk9PBV8
zgLwaKk06Jd0WUA42qRTrBWbWz3yHgx/AvZY+uc7ht2ZAj/8BHxh2I0ndLoWP7+L
ZT+DUai65XG2RKGz7Auz+m1Uk54juKOmtWLFjOVO5uA/RR3jftIvbknpzTFJxFgk
mTSKkyE4VamwFog5mSGAnsKp/mMEEAhPTlMjgB2no/4Sc1vLvh+dGf/F2R8zD4Xl
z4ge6Ae51fkMNzUr07MsnEXbDJcwx5aqQG73TklaCexTNqS5LlVCRfKN5btBrgyh
Kx1oVVIFEYQrsBcsw39gcuVxU+5iAC1tJTuP4kxV5cYFobeKd1DsNogbFjs/vmSJ
wqz7uKmAYbO1rg==
-----END CERTIFICATE-----