Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
File:                     nBzRs8h3KVb6hVNahGS0yhlmOt4.mft (raw, json)
Hash identifier:          lnDPNyc20PolF3OgffloShlnr/pdfTraFkFeMn3vkGM=
Subject key identifier:   EC:7A:14:3C:DD:D0:C9:A3:B3:29:3C:32:D7:0C:8D:B8:45:17:1C:99
Authority key identifier: 9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
Certificate issuer:       /CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Certificate serial:       01979FAA7CD75BC61D931986CD169A2C52A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
Manifest number:          15AD
Signing time:             Tue 24 Jun 2025 02:00:39 +0000
Manifest this update:     Tue 24 Jun 2025 02:00:39 +0000
Manifest next update:     Wed 25 Jun 2025 02:00:39 +0000
Files and hashes:         1: JeBncY6ChKBRQOUTYTSFHZE1uH8.roa (hash: xgTh9uFZcGgpjhz25blPwKqXY1Nn7zce/RhA70u2mJQ=)
                          2: XOwu2ebvUDQPT_bMtirnTz4DXtY.roa (hash: +WWsZzcafcQYxozcv0fQHPsnMiE94A7luCuf63M9dXs=)
                          3: nBzRs8h3KVb6hVNahGS0yhlmOt4.crl (hash: +Rc34vpBXAeYSmzbyEIj+Tgq6efcp5aPgBwLwqe47aE=)
                          4: o2jbAYhRTuQBmdDMbACuxNgCDog.roa (hash: l9P4NF0hkDAdmr9McK92Zf+I3x80Yj+ORPskROTVaoo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9f:aa:7c:d7:5b:c6:1d:93:19:86:cd:16:9a:2c:52:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
        Validity
            Not Before: Jun 24 02:00:39 2025 GMT
            Not After : Jun 25 02:00:39 2025 GMT
        Subject: CN=ec7a143cddd0c9a3b3293c32d70c8db845171c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:3b:0d:b6:b3:32:40:f2:de:fb:36:99:51:
                    e7:93:f7:2b:e0:5e:6b:24:88:b3:ca:f9:c6:1f:5f:
                    6e:1c:8a:d6:58:c1:85:5c:83:48:0a:f5:b2:d9:c6:
                    8b:21:12:92:ed:70:44:ac:aa:e7:39:c8:0c:b8:5a:
                    32:d9:f3:57:3f:7b:3a:98:a1:94:1e:ab:22:6b:02:
                    bb:ea:5a:91:40:9f:0b:61:af:08:f3:2c:43:98:dc:
                    33:f9:8a:88:14:f8:4b:1b:7c:1d:d0:86:a0:db:3b:
                    4a:b6:03:8d:eb:7b:a5:aa:e3:32:a7:c4:6d:9a:c3:
                    e2:5e:c7:86:0e:ff:27:3a:7f:f7:88:52:e2:25:ee:
                    f8:bf:35:1e:52:82:25:ce:82:0d:ab:d7:e4:7d:9a:
                    6d:54:81:7b:50:ac:eb:19:4c:00:fc:8d:ea:0c:43:
                    e0:53:83:e7:20:51:1c:e6:ef:40:70:27:2e:a0:4f:
                    ac:17:5f:63:68:12:2e:d1:df:31:ef:da:7e:dd:50:
                    fb:1e:bb:bd:ae:c6:5e:25:f8:7d:c6:ce:72:56:ee:
                    19:e0:96:79:09:84:66:77:e5:ca:55:a7:fa:fa:1d:
                    88:17:cf:b0:2e:f9:bc:27:91:11:c0:d9:2b:39:10:
                    2d:bf:31:16:71:98:f1:be:04:ba:7e:04:52:44:d2:
                    60:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7A:14:3C:DD:D0:C9:A3:B3:29:3C:32:D7:0C:8D:B8:45:17:1C:99
            X509v3 Authority Key Identifier:
                keyid:9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9d:a7:70:fb:5d:ff:61:52:22:b0:2f:c8:1b:4c:23:1d:2e:
         56:0c:ac:4e:5b:81:e1:e6:99:dd:a0:66:b5:fc:57:99:9c:3e:
         6a:94:8f:e2:69:69:d6:ad:da:47:40:d1:55:5c:24:82:a7:21:
         df:63:b9:98:28:3c:17:f8:0a:bc:0a:08:a7:13:18:fe:77:51:
         ba:44:99:d8:64:9d:73:67:0b:31:1f:e6:ba:ee:98:d6:6d:5d:
         85:66:5d:9c:de:12:45:f0:72:c1:7f:81:dc:e5:73:dd:67:5f:
         7a:89:2c:64:93:19:c9:92:5d:db:23:dd:64:0e:45:1c:35:1f:
         5e:16:52:14:5e:94:aa:71:86:0c:3a:ca:4a:61:e6:5e:75:d1:
         1f:76:42:91:22:a1:ea:a3:6a:07:3d:5b:23:0a:53:eb:de:24:
         79:5f:1c:91:72:02:23:3f:eb:a8:f8:c8:90:98:c6:cf:46:b4:
         79:86:e3:a1:c3:ce:e1:34:39:e8:87:1f:a6:4f:1a:8d:92:18:
         fa:4d:1b:e0:3a:e0:04:65:b6:85:23:c0:23:ca:c8:c3:04:7a:
         70:df:4b:4b:ae:2d:cc:88:9a:ec:c0:98:c8:bf:97:7a:7e:70:
         68:e7:c5:76:05:ac:08:62:2b:b7:cf:b7:99:15:e8:30:4d:1b:
         e5:a7:27:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZefqnzXW8YdkxmGzRaaLFKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMWNkMWIzYzg3NzI5NTZmYTg1NTM1YTg0NjRiNGNhMTk2
NjNhZGUwHhcNMjUwNjI0MDIwMDM5WhcNMjUwNjI1MDIwMDM5WjAzMTEwLwYDVQQD
EyhlYzdhMTQzY2RkZDBjOWEzYjMyOTNjMzJkNzBjOGRiODQ1MTcxYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6Y7DbazMkDy3vs2mVHnk/cr4F5r
JIizyvnGH19uHIrWWMGFXINICvWy2caLIRKS7XBErKrnOcgMuFoy2fNXP3s6mKGU
HqsiawK76lqRQJ8LYa8I8yxDmNwz+YqIFPhLG3wd0Iag2ztKtgON63ulquMyp8Rt
msPiXseGDv8nOn/3iFLiJe74vzUeUoIlzoINq9fkfZptVIF7UKzrGUwA/I3qDEPg
U4PnIFEc5u9AcCcuoE+sF19jaBIu0d8x79p+3VD7Hru9rsZeJfh9xs5yVu4Z4JZ5
CYRmd+XKVaf6+h2IF8+wLvm8J5ERwNkrORAtvzEWcZjxvgS6fgRSRNJg9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOx6FDzd0Mmjsyk8MtcMjbhFFxyZMB8GA1UdIwQY
MBaAFJwc0bPIdylW+oVTWoRktMoZZjreMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkJ6UnM4aDNLVmI2aFZOYWhHUzB5aGxtT3Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wNmVhYjAtNmM2ZS00Yzk1LWJiZGMt
OTE2MDQ3MDYyYTIyLzEvbkJ6UnM4aDNLVmI2aFZOYWhHUzB5aGxtT3Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wNmVhYjAtNmM2ZS00Yzk1LWJiZGMtOTE2MDQ3MDYyYTIy
LzEvbkJ6UnM4aDNLVmI2aFZOYWhHUzB5aGxtT3Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApp2ncPtd
/2FSIrAvyBtMIx0uVgysTluB4eaZ3aBmtfxXmZw+apSP4mlp1q3aR0DRVVwkgqch
32O5mCg8F/gKvAoIpxMY/ndRukSZ2GSdc2cLMR/muu6Y1m1dhWZdnN4SRfBywX+B
3OVz3WdfeoksZJMZyZJd2yPdZA5FHDUfXhZSFF6UqnGGDDrKSmHmXnXRH3ZCkSKh
6qNqBz1bIwpT694keV8ckXICIz/rqPjIkJjGz0a0eYbjocPO4TQ56Icfpk8ajZIY
+k0b4DrgBGW2hSPAI8rIwwR6cN9LS64tzIia7MCYyL+Xen5waOfFdgWsCGIrt8+3
mRXoME0b5acnLA==
-----END CERTIFICATE-----