Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
File:                     NQzOG50G3M6IVmWVNkmcFgM5E3A.mft (raw, json)
Hash identifier:          s7hAYUn31YJ7ZkWaBFNqgbLqryYjIkQ/1H8gaQ66O3c=
Subject key identifier:   55:AD:F5:03:C8:38:7A:0D:DA:5A:2F:A4:26:CA:CD:8F:60:65:92:59
Authority key identifier: 35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70
Certificate issuer:       /CN=350cce1b9d06dcce8856659536499c1603391370
Certificate serial:       01962F069EC34D47821D43E215FF24A2E49E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:25 +0000
Files and hashes:         1: DFk17XzVK0-2LT-y57eUHLqsGoE.roa (hash: dXqY+iE+GyZrGAN3VZSoDHBgCd8KrkAD+zhIs/sw6B0=)
                          2: InA1Og6sR4YUgU6o-aAa42NlxCE.roa (hash: +mBUSakr5JllZ5ayoZAKPyK7MyouaEc8pwLjmxou6hg=)
                          3: NQzOG50G3M6IVmWVNkmcFgM5E3A.crl (hash: 3K3seNVfCLueyPeAOHBePok8z5jBMdjVmddC9oG/Ffs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:9e:c3:4d:47:82:1d:43:e2:15:ff:24:a2:e4:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=350cce1b9d06dcce8856659536499c1603391370
        Validity
            Not Before: Apr 13 12:01:25 2025 GMT
            Not After : Apr 14 12:01:25 2025 GMT
        Subject: CN=55adf503c8387a0dda5a2fa426cacd8f60659259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:68:30:54:e8:cf:83:36:a8:71:a9:7e:02:
                    66:4f:20:20:94:d1:a4:cd:7b:44:85:03:24:44:44:
                    f0:e2:00:12:7f:2a:58:1f:19:19:0e:08:e9:02:5c:
                    c7:55:36:ab:ee:13:e6:8d:5f:03:90:c7:f2:d7:b0:
                    d5:cf:26:5e:9f:b7:72:80:8a:9e:36:08:b9:e0:23:
                    d1:dc:29:b7:3d:38:f7:64:1e:cd:8c:37:1d:24:0f:
                    55:f2:b9:35:e6:1b:f2:a2:3d:99:7b:03:4a:9c:49:
                    90:cf:40:fb:55:80:47:b6:5d:9e:24:e4:67:09:fb:
                    8c:61:b4:c1:0f:72:ee:06:77:7c:9c:6c:f6:d7:53:
                    00:df:d7:51:ad:8c:c4:a0:63:1f:c4:3b:c5:8e:db:
                    4e:b5:79:90:a9:0a:c9:74:d9:47:b1:88:16:a9:c2:
                    91:9b:9c:a5:c9:0f:07:60:3e:29:72:5f:26:d9:00:
                    45:f4:3a:ee:44:ec:a3:70:00:50:4b:92:f3:2d:3f:
                    d9:9e:76:53:a4:05:ee:2a:0b:88:5f:e2:96:f2:db:
                    de:47:61:71:01:21:7a:fe:70:31:ba:e5:ea:41:a7:
                    97:bb:3b:c5:43:af:0d:8a:90:4c:6c:1d:07:3a:bf:
                    ec:09:d7:aa:b0:e7:97:de:30:6b:e7:2c:e8:42:ea:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AD:F5:03:C8:38:7A:0D:DA:5A:2F:A4:26:CA:CD:8F:60:65:92:59
            X509v3 Authority Key Identifier:
                keyid:35:0C:CE:1B:9D:06:DC:CE:88:56:65:95:36:49:9C:16:03:39:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQzOG50G3M6IVmWVNkmcFgM5E3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f52db9-8e25-4297-93fd-55415a0ba73b/1/NQzOG50G3M6IVmWVNkmcFgM5E3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:76:15:11:8d:a4:d4:54:30:37:62:26:da:0b:e7:16:1f:61:
         4e:36:36:2d:7d:82:32:2e:47:23:18:61:a0:a1:85:e2:61:4a:
         df:cb:1e:f3:81:af:b7:c3:e9:f2:cb:a9:a2:3f:a9:dc:b7:f8:
         e7:ba:97:89:21:5a:fa:5f:7d:5a:df:73:a8:d7:50:29:62:81:
         5b:b2:03:f0:35:dd:7b:a0:be:a7:10:80:56:5c:56:65:f7:d3:
         e4:65:fc:13:66:df:66:02:a5:b9:e8:7c:3c:63:e9:87:ff:6d:
         a3:41:b4:94:07:8c:ba:5a:d8:25:a4:f4:30:64:ed:ad:87:fe:
         a1:81:f0:df:d1:f7:c6:f7:bc:c1:73:80:be:a5:c1:18:77:74:
         5f:bf:d2:fa:95:10:b8:ed:ba:a4:21:e9:0b:70:e3:c3:ea:85:
         20:b9:94:a8:c3:ff:e4:4f:c5:ac:fc:a8:bc:fa:a5:4a:9a:3a:
         f2:84:89:80:95:69:8d:60:54:b9:a3:38:6a:93:a5:23:39:b0:
         39:90:25:cf:e4:e8:cd:16:ee:a4:50:b3:e6:7d:8b:a7:27:86:
         e4:b5:37:53:51:94:0d:43:fc:b6:58:3b:90:f2:8f:d6:4a:27:
         68:d3:f6:61:b9:7c:40:43:f0:0a:e9:89:95:d1:53:70:59:5e:
         1d:88:8e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----