Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File:                     r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier:          VsjJVi6tonvnOwb7Br8vFiBKS3v61YYbO8/ZZGgRbWw=
Subject key identifier:   A8:D8:B8:A4:93:05:76:52:5E:72:FC:7E:78:CA:7E:E9:E4:EC:9F:A4
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer:       /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial:       01962F745333791930C0E811EC816DAE73C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: w+OTc940lq83vc/HH4+FsD4V2JcdE0RzxX4vbBnmds8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:53:33:79:19:30:c0:e8:11:ec:81:6d:ae:73:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=a8d8b8a4930576525e72fc7e78ca7ee9e4ec9fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:b9:f7:43:36:dd:99:fe:e5:8a:50:e7:36:
                    91:83:91:35:d4:80:92:74:00:15:3c:24:f4:1a:ac:
                    6b:ba:aa:5d:4b:8c:78:70:80:01:d8:2a:cd:32:79:
                    23:30:8c:e4:66:88:94:3b:5e:b4:b4:a8:42:07:ef:
                    32:18:93:4d:50:bd:d8:8d:fd:ce:56:58:80:53:75:
                    5a:f1:ab:08:90:18:54:21:fe:7b:c1:e9:99:17:94:
                    37:26:aa:da:1d:e1:aa:4a:12:66:31:4c:42:3f:4b:
                    d7:c5:e3:0d:2e:80:e2:33:cd:9d:30:16:b2:83:64:
                    af:99:da:4c:e5:87:2a:6c:5f:40:a5:c5:46:7c:23:
                    02:6f:7d:e5:2b:45:4e:f7:e1:ee:e4:93:e9:cf:20:
                    e9:87:79:66:75:3d:48:1a:e8:66:27:e7:a6:82:e6:
                    d1:04:53:f7:83:94:74:48:de:b7:7a:9d:29:0b:f7:
                    c4:99:e0:1c:61:98:01:1e:13:c6:87:4a:9a:c3:5f:
                    ba:82:49:3d:08:93:a5:56:ab:2e:b9:9c:78:fa:36:
                    e4:17:41:40:f4:ab:61:ac:29:5c:f5:0a:e3:f0:f5:
                    98:ae:d0:7e:8c:5e:c5:45:da:a9:fe:93:57:13:09:
                    77:f1:c8:df:02:47:99:6b:48:f2:c0:ed:60:28:cb:
                    a2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:B8:A4:93:05:76:52:5E:72:FC:7E:78:CA:7E:E9:E4:EC:9F:A4
            X509v3 Authority Key Identifier:
                keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:cd:2e:10:1c:bc:e4:6e:0a:ab:37:83:55:d5:9e:a5:b6:02:
         f7:fe:3c:ca:0b:5c:9c:ae:ce:93:44:2e:a3:42:04:7c:06:fa:
         f5:46:f9:e6:18:2d:12:67:b5:20:c2:fc:b0:6e:e6:97:d3:70:
         a7:32:25:e6:88:3e:2d:41:f3:f8:98:47:be:06:d2:5f:e8:4e:
         8d:df:49:f8:e7:04:b0:c8:41:1f:3b:1a:33:eb:5a:9f:04:10:
         e7:7c:f3:e1:35:a4:a5:82:18:16:38:6b:b0:91:1f:38:6e:c9:
         80:61:91:1a:34:6b:c9:25:d2:b0:ea:f3:cb:7c:33:ba:25:3e:
         39:72:58:d6:90:ea:79:25:9e:47:5f:ca:d2:54:76:90:d5:b4:
         1f:9e:7d:6b:a5:10:c9:ab:42:fa:d4:eb:9d:4c:ce:7f:47:f2:
         2c:4a:87:d7:0d:cd:59:4e:f6:62:33:2f:68:5c:58:c7:11:2a:
         cc:3c:2c:fe:5e:0e:5a:c2:39:c3:ac:8e:00:6a:ca:fe:ab:57:
         99:1f:b6:82:9a:a7:46:fe:47:66:84:41:23:47:4b:38:8f:6b:
         f8:0d:8d:19:a5:12:65:ba:fa:75:45:8b:9f:c0:14:99:8a:80:
         30:0c:8d:d6:1f:97:37:5d:8b:65:ce:ff:76:ca:9b:49:3d:1d:
         06:af:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----