Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
File:                     NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft (raw, json)
Hash identifier:          fWCAhns0vStBNDWdaMiguDukLBsY/44RHXWal0wRmxU=
Subject key identifier:   2D:9A:24:50:6C:5A:8D:C2:56:77:FB:2C:A2:AC:90:D6:06:15:5A:63
Authority key identifier: 34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45
Certificate issuer:       /CN=34e40348463c60ce9fc694060a37f4683093f045
Certificate serial:       01962F74CDA00652676907DE736093398261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft
Manifest number:          08D4
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl (hash: 0KbKtYBCeFuKGr6w1ah9xPvudhyUt33Ch1/vB/hvk0w=)
                          2: t1BHctdeN3-hwrpqiOWRf8QN_Co.roa (hash: sJPUaFdOg0DhAMbLJjpATv5AEJJ9zxfLTR5pbOXKFNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cd:a0:06:52:67:69:07:de:73:60:93:39:82:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e40348463c60ce9fc694060a37f4683093f045
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=2d9a24506c5a8dc25677fb2ca2ac90d606155a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:73:6b:e5:90:b4:65:be:15:ce:ae:a2:c7:
                    47:1a:26:53:18:21:1e:8a:97:55:18:8a:c0:4b:fc:
                    09:23:84:61:c4:ca:77:88:f7:42:a3:d7:1f:df:7b:
                    0a:66:01:29:2f:a5:5a:6c:9a:62:8c:e4:e0:bf:f8:
                    b2:c3:3e:47:e9:d7:56:3a:89:68:65:5a:73:7b:09:
                    72:57:b1:3b:30:f0:8f:6f:be:92:6f:bc:f0:c2:53:
                    3a:6c:1c:bc:75:b7:88:af:f8:66:1b:2d:87:c5:d2:
                    d2:37:b7:9d:aa:ab:8b:89:3f:9c:00:34:b3:95:3a:
                    c9:cc:fd:8f:0e:32:1b:37:f4:34:42:0e:77:1d:db:
                    88:7c:76:bd:4b:bc:a1:51:c2:ae:b7:62:1f:3f:c3:
                    88:df:58:37:32:35:bf:44:10:68:99:68:c9:7d:c1:
                    c0:c3:26:25:cc:fd:97:b2:1d:af:96:66:15:aa:08:
                    f0:9a:48:c0:e6:92:8a:61:69:41:37:64:37:0f:45:
                    6a:d4:42:5d:fd:79:37:bb:a2:c5:dc:51:34:2a:b6:
                    68:5f:9e:78:e3:b0:b9:93:71:21:63:3f:f8:c4:47:
                    1f:ad:70:8c:ea:c2:b2:0b:06:19:9c:33:a9:eb:8c:
                    1b:3c:a1:36:54:ab:38:b4:0d:1c:1e:60:7b:ed:0c:
                    21:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9A:24:50:6C:5A:8D:C2:56:77:FB:2C:A2:AC:90:D6:06:15:5A:63
            X509v3 Authority Key Identifier:
                keyid:34:E4:03:48:46:3C:60:CE:9F:C6:94:06:0A:37:F4:68:30:93:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOQDSEY8YM6fxpQGCjf0aDCT8EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2a3ccc-293c-41da-ad16-1b99fd09763e/1/NOQDSEY8YM6fxpQGCjf0aDCT8EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ab:54:fc:ce:77:2e:d8:7f:47:15:cb:47:ae:c2:a0:e3:e5:
         96:30:15:e0:96:1a:c6:aa:c5:c6:36:eb:50:a9:35:23:4a:38:
         e1:2a:94:9a:7d:e1:9c:6c:87:1f:bd:a1:11:14:08:45:67:6e:
         c6:06:09:4b:d5:3c:e0:d8:bf:7c:c4:f4:aa:3c:2f:b7:37:0b:
         11:9b:0a:ac:f0:0c:0b:f9:a4:67:89:ef:80:84:c2:f5:34:bb:
         24:f0:36:f4:b7:f7:24:d8:2b:89:04:d5:0e:56:cb:9a:5c:f3:
         fc:5f:25:f4:8a:c9:80:d7:63:80:53:25:ee:88:49:f5:2f:24:
         34:98:4b:b8:46:da:01:22:93:78:95:ad:49:79:bd:9c:09:e9:
         11:4f:1a:4a:b6:a0:90:ae:3c:34:63:0f:b9:aa:f4:09:40:f2:
         37:ae:32:70:2a:00:4b:98:ba:b7:3e:d7:3e:dd:c6:93:01:43:
         5d:31:38:66:e6:03:2f:77:0e:54:1e:7d:54:ca:f0:f9:d9:19:
         3a:80:0d:61:49:e2:28:4c:dc:85:d2:05:c5:da:47:a9:16:eb:
         67:39:0c:89:a6:96:ec:06:1b:2e:db:44:a2:4b:d7:f9:ec:37:
         1f:c3:82:34:31:76:8a:fd:ba:43:96:74:b4:e5:d6:33:d6:db:
         a1:6e:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----