Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
File:                     nz-YcVNtYL90vfaQYMkNVBB9jjg.mft (raw, json)
Hash identifier:          3LjRdWzl5Tac5GTEf0Sbr1awb+75k6FCfhwpZwmkpr8=
Subject key identifier:   5E:17:9A:1D:42:2A:90:22:24:92:4D:24:B7:82:C5:24:2F:9E:85:D9
Authority key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Certificate issuer:       /CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Certificate serial:       01962F74765E9445E1FF0A08CC2155610C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
Manifest number:          0D6A
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: cZq1EWW-Cck7oNh5z2nVrTYMRQM.roa (hash: ptcOLOBEIgDro10MJyiqeVzzPTgAas0GugoUSuUsWgQ=)
                          2: nz-YcVNtYL90vfaQYMkNVBB9jjg.crl (hash: Zg/Cw+0+N4DPA3o5g+pp2NpaVp4+xivEa6u5GTBhwc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:76:5e:94:45:e1:ff:0a:08:cc:21:55:61:0c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=5e179a1d422a902224924d24b782c5242f9e85d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8e:42:9a:1f:a5:e3:3f:58:1d:42:36:6f:c0:
                    28:d7:a3:27:b7:90:f5:00:0b:28:a2:bf:e4:62:7a:
                    5d:75:0f:d9:43:ca:bf:f5:71:6b:b8:32:a3:48:51:
                    fa:b1:e8:6f:d5:03:b3:3b:e8:6f:aa:cf:a4:9b:ce:
                    de:fc:27:75:cd:aa:29:06:8c:bc:08:f2:00:11:69:
                    53:c2:82:77:60:c9:be:6c:7c:46:9e:cd:77:b5:cc:
                    1f:fa:22:0d:ae:ec:20:8b:c2:f7:44:ab:48:b2:be:
                    3e:b1:1b:cf:77:85:16:ae:6f:70:60:b4:51:d8:31:
                    df:57:3a:fb:20:d7:31:e8:75:da:38:48:11:e0:3f:
                    90:9b:ae:55:94:3c:6b:69:38:f4:5a:8c:6d:69:58:
                    4b:0c:72:5a:01:97:ff:41:93:3b:f3:50:5f:de:06:
                    67:06:9a:c6:aa:0e:3e:9e:85:8b:79:9c:a1:0b:b5:
                    5f:3f:8f:de:57:ac:8e:6e:18:a1:39:11:be:ec:f0:
                    b9:5b:72:43:8e:8a:83:58:18:25:2b:73:4b:85:5b:
                    a2:13:89:67:25:e3:c8:f0:49:8f:9f:ec:f1:fd:7a:
                    35:e3:b3:79:48:2a:12:4e:41:c7:0e:bb:b2:de:c4:
                    96:2d:e9:71:90:d0:60:8e:c8:27:d5:75:40:db:d1:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:17:9A:1D:42:2A:90:22:24:92:4D:24:B7:82:C5:24:2F:9E:85:D9
            X509v3 Authority Key Identifier:
                keyid:9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8c:ec:d0:4f:e0:8b:8b:0c:83:91:30:e5:17:8e:1e:cb:8d:
         74:dd:37:3e:c9:b3:41:c6:14:6a:f6:15:64:85:4d:09:b2:07:
         b7:7c:53:ee:b3:17:da:ef:c6:cb:5d:69:fc:ed:9a:eb:61:d0:
         fd:d9:91:4f:9d:13:be:65:4d:f3:50:76:e1:96:0b:5d:b5:e9:
         cb:e3:44:08:3d:65:13:ea:68:59:27:49:87:61:ab:50:9c:6a:
         48:e6:45:fc:1f:ce:4a:4e:f8:6a:e7:e7:71:2e:17:79:20:4f:
         2a:7e:5c:ab:3b:a6:8e:5d:67:e5:5c:f0:36:b4:5e:6f:8f:9c:
         2a:bd:de:44:19:d9:fc:50:79:f1:38:b6:98:c0:71:7e:17:77:
         f7:44:46:ac:e9:de:92:23:21:d9:d0:7f:17:cc:dc:9c:e1:ee:
         06:59:db:b1:a6:60:49:90:53:76:30:6e:55:e6:18:64:67:a3:
         7b:e4:3c:9d:d0:f2:84:93:f7:e3:ff:92:6f:7a:b9:35:10:3d:
         8e:75:3a:3b:12:8a:21:fe:88:77:5f:9f:ff:2b:20:a5:76:6d:
         d1:e9:1e:0a:a5:a0:6c:82:3e:1f:95:2e:91:15:fe:0e:ce:f9:
         b9:c7:5f:c4:2c:58:7e:00:45:d9:d0:af:6f:35:b8:eb:4d:13:
         6c:42:d7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----