Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
File:                     NSrjOxGzajGbqBNH2FJIDY50yH0.mft (raw, json)
Hash identifier:          a6+aIcFMRM3QJh7RAHTIHuruzQ5uR74ZSAHrtxugvdY=
Subject key identifier:   B8:41:01:A4:87:BC:20:6E:56:49:8C:91:B8:9C:85:F5:B0:E8:6F:B3
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Certificate issuer:       /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial:       01962FAB3AF73ABE734B462620F3520ABA40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
Manifest number:          14E1
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: 0T-kX-yMl6hrvSqG2ynD73xdyQo.roa (hash: cgmatniwn1/xiHv69T4cMPpIEH50V1xo/4j28Z9x1m0=)
                          2: 17mCqGV8t4z7hhbymmlowxpohlM.roa (hash: yC9WJu/Jd4wcWlQ9QZAgVlQjobSTHwxFtZkbAGBBVww=)
                          3: 1pDyz5W_JAft5FPBZfAc2Dvzg5c.roa (hash: LgK+kT8mVqNGaAx7gaXMs9zRjHjrV8c0zXwW/GXnPSA=)
                          4: 6kMRVDnionlAub1gckO_HkRUbqI.roa (hash: qj6KuKORTLdS4aBQ071+TsqqvTIUymsR7TQRluBWD8g=)
                          5: 84kpIndO6O-kBrvo6G8FCJ-Mh7c.roa (hash: uKI3cc6MdSBc3U/MUFC3w51NVXcvXAUE9e8+DJj6c/E=)
                          6: CHbKKVMpLk01B-ESgxaPOu3Vvlk.roa (hash: L335VlqzZgeAefFFrQPy002bZMiytu82bj4ohO+r9FM=)
                          7: GVeAWRodRK-Mh61DOhsiaxRFZdA.roa (hash: 6wFMaWRMR8ReBoYGgjQ/Oo8mpX+xVZB1ZTic2qm8uE4=)
                          8: NSrjOxGzajGbqBNH2FJIDY50yH0.crl (hash: RKSgsn/EHmvBEKO8xC71MhgsdI8Zc6AdKKXHWo1PKxo=)
                          9: Og01fojxRGGibY1rWvCYrh8hqkw.roa (hash: gBWSEnn5mf0WfgNy7lHpYiyck7oRxx2s4gQls5jB+9Q=)
                          10: bh7p04HAmQsz8fs7_RAvgdbLXWc.roa (hash: XNtliyQUFflqK4Nj54d3XkY/W8QWS5S1FxEE4AThAPo=)
                          11: d4YVQNnChkBacDcydIrt5a5Rh6A.roa (hash: fh+DUICn/8r5lof6k4KiduZBw0s+kpBbyc0dMlUaf8A=)
                          12: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (hash: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=)
                          13: gIlo4vPfA-Asqm6bEqwCB86sKZw.roa (hash: mlBG0jrpcRSdb5T2GyUhX9gWpQsliliCeTcNKQRGY5g=)
                          14: hL4j8iuigkkNTiErA56QF9MabJw.roa (hash: 3JK+S5IrXE+YdoNB6wcCFPK3b1CU93EhTlsUYxkzyGc=)
                          15: lzfdj3sYjKwxJ-lEm4PMRG_z-x0.roa (hash: k0S/RTqMQtMqoYVsegJF/SGrW/zlHJLMymOnkkPiIpo=)
                          16: p3j4d7EN7rDZiNLKgGxCrP802jo.roa (hash: 7FdkPqi5mYojSW+i81Swo2BRIuKy4/SBN+6JsrhNjL8=)
                          17: rE2Ly0V1-oN-VtZjGs2shpF_cD8.roa (hash: pxUNok0w8Es2RyI40wdeQRUFAth2XgxN8GHXhm6zKn8=)
                          18: u20K50DQR1l8QXeOK7QG7eVh8Uw.roa (hash: PRxkrKwBa4GPRRnGQxkmXgsaYMTCHr9YZeDWPgI43r8=)
                          19: ygd83f_VnIRT7CYGvaw5CvksSLo.roa (hash: vfYm7cKZBuKoo5h42MYbmqAxBPCTlW3BklGv4+fo3QE=)
                          20: ykMpu1OjLYCWHCVsOgMXym15xtE.roa (hash: K1TvclD8VtPE+Fs7ZT7FGPsfDHpL8RsT+Tb6gJAHLvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3a:f7:3a:be:73:4b:46:26:20:f3:52:0a:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=b84101a487bc206e56498c91b89c85f5b0e86fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:de:9f:7e:31:b9:36:31:9d:4e:f7:10:8f:
                    9e:4e:73:df:ae:ff:b8:fb:27:b8:b5:9b:a3:30:90:
                    61:b8:79:fc:d2:68:b4:00:01:c7:92:9b:e7:d1:18:
                    df:43:eb:ef:b5:fb:0c:21:24:83:ef:45:f6:5c:b0:
                    0a:5b:53:98:a5:70:60:a5:96:73:15:90:10:ab:52:
                    ac:41:ba:f8:d5:0d:b5:1e:6a:e8:84:53:26:54:0b:
                    60:64:74:62:51:12:79:47:c9:e1:2f:73:98:f4:31:
                    64:77:3b:fc:c0:7c:a8:85:29:df:50:bd:05:0c:1b:
                    6e:5c:0a:4f:3b:6c:02:e5:82:db:03:79:ba:fe:0a:
                    47:01:b5:c3:bb:b5:d2:eb:df:11:0e:87:e0:fe:40:
                    f6:e8:c6:70:b4:3d:99:01:31:53:10:90:1a:6b:af:
                    33:a0:db:e1:66:80:70:ca:a0:ad:e0:b1:08:1f:9c:
                    68:7f:b7:79:79:c8:27:bb:0a:8d:cc:53:37:47:0f:
                    e3:cc:a8:6d:ab:c3:f8:a2:08:78:05:11:37:a9:fd:
                    20:68:76:06:45:91:5f:75:64:fe:ce:70:2f:ba:98:
                    2a:8c:ac:2b:63:c7:03:9c:55:dd:19:ac:f5:5c:9a:
                    80:fd:5b:b3:f4:ea:59:1a:c2:52:29:7a:2a:75:fb:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:41:01:A4:87:BC:20:6E:56:49:8C:91:B8:9C:85:F5:B0:E8:6F:B3
            X509v3 Authority Key Identifier:
                keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d3:0d:70:97:65:f3:2e:ba:39:db:49:be:50:d8:01:f4:eb:
         8e:a4:b3:b2:6c:2a:39:64:24:15:33:7d:e7:fb:4f:dd:7b:13:
         c1:d4:da:0d:06:94:88:46:64:b3:b2:42:47:d5:7a:a2:a1:9c:
         3b:24:17:38:b7:23:78:8e:77:03:06:da:a1:d2:e1:26:84:25:
         db:8f:13:56:44:dd:43:ca:2c:2f:2c:b0:37:02:f3:5f:b1:10:
         08:dc:a2:26:f1:e0:72:40:14:22:e6:e1:e5:7f:bf:d2:e9:19:
         fb:67:2e:e1:a1:3e:99:d5:b6:27:30:5d:c5:cc:c1:3c:ad:58:
         a4:b6:4e:99:3d:4d:95:b2:17:fb:a4:cd:9f:00:23:98:9d:76:
         2d:59:ea:b4:8d:b4:f7:ba:2f:32:58:ae:30:b3:6b:c8:d5:35:
         02:b6:6a:8b:f7:88:0a:d2:24:3d:83:61:5a:6e:71:c8:06:37:
         84:e1:c7:d7:08:db:c3:9c:1f:96:fa:4b:f8:94:33:98:d4:77:
         ba:a0:29:03:da:db:f7:1b:59:26:2e:97:0f:d9:e5:9a:5a:1d:
         6b:ec:b0:a1:7e:75:00:47:27:29:6b:d3:ca:ba:d0:e9:50:bb:
         11:ad:36:b3:2c:e9:51:5d:c2:5b:37:f0:b2:7d:b0:3c:1a:4e:
         9e:f0:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----