Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
File:                     nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json)
Hash identifier:          u3qAt3pL9WDPtiHunZErjo50uVUA3a9evFqdmgLqgLE=
Subject key identifier:   A4:A8:3C:E6:69:03:8B:CB:92:00:5F:61:E4:7B:09:98:AD:75:C5:03
Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50
Certificate issuer:       /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
Certificate serial:       01962DF42A791386990B6C245BC810052256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft
Manifest number:          0F34
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: DQkkZmosuyehVDQPEvEfF6KxqiqScy2OY0BJ7AUBh/w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2a:79:13:86:99:0b:6c:24:5b:c8:10:05:22:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=a4a83ce669038bcb92005f61e47b0998ad75c503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fc:a0:c2:74:bf:00:8d:11:f4:83:51:36:dc:
                    e6:ea:b3:59:f0:04:56:51:c1:95:c1:d9:6b:41:f1:
                    65:fd:8a:22:0f:02:33:4b:61:04:fb:6b:57:cb:76:
                    09:60:a7:aa:f9:51:27:54:08:a4:b6:1b:e6:c2:f3:
                    10:fc:6f:fe:eb:a5:c1:fc:bb:fa:e2:f5:eb:24:51:
                    1f:1e:e9:02:d2:df:15:c4:68:88:50:73:32:62:bb:
                    28:8f:a7:e8:57:8b:49:a5:f4:bf:ce:86:01:3b:94:
                    de:8a:e8:f5:86:79:f7:4b:f4:b6:17:ad:20:ac:ef:
                    b0:5a:b5:73:39:07:3d:07:1f:57:4e:74:da:93:48:
                    29:32:6c:ab:24:97:ff:d0:34:ae:8a:f3:d7:3b:3c:
                    67:c9:d2:12:45:46:3a:28:5a:a5:a3:6d:b6:fd:b2:
                    e2:4e:27:fc:18:d1:15:ba:56:e6:c4:57:9a:79:25:
                    7a:9b:41:42:c5:9c:3a:2a:ad:f4:d6:67:41:8c:a5:
                    fb:28:4d:ae:4d:cd:c6:d8:3f:dd:5c:a8:53:fa:63:
                    b0:69:39:04:79:a0:f1:41:19:5e:a5:2b:cc:0f:16:
                    93:9e:d3:b7:c6:6a:7f:a6:f6:6c:46:8d:4e:67:00:
                    0c:e3:3f:8b:97:df:0f:6a:b8:8b:dc:f1:43:0b:1e:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A8:3C:E6:69:03:8B:CB:92:00:5F:61:E4:7B:09:98:AD:75:C5:03
            X509v3 Authority Key Identifier:
                keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:99:54:ba:17:d6:f6:db:6d:9e:57:ae:fc:e2:58:31:9d:96:
         96:84:5c:af:e3:b0:cf:7e:5d:43:36:68:65:5b:c3:f1:16:ef:
         1b:16:ea:6b:8e:af:dd:b6:59:14:2d:e9:c7:5a:bf:57:b3:ce:
         4f:81:4a:be:29:03:26:d8:9e:c4:a3:d1:b0:8a:02:08:95:e8:
         73:a4:50:e3:96:20:e8:58:1d:6b:27:64:33:dc:02:20:87:cb:
         3f:f5:16:b2:36:d6:a8:5e:31:cc:fa:c1:a0:b7:78:cd:5c:9f:
         1a:22:fe:78:91:9e:15:9c:c7:a8:ee:5b:71:b9:f9:c8:3d:d8:
         7f:fa:53:fa:06:52:ca:42:d8:3b:e3:c0:3b:bb:fe:97:5c:82:
         ec:28:f5:9d:00:b3:c3:16:ea:b8:6c:55:c5:7a:0f:73:ce:e6:
         ac:d8:28:db:92:a3:b6:3a:4e:39:92:3e:07:56:a8:0d:a2:75:
         c5:75:b4:16:f8:fa:1d:1f:b1:20:a5:14:2f:91:af:d8:3b:03:
         2f:59:0c:33:df:71:c4:02:81:5c:57:b6:68:aa:8f:61:91:e3:
         f1:23:a8:6d:04:8b:86:17:77:00:9e:39:ac:42:fe:a5:94:2b:
         17:88:eb:5f:aa:92:07:18:89:f1:2d:0d:9c:ee:3e:ee:c4:7a:
         4b:85:19:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----