Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft
File:                     pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft (raw, json)
Hash identifier:          IB/f0QsJqJMhcKL5O6NTfi8bfDjmR5fn0yjnTOrTPmo=
Subject key identifier:   FE:E8:43:A1:E4:99:54:05:CB:A0:07:E1:7E:78:6B:3D:EA:66:94:80
Authority key identifier: A4:D3:80:41:AE:4E:73:15:77:24:AA:9F:3E:E0:43:05:E5:F1:28:34
Certificate issuer:       /CN=a4d38041ae4e73157724aa9f3ee04305e5f12834
Certificate serial:       01962E991DC6FB57FC2BE650B275E66A1D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft
Manifest number:          14BA
Signing time:             Sun 13 Apr 2025 10:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:48 +0000
Files and hashes:         1: pNOAQa5OcxV3JKqfPuBDBeXxKDQ.crl (hash: KJq7oBcZKhd4tsIN3I91maoWJPhHpS4+nlZlWPvcBS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1d:c6:fb:57:fc:2b:e6:50:b2:75:e6:6a:1d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4d38041ae4e73157724aa9f3ee04305e5f12834
        Validity
            Not Before: Apr 13 10:01:48 2025 GMT
            Not After : Apr 14 10:01:48 2025 GMT
        Subject: CN=fee843a1e4995405cba007e17e786b3dea669480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:28:ae:8f:fc:5c:1d:90:1c:51:39:f0:58:31:
                    58:80:f0:46:c2:9f:40:3c:5d:7d:23:18:bb:15:4b:
                    c4:9f:57:bd:4d:e0:79:30:c5:e6:c8:86:c1:b7:e6:
                    03:d1:62:81:5b:55:d3:3e:04:8f:0d:13:0e:56:a9:
                    c9:66:4f:44:6c:83:b8:43:90:3a:33:05:61:32:c9:
                    f7:1c:73:ab:a6:40:be:7b:57:a1:f6:02:81:4e:18:
                    83:3e:b4:e7:65:7e:9b:cb:af:87:4a:d7:28:bf:02:
                    6b:7d:ad:24:f9:f2:b7:96:84:77:06:b4:12:0d:ed:
                    fd:80:d6:0c:24:ad:b8:79:91:2e:bc:01:d3:5a:ac:
                    a0:d4:0f:ae:5f:a8:e3:01:2f:4e:7d:4d:3e:bd:91:
                    b8:4c:5c:59:ab:54:be:da:82:ac:b2:0a:e3:f3:b9:
                    62:33:55:31:e4:5e:15:2a:58:93:4e:a5:46:0b:49:
                    20:1f:7a:a7:b2:3b:d0:dd:dd:ff:de:c2:74:82:6c:
                    d4:8d:b5:93:76:ba:a7:ae:ee:54:ef:65:9b:61:54:
                    e8:e8:ca:51:0b:e3:2d:aa:d1:32:e9:03:b2:de:44:
                    9f:4a:bd:ad:eb:5b:61:7b:b1:2f:95:19:16:24:38:
                    db:58:87:e6:38:84:0f:f9:e5:81:97:94:a1:3a:11:
                    43:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E8:43:A1:E4:99:54:05:CB:A0:07:E1:7E:78:6B:3D:EA:66:94:80
            X509v3 Authority Key Identifier:
                keyid:A4:D3:80:41:AE:4E:73:15:77:24:AA:9F:3E:E0:43:05:E5:F1:28:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4b48f3-8808-473d-a7e6-186b286854be/1/pNOAQa5OcxV3JKqfPuBDBeXxKDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f0:65:40:03:dc:92:1e:c8:43:c7:a0:bb:d0:41:fa:cc:8f:
         fc:98:a7:33:ba:57:8d:e0:0e:e7:a6:71:bf:b0:d9:f6:e7:02:
         40:05:44:27:57:26:4d:11:84:e8:a5:9a:25:5c:3e:03:3e:18:
         c4:b0:09:85:5a:3f:e8:37:d7:99:5e:8d:fb:3b:96:6b:50:ee:
         c2:d0:30:a6:01:ec:3f:41:6c:d3:d3:64:cc:a2:5a:18:de:40:
         21:93:31:ac:f1:60:46:d9:11:a0:78:c5:36:de:b3:ea:ba:53:
         03:03:a9:ad:6c:34:8b:3b:b4:8d:c3:0a:c5:db:4f:8e:88:3f:
         05:7a:68:f2:d6:53:77:8c:5e:14:d9:34:a3:28:c5:fe:1b:73:
         9b:5b:df:b8:1c:a7:d0:2d:b7:fc:f0:fa:c4:dc:6a:0b:3c:aa:
         e7:36:0f:1f:74:02:3a:56:c6:21:f6:cd:80:4c:6e:21:6d:37:
         f7:b5:9d:f6:87:1c:c7:7a:f8:8d:2c:a6:6e:ca:cb:52:d3:f2:
         cd:ca:c2:8a:1d:cd:51:e3:5e:2a:ae:51:43:f2:29:8b:67:8a:
         c1:d5:9b:a7:ff:40:98:2b:54:66:35:29:d7:f2:78:a9:9c:79:
         27:5f:6b:ce:52:77:23:c5:d0:61:80:91:38:f3:c1:ec:c0:f9:
         ab:54:91:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----