Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
File:                     NLypT2th4QEA3Dpxhv-j-bAMad0.mft (raw, json)
Hash identifier:          bYo+vRwOaKaG3W5AcAc914yAqW+yw0oaPEAMFWY9Fcw=
Subject key identifier:   8B:00:02:AA:29:36:98:8F:CB:75:2A:E4:2D:BB:65:AE:5A:DC:39:C3
Authority key identifier: 34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD
Certificate issuer:       /CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
Certificate serial:       01962F06AD7ED63D3899046A661A8619B894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft
Manifest number:          117C
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: HIoC707cWv-kl8mp8yIuvONoh0w.roa (hash: EWzRp4vUO24ulN2ZRCrdnUVFpJrZ9XxymUQDpbogTtA=)
                          2: J2yd4O1iL2KCY7LAQ3uRto73WwQ.roa (hash: FnyzxFKFKQYZ99+AO0ucXUQHZHZrzRIvFySr51HyBug=)
                          3: NLypT2th4QEA3Dpxhv-j-bAMad0.crl (hash: HAX8+dVNWA6/BdKT6VTrM36S+juILznpzX883Yg9UuU=)
                          4: m01g-CBC5mmua20tUAtJoqGt3ww.roa (hash: AY/opL59pPgH00+bWPEKHAE0TYN5GbYk0s+CgO2aV3o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ad:7e:d6:3d:38:99:04:6a:66:1a:86:19:b8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34bca94f6b61e10100dc3a7186ffa3f9b00c69dd
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=8b0002aa2936988fcb752ae42dbb65ae5adc39c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:e9:a0:2c:8e:12:7c:9b:30:d1:ef:37:7d:
                    30:ef:45:f0:7e:a2:7d:9b:6a:01:36:2a:f0:b9:5d:
                    6d:92:d8:40:c0:a9:c6:1e:52:92:d2:c3:8f:c1:62:
                    ab:cb:c9:80:99:e4:3a:81:3b:26:35:9d:26:d8:e0:
                    ff:f1:db:f9:d9:29:e2:fb:89:76:c1:27:9a:8d:16:
                    b3:8d:d2:97:53:b8:db:ef:d6:85:40:0d:a2:f7:2a:
                    e0:15:b9:51:de:b0:65:56:a3:94:0f:5c:4e:b8:33:
                    9d:4e:f5:17:60:d0:07:d1:77:94:a3:0c:ed:05:3a:
                    60:f1:e7:8e:a1:fc:2d:3b:8e:ae:4d:ee:9f:14:b7:
                    f9:37:57:8b:7f:0a:6a:4f:02:63:a6:db:8b:ba:79:
                    73:af:98:93:d6:1a:b6:e7:61:77:9e:76:c9:8e:82:
                    91:41:52:ef:8d:17:05:91:4e:3b:b6:5a:c0:08:6f:
                    77:6b:69:42:02:24:4a:15:0e:42:df:fa:36:9a:3a:
                    bd:5b:3b:27:94:b9:72:ee:d8:d8:7b:2a:c9:72:eb:
                    72:14:7e:d2:10:64:6b:3e:8c:fb:42:c3:78:a0:76:
                    c4:d6:3b:74:4d:3d:3d:17:15:98:d6:01:20:65:88:
                    b2:1c:dd:3a:1b:4f:e3:e4:ba:c0:95:6c:c1:e1:e8:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:00:02:AA:29:36:98:8F:CB:75:2A:E4:2D:BB:65:AE:5A:DC:39:C3
            X509v3 Authority Key Identifier:
                keyid:34:BC:A9:4F:6B:61:E1:01:00:DC:3A:71:86:FF:A3:F9:B0:0C:69:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLypT2th4QEA3Dpxhv-j-bAMad0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4ea59-1810-4210-98f3-709f03624e7e/1/NLypT2th4QEA3Dpxhv-j-bAMad0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:86:7a:1f:19:14:20:00:b1:28:b2:0c:62:d4:5a:f9:82:f7:
         67:6d:f3:b3:2c:69:d6:cf:a8:9f:0a:fa:0f:ff:f3:e1:8c:f6:
         98:d4:d0:6d:e8:95:1b:cf:0d:6b:8b:fb:7d:ef:76:13:7d:f3:
         af:28:39:ea:80:02:08:94:59:68:69:c3:c6:f9:d0:60:ae:ca:
         6c:e7:2a:47:3b:fc:29:07:64:44:6d:b8:28:d9:8a:81:a6:5a:
         3e:16:8a:6d:bc:f2:2f:8d:96:2e:8d:80:a1:4f:0b:20:5b:a2:
         63:cd:3c:73:fb:49:f3:83:f2:e3:32:6e:13:8c:f0:f6:e8:ab:
         c4:5d:0e:3e:6f:1b:9f:27:d1:d2:30:88:26:4c:b5:7d:a2:7a:
         cc:61:10:f3:d7:86:56:97:9e:a6:1a:46:cc:7b:6a:bb:54:75:
         6f:d7:f0:ed:e3:5a:b4:9a:57:96:4e:cb:76:e5:1b:ec:73:f2:
         74:6f:11:16:84:d5:8f:0c:4a:28:f5:c4:1a:71:46:07:81:cc:
         36:59:56:4d:de:cf:ac:ee:cd:d8:80:e1:f5:c4:b2:e6:9c:c8:
         77:b2:55:05:44:22:19:14:85:7c:36:58:64:bb:79:2b:4f:02:
         ae:8a:f7:dd:1f:78:d3:4c:a2:b9:9d:4f:b7:ac:5e:c5:57:14:
         1b:bb:62:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----