Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
File:                     NDOuHGBnLHWRqPl9aPefsqXujac.mft (raw, json)
Hash identifier:          KptBu4nNhGeC1h6FYKyeiQM6cyR8qXPIIfNmvvJZQCg=
Subject key identifier:   62:66:A6:19:13:37:06:90:42:7D:70:24:87:FF:83:31:FB:A0:F6:94
Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7
Certificate issuer:       /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
Certificate serial:       01962F746D5D54D34DAB8B1B083C3563D2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 50YGB-iroCpOpfGPSSu1Hpntzf4.roa (hash: 5lvnT6co7VzA/8N8iu7cBVjZRHM9ciTul33FqxkRdLg=)
                          2: 5ENNfLa1JM3BJQLGr_c3Bw3puho.roa (hash: t0TU1ota0M9sju0lV/gFJqx+iYCBjzuB5bDzrUerFwo=)
                          3: 6JSS-KrBs6Yqw6gX0_excaV8mik.roa (hash: DX4Jt/llE5ZgoLSzlo+jbWwMMSWiYxeZw76o/uT/uPY=)
                          4: NDOuHGBnLHWRqPl9aPefsqXujac.crl (hash: KHbY9Yo/KGa607PNOI8+jQTfuSEoOvkaFVtL78jNluY=)
                          5: lueOGsmRqtrrI8WrcoKHoZ1cytA.roa (hash: qxTTmNr1wg9Q8H+R7DTVE3uMIjhi2C5reWu9yD0lXnA=)
                          6: rDXQIV_fU3zuPiVY7wVNU5XfnEY.roa (hash: 28GznyJvIwudik/8fUuc6bNx01Y6R3bFn9/NBv6jU90=)
                          7: yIXDpYWYaCwEFGgii0w8mAe6aKE.roa (hash: kpPsmD1/gHbiuZR5vWf8YWncSE2HiZ9uJEAXpqQD68g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6d:5d:54:d3:4d:ab:8b:1b:08:3c:35:63:d2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=6266a61913370690427d702487ff8331fba0f694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4d:d4:27:7e:77:06:82:a8:70:6e:7b:6c:e2:
                    56:b7:81:c9:cd:ba:ee:41:39:88:fa:c8:95:19:65:
                    aa:60:1a:00:df:fe:62:37:81:5f:b1:34:9b:6e:7f:
                    23:3d:af:97:75:1d:73:c4:47:ca:d0:52:81:ab:fb:
                    09:db:79:a0:46:1c:55:41:1b:68:8b:94:ba:db:3f:
                    92:35:07:6f:85:56:08:3e:f2:00:53:9e:54:0a:d4:
                    91:5f:ee:57:91:d7:19:d1:60:58:4a:f0:3b:90:fd:
                    d5:e7:5e:68:a1:03:bf:8f:5b:44:c4:df:34:82:82:
                    b3:a7:2e:e7:28:7c:a1:a3:e5:67:1c:60:47:e1:2d:
                    b8:d6:bd:43:ef:7c:6e:11:1f:2b:4b:69:c1:e4:f2:
                    32:6f:d9:dd:d9:ed:e2:7e:21:d6:6f:1d:56:4a:db:
                    1c:96:c6:39:d2:56:6e:c5:03:e9:5b:30:b8:f1:74:
                    40:61:48:1e:2d:f6:31:e9:c0:3d:ef:b9:a6:47:74:
                    ae:c0:5e:b9:66:24:36:2e:5a:20:50:bc:40:00:87:
                    1d:84:db:48:c2:21:93:f6:6a:6d:e4:de:0a:e8:b9:
                    b6:27:ba:8c:46:cc:48:8f:1c:ff:71:a7:a2:9d:31:
                    82:7c:25:ed:85:e0:e0:70:4f:b8:0a:66:91:0b:b4:
                    c6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:66:A6:19:13:37:06:90:42:7D:70:24:87:FF:83:31:FB:A0:F6:94
            X509v3 Authority Key Identifier:
                keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b0:f8:56:6a:22:7a:f4:57:86:8c:1e:12:9f:db:a0:67:19:
         b0:ca:b5:74:d2:34:3f:cf:54:3f:e0:9a:7a:be:5f:0d:11:71:
         a5:c3:b7:2d:87:ea:32:42:fa:c6:fe:ae:32:e8:42:d1:d8:b3:
         f0:38:1d:e3:0c:27:6e:ac:64:6e:82:10:c0:c4:de:ef:a3:f2:
         21:15:e8:64:72:ec:ed:db:4e:90:13:d0:41:09:94:01:e6:b6:
         2a:b0:c6:92:12:c4:a7:45:03:37:66:09:90:50:f7:bb:f3:e6:
         fc:3f:9b:50:fb:01:80:51:b7:fd:a4:b3:e1:20:e7:a9:36:b8:
         3c:84:3a:35:25:7b:e8:d2:cd:82:35:43:ee:60:4f:db:82:7c:
         ff:a6:6d:8b:e3:c8:d4:c2:57:ae:99:cb:63:9a:0f:ac:5a:11:
         e0:8f:50:94:d8:e0:93:20:90:9f:97:42:c6:67:3a:7d:50:1e:
         d7:c9:d6:30:b3:47:49:fe:48:07:26:aa:d4:34:86:d1:f2:7f:
         3a:03:a7:4d:60:5b:14:36:35:93:8a:62:53:4d:2e:de:cf:ef:
         fb:07:44:5f:07:6a:35:b3:41:be:6a:c4:a3:2b:01:6d:5d:c5:
         d5:23:43:89:5f:bf:f8:f8:64:d3:5b:25:62:e9:c6:3a:d7:fb:
         56:90:f0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----