Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft
File:                     NIVmBh42jK_xiBviusZzff08Hbo.mft (raw, json)
Hash identifier:          lKsnSnOfbE/60qthqhakbUoW7O56Z4ERaFMitEWHwOA=
Subject key identifier:   FC:D2:5D:36:74:E6:8B:11:11:7B:47:BD:CA:F0:D3:1F:10:6A:59:E8
Authority key identifier: 34:85:66:06:1E:36:8C:AF:F1:88:1B:E2:BA:C6:73:7D:FD:3C:1D:BA
Certificate issuer:       /CN=348566061e368caff1881be2bac6737dfd3c1dba
Certificate serial:       01962E2B1DC1CD7CEE5C6EC908CBB446FE45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: 0_2q2dp_nihFIcTaoAnETvnQKo4.roa (hash: bKtto0Xp3QOWNDaUxe4CkFxL1b1NtMArjGe69yHE/5w=)
                          2: NIVmBh42jK_xiBviusZzff08Hbo.crl (hash: 8N/rwknvqR7ie6C1Y5Bvh4GJ0MQb1Qt21VVv+AoIH3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1d:c1:cd:7c:ee:5c:6e:c9:08:cb:b4:46:fe:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=348566061e368caff1881be2bac6737dfd3c1dba
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=fcd25d3674e68b11117b47bdcaf0d31f106a59e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1d:28:8b:37:75:f0:cd:13:32:4e:15:97:93:
                    fd:12:aa:87:0a:92:0d:ef:7a:2e:fe:7a:7b:8a:5c:
                    50:4d:a7:6c:9a:ec:68:ea:c1:6d:77:8d:4c:e1:d4:
                    47:e4:96:b4:7e:c0:b0:4b:ef:ef:81:e5:85:b9:bf:
                    da:c0:68:1a:66:fa:98:2e:19:d4:cd:1f:1a:da:89:
                    77:fe:2d:5f:12:69:55:80:3b:dd:44:0a:24:db:eb:
                    23:94:9a:1e:44:f6:bf:5c:a4:c8:e9:ee:ed:f6:28:
                    36:ac:08:c6:aa:48:f5:f4:89:9c:57:1c:dc:4d:bf:
                    d6:bd:ec:a6:5a:45:ed:cf:87:a9:06:60:0b:88:5f:
                    3a:32:e5:9d:7c:44:06:c8:da:ee:8e:47:00:10:48:
                    43:a2:46:8a:b9:f6:9e:77:7e:4c:23:05:fc:26:cf:
                    06:d3:e4:c2:ff:bf:96:63:4e:51:89:e6:eb:03:c5:
                    c8:0b:65:30:77:48:53:85:63:a4:59:b5:df:2a:6a:
                    8a:af:4d:f1:53:d7:9e:d7:7e:68:f1:46:3d:a7:ad:
                    29:43:45:c4:79:a6:c1:ce:f9:a4:cb:15:10:d1:77:
                    7a:ec:c1:88:e3:71:1a:8f:a5:e7:f1:d4:f4:8a:ab:
                    ef:c1:1c:4f:50:91:7f:e7:81:fd:64:aa:44:69:d5:
                    74:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D2:5D:36:74:E6:8B:11:11:7B:47:BD:CA:F0:D3:1F:10:6A:59:E8
            X509v3 Authority Key Identifier:
                keyid:34:85:66:06:1E:36:8C:AF:F1:88:1B:E2:BA:C6:73:7D:FD:3C:1D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIVmBh42jK_xiBviusZzff08Hbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/affaa1-0e7b-401e-a7c5-06270ea82154/1/NIVmBh42jK_xiBviusZzff08Hbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6e:96:57:29:5d:9a:c8:4d:d0:ea:49:70:7b:c4:36:58:b7:
         47:d1:b4:f8:ca:42:ba:54:f5:e9:7e:fb:8d:23:5e:30:d1:4a:
         44:0e:04:b8:ed:f8:d8:b1:87:fb:a8:d4:13:39:f7:e3:14:30:
         19:db:c6:f6:7c:02:df:a2:4b:e9:18:fd:4f:c6:36:da:c8:e6:
         fa:22:01:30:86:05:b2:9e:97:d5:71:38:02:30:5f:91:13:47:
         2c:8a:a6:96:ae:f3:6c:3a:cc:3a:7e:af:de:7d:27:22:3a:58:
         3d:fe:b7:d7:61:4d:a0:48:a2:1d:76:6e:b0:f4:7e:21:09:d6:
         25:8f:4f:e2:fc:52:48:54:e7:f0:ee:dc:1c:9c:3d:8a:91:ed:
         b3:ce:c7:30:ed:d4:a9:be:e7:97:aa:cb:33:30:0b:7d:e9:fb:
         fc:12:8f:68:f0:9d:c3:14:44:0a:6f:6c:d4:4d:83:8e:39:01:
         d4:08:f1:de:5f:1b:f7:df:9e:75:19:c1:94:d9:66:71:3e:ba:
         26:92:c5:dd:8f:7c:8f:51:56:25:ee:fe:f0:b3:17:82:2b:e0:
         02:14:b8:3e:bd:9d:11:fd:df:30:4d:24:5e:60:66:9f:89:b1:
         81:26:28:c3:3e:cc:01:1d:4a:83:67:66:e0:b0:6d:76:f4:04:
         b4:aa:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----