Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
File:                     Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft (raw, json)
Hash identifier:          5vBGyMZLh1txmObJXOkxI4uydcWhzrUvtFbOde2MjRY=
Subject key identifier:   26:DB:DF:64:CB:73:50:D6:B7:32:BC:16:BF:36:01:FF:DE:DA:06:E5
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Certificate issuer:       /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial:       01962E993846C67AC22428CC90ED80B49CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
Manifest number:          03ED
Signing time:             Sun 13 Apr 2025 10:01:55 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:55 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:55 +0000
Files and hashes:         1: Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl (hash: RNznjyQ1eOHMHcozablWBRsZTUEbSM5/wpwYdnpeGyY=)
                          2: iO_CtKh3Y4ZrGmH0YqMWnYKlZNg.roa (hash: P3pxw91zYoBZsgP5Nx/MtBU2YXLYa7WtbiOEl2i4Gb0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:38:46:c6:7a:c2:24:28:cc:90:ed:80:b4:9c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
        Validity
            Not Before: Apr 13 10:01:55 2025 GMT
            Not After : Apr 14 10:01:55 2025 GMT
        Subject: CN=26dbdf64cb7350d6b732bc16bf3601ffdeda06e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:d4:5f:85:4a:1f:0a:58:9d:77:3a:29:aa:
                    45:97:a1:9f:c2:b3:15:64:bd:3e:56:9b:fb:58:e2:
                    2a:72:4f:1e:a3:17:be:08:5d:b5:54:1a:da:90:35:
                    5e:19:11:cf:8a:1e:a8:25:c8:3f:87:d6:19:a0:b5:
                    c0:cc:25:8c:fb:ee:ad:55:92:99:10:43:2c:31:db:
                    74:ed:c5:23:0e:e6:5e:40:00:85:43:dd:57:af:60:
                    01:58:20:df:78:c2:51:21:d2:c2:63:de:16:64:9f:
                    8b:42:a2:18:5b:92:78:5a:69:df:42:71:38:7e:42:
                    89:e6:b1:be:ad:6f:0b:66:a8:ce:c8:9c:83:ca:26:
                    e4:52:00:b9:14:4e:03:1c:3e:26:e7:2f:2e:fe:f9:
                    85:f5:5b:9a:09:33:98:6a:0f:57:46:aa:ed:60:ed:
                    b5:bc:5d:f3:2c:9d:a2:48:d2:1b:96:b3:6c:b5:87:
                    b8:7b:31:a8:9a:11:70:dc:2b:a6:d9:13:33:c2:01:
                    bb:93:89:a8:ca:9a:ff:49:23:b4:54:31:d0:b5:f0:
                    a0:2d:6b:c4:d1:8f:fa:2a:63:4e:0b:e5:39:a3:22:
                    4f:8a:f3:48:b4:b6:f2:2c:d3:6e:91:26:68:24:4a:
                    c4:63:72:47:a9:46:36:0e:69:69:98:cc:0b:12:ba:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:DB:DF:64:CB:73:50:D6:B7:32:BC:16:BF:36:01:FF:DE:DA:06:E5
            X509v3 Authority Key Identifier:
                keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:40:5e:03:af:af:4e:79:e5:f1:7a:17:a9:a6:b8:82:73:1e:
         0c:7f:bd:68:dc:66:b3:28:1c:02:76:05:6a:06:ee:d6:e9:b2:
         d1:0b:e2:f1:4d:37:64:d2:a2:a6:6f:ee:df:ca:a1:7c:49:1c:
         7d:78:7d:e1:b2:d8:08:fa:c0:0e:a7:89:97:b7:0b:a0:10:fe:
         c5:ac:28:81:92:1b:fa:03:2a:22:7b:88:8d:bd:47:3a:93:57:
         5a:17:d7:67:17:bf:e7:c6:95:7b:d4:84:99:41:c5:ff:2e:24:
         95:3b:af:0b:e9:7c:ed:fa:67:aa:3c:9b:50:ed:c9:4b:a9:64:
         8b:87:bd:8b:bf:3f:87:cc:a2:ae:47:f7:dc:b2:ad:e1:a2:03:
         34:6d:82:e3:d7:a7:b6:ca:d8:30:c8:6b:eb:a9:9a:4c:69:b0:
         be:c5:09:b7:6d:4f:b6:e1:00:45:64:1d:3e:d0:97:50:c0:43:
         21:90:53:02:2d:e9:79:08:af:e6:9c:be:c6:14:17:a4:6f:09:
         6c:4e:4e:c2:18:3c:44:f3:0f:9b:15:cd:0c:e5:f2:53:be:42:
         9e:bb:a1:40:fc:25:4b:f5:49:c6:92:8e:d6:64:d2:e9:cd:88:
         9e:fd:cd:98:1b:a8:2e:9b:28:c5:7e:d5:25:84:d8:5e:91:6f:
         45:95:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----