Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
File:                     NwLYaw5xBmjqZtp9zRsUDeweDD0.mft (raw, json)
Hash identifier:          rzq0vPDLYMo9YHhM115cbdi2qfBdQNPrB9fku/53T7k=
Subject key identifier:   43:DA:0A:FD:59:51:BE:F8:68:48:49:B7:14:22:0F:B3:15:33:00:C7
Authority key identifier: 37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D
Certificate issuer:       /CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
Certificate serial:       01962FAB7E289F532096E3540324D4CC3039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft
Manifest number:          11ED
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: 1-S9axjiECoFVFbxoTLP7k8hUrKw.roa (hash: +KpSmdQY0uaMjR1ylAxprXZXg3kf0ZtjvDy8OppLqso=)
                          2: NwLYaw5xBmjqZtp9zRsUDeweDD0.crl (hash: Pa0+xZ52zrmQfeYgqCBbIuqnw7DRISwTzYXPjHrgKtM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7e:28:9f:53:20:96:e3:54:03:24:d4:cc:30:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3702d86b0e710668ea66da7dcd1b140dec1e0c3d
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=43da0afd5951bef8684849b714220fb3153300c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:6e:de:8d:71:66:6f:91:c0:67:d8:a2:c5:6c:
                    28:ee:bd:83:34:70:68:00:51:2c:09:ce:36:fc:63:
                    6d:cb:17:76:89:2b:0d:20:28:96:cc:8a:02:a8:cd:
                    eb:9d:12:89:7c:19:9b:0f:11:28:15:3c:22:36:53:
                    05:b5:ed:91:21:e8:c6:0e:38:e7:69:0f:03:92:6a:
                    b9:3c:98:00:fc:27:66:45:13:ec:c4:79:83:e3:a5:
                    da:6d:d5:a0:cb:c6:1d:68:9d:d0:d2:6d:f8:6e:e0:
                    0a:2f:2e:70:04:71:57:ae:11:30:de:f2:54:f9:6b:
                    08:f6:1d:b2:ad:9f:8b:4b:7b:c6:e0:37:48:c4:57:
                    ad:92:d0:2c:b9:3d:62:e3:cf:11:6e:b1:49:57:79:
                    bf:a6:82:44:da:fe:ae:73:81:21:bc:a4:fa:29:ea:
                    0c:89:01:04:c6:55:78:68:95:2c:1b:e7:54:87:69:
                    a3:70:37:73:9b:e5:8f:17:86:e4:3e:d9:b7:44:cc:
                    b7:37:22:ff:2a:06:c7:68:70:bc:13:36:42:fe:a0:
                    a7:cb:b0:aa:19:6e:60:d4:84:ab:f2:9f:eb:dd:ae:
                    85:b8:62:6e:f5:5c:39:b3:b0:97:ea:c4:e9:20:3e:
                    7c:08:fd:98:ff:61:93:8f:32:c0:dc:a3:04:72:59:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DA:0A:FD:59:51:BE:F8:68:48:49:B7:14:22:0F:B3:15:33:00:C7
            X509v3 Authority Key Identifier:
                keyid:37:02:D8:6B:0E:71:06:68:EA:66:DA:7D:CD:1B:14:0D:EC:1E:0C:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NwLYaw5xBmjqZtp9zRsUDeweDD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e54dc8-a694-4fa9-bb6f-b902a97f144b/1/NwLYaw5xBmjqZtp9zRsUDeweDD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ef:b1:8c:6d:58:e4:f7:ed:48:f0:64:84:c5:90:e7:93:aa:
         05:c3:51:d4:9e:44:14:2e:70:1a:59:41:01:d3:14:59:21:e9:
         21:c2:14:b5:91:6f:c2:c3:8e:70:f6:33:f3:f6:98:fb:47:40:
         40:26:83:6c:95:24:f2:61:6d:93:68:e1:b4:c6:fa:3a:93:74:
         f5:60:f8:0e:e1:49:6f:82:b1:2f:0c:d9:85:a8:26:e3:dc:25:
         26:6e:87:6f:44:ff:1e:15:e8:29:c1:07:20:38:f7:07:ee:bf:
         fb:a5:33:64:cd:04:ee:d8:92:d9:07:f8:4f:af:13:e7:db:f6:
         7a:6d:e3:ec:8e:8a:dd:25:76:b2:61:97:7c:a1:d0:0c:7b:3d:
         5c:53:45:53:bc:c1:ee:4c:f7:4d:08:fd:1b:3c:3f:b1:21:a8:
         bf:ac:7c:cb:60:ee:a8:eb:8c:7a:f5:87:e7:6d:78:ad:b5:fe:
         e5:19:8c:1a:8f:bc:9e:10:bc:32:c2:88:1b:50:57:e5:88:dd:
         51:6a:02:e7:d6:2d:fe:eb:d1:44:3d:8f:4a:37:d1:c4:ef:2f:
         c2:d0:19:20:4a:47:58:12:26:72:61:70:53:ca:4f:65:e9:07:
         64:23:08:74:0a:3b:c6:64:16:fe:12:58:0e:61:c0:cf:af:a2:
         81:29:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----