Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
File:                     NCUppgkAWDTcELW4AP5TEMWMxH4.mft (raw, json)
Hash identifier:          bVwW/Wx+po6Q77BciONbKHxIOY6npAK7RT/tgS6QRqQ=
Subject key identifier:   10:52:C3:20:76:59:81:7D:2B:93:07:1B:2A:97:7A:8B:9A:2C:E9:A1
Authority key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Certificate issuer:       /CN=342529a609005834dc10b5b800fe5310c58cc47e
Certificate serial:       01962F74A1B1A49293E316F5FFCD8323A50A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
Manifest number:          D2
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: NCUppgkAWDTcELW4AP5TEMWMxH4.crl (hash: q+BuZMP1Nxacwtm1l6K/c02ggl1v6SYWFVbDikXQ03M=)
                          2: Z_eZrq0pMGEuCobzf2HGLgxhvHM.roa (hash: L/Qhu9gR3mWIDrVB/JXQbyHDSmMMhTwgUj0OQ/bpGK8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a1:b1:a4:92:93:e3:16:f5:ff:cd:83:23:a5:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342529a609005834dc10b5b800fe5310c58cc47e
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=1052c3207659817d2b93071b2a977a8b9a2ce9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0a:b5:73:7b:e8:69:21:48:e3:64:35:ba:48:
                    59:0d:5a:68:ed:77:aa:3d:95:c9:2b:a1:24:4f:e7:
                    1c:82:20:84:59:0b:83:63:5a:14:82:de:62:1b:a2:
                    fc:70:2a:a5:f4:be:7f:00:59:bd:65:ed:b3:79:dd:
                    49:56:59:90:ac:93:88:fc:2a:68:93:e1:2c:55:95:
                    ad:52:48:69:2e:b5:b9:60:0b:45:25:5d:c7:5b:52:
                    52:af:00:12:b8:7e:c3:7b:cd:ad:71:e1:d2:37:0f:
                    64:86:01:d8:fb:b2:d5:c9:1d:83:51:1c:84:74:1e:
                    36:d5:3b:c7:cb:30:3f:c5:94:0f:39:98:c0:e8:34:
                    fb:fa:21:e4:64:9c:68:a3:0b:50:e6:f6:c0:64:5d:
                    00:35:fd:3c:91:b0:4a:e4:66:3d:07:db:c5:49:07:
                    92:70:fb:c8:46:b7:92:b7:f0:ab:4f:f1:0a:45:68:
                    c3:81:fc:a0:f9:13:36:3e:41:54:bb:89:08:5a:02:
                    aa:87:31:79:06:55:08:9e:5e:35:a1:0f:1b:37:94:
                    70:2b:ea:46:0d:85:72:01:ab:71:2a:a5:f6:b0:7b:
                    53:50:70:83:11:03:b4:bb:f8:32:c1:fb:9f:f7:b4:
                    bc:5f:c3:33:05:e7:19:69:80:7a:7b:aa:e3:fe:26:
                    65:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:C3:20:76:59:81:7D:2B:93:07:1B:2A:97:7A:8B:9A:2C:E9:A1
            X509v3 Authority Key Identifier:
                keyid:34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:67:5e:50:61:be:cb:43:28:27:12:81:a7:d5:f6:89:d7:21:
         12:96:af:20:b1:e1:91:b2:8d:0d:de:b9:00:5c:a3:06:5d:14:
         18:0d:9a:da:9d:fb:6d:55:6c:da:a8:89:c7:c1:d1:d1:74:36:
         bc:f3:13:e2:1c:8c:b5:a4:b8:ec:39:bf:8f:5c:24:93:45:26:
         ab:3f:57:8b:2e:90:46:7d:cd:05:87:20:77:82:2b:3b:0e:12:
         36:f1:6e:d3:17:e9:74:3d:ea:3b:58:5d:25:c0:4b:c3:58:b7:
         c9:02:70:1f:eb:0c:c9:40:03:48:f1:9a:b0:f9:8c:e3:76:1a:
         a8:3f:62:e6:6c:9b:b9:43:9c:15:63:3a:b7:bf:1e:2a:71:09:
         c1:c8:f4:bb:a8:f8:8c:29:20:91:32:22:1d:f0:f7:a8:b8:fb:
         3e:e4:95:3f:44:27:a9:0c:74:6f:df:d6:74:e6:92:73:54:a3:
         35:1d:78:70:6b:83:67:8e:7e:28:5e:c7:4a:d5:c2:ef:32:f4:
         1a:31:66:56:10:1a:bd:6d:63:4c:b3:3b:e8:d6:08:dc:6a:6f:
         81:72:04:17:f0:3b:ec:a5:b7:40:6f:cf:b7:4f:e2:2f:af:11:
         53:15:b1:f2:18:09:95:b3:36:10:ea:48:5c:c1:5c:48:bb:d0:
         94:dd:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----