Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
File:                     NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft (raw, json)
Hash identifier:          9f1osx5LCldkXKlp7xymCfDr36antgl90du+m1xk288=
Subject key identifier:   8E:15:29:32:FF:CB:BF:22:D3:4C:6B:AE:D7:6C:6C:30:72:7A:AB:D6
Authority key identifier: 34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE
Certificate issuer:       /CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
Certificate serial:       01962E99237A6A68600B0D300F53F34240C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft
Manifest number:          01E3
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: 2jDUXaVY2J9zU8vKhzB_PzOO_6U.roa (hash: uI6QS/R6IbgUMuCYc5sOFyWJ4AyLIYf/PSbRWwbYsP0=)
                          2: NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl (hash: 2/aocaH+sYy2Zzj6bFHnKKvm4SEYkEQu+0NJdtsN+/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:23:7a:6a:68:60:0b:0d:30:0f:53:f3:42:40:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34603406cf0e1d7dc4a8784a188a6238e3c13abe
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=8e152932ffcbbf22d34c6baed76c6c30727aabd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:e4:08:21:c7:23:e1:a6:20:a5:64:8e:6d:
                    34:07:7c:55:d8:91:1f:a6:05:e9:f1:0a:c8:37:14:
                    77:c6:3d:d0:4b:c2:b3:32:ee:6a:0f:8c:a4:e3:e9:
                    ba:78:32:36:86:15:41:3f:d8:0c:d9:3f:70:fb:55:
                    4f:89:5b:a3:bc:93:4e:d3:de:57:fd:48:db:89:ff:
                    e1:00:42:40:e2:8b:5f:95:6e:d7:5e:eb:a1:c7:26:
                    51:ee:6e:60:27:cf:3b:d4:5b:2a:a5:08:f4:06:df:
                    40:7c:58:d4:65:1a:72:b5:7f:f2:d4:fa:ea:8b:ae:
                    db:c4:25:21:6f:9d:01:76:f0:8e:4f:78:5b:8d:0d:
                    59:f2:9d:d9:a3:e7:70:50:62:fe:34:a2:87:85:06:
                    6e:71:bf:c1:9f:54:f7:ed:d0:ba:80:61:77:c3:43:
                    cc:30:50:f1:ef:1c:1f:b5:98:63:c4:43:f3:8c:ba:
                    48:75:99:cf:f5:9b:83:10:3b:b1:6b:e3:57:84:f7:
                    f0:c1:1d:a5:4d:f3:a1:2f:cf:28:49:18:21:fd:47:
                    b0:ae:ba:4d:17:43:d1:ad:97:47:1b:3a:99:cd:8d:
                    0a:50:fe:fd:c2:3e:85:32:e7:64:8b:58:9f:72:7d:
                    ae:36:86:3c:2b:d1:24:fc:b9:0f:7f:0a:38:0a:12:
                    68:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:15:29:32:FF:CB:BF:22:D3:4C:6B:AE:D7:6C:6C:30:72:7A:AB:D6
            X509v3 Authority Key Identifier:
                keyid:34:60:34:06:CF:0E:1D:7D:C4:A8:78:4A:18:8A:62:38:E3:C1:3A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45a539-4a1e-494b-be94-1ee56c5cfbf5/1/NGA0Bs8OHX3EqHhKGIpiOOPBOr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:5f:91:f4:e8:36:b5:a5:ff:95:9e:ed:7e:d8:87:4c:49:2c:
         2c:9e:4c:dc:f9:f7:fd:68:79:5a:16:5f:56:43:71:50:ba:ac:
         eb:7d:45:1c:4b:6f:cf:81:e3:19:29:64:70:fe:1b:79:0a:1c:
         f6:90:1e:56:e6:a9:16:15:2b:38:05:a5:11:db:8a:91:29:cd:
         88:da:51:f3:6e:26:0c:8d:00:23:58:26:c8:db:64:5e:d7:c6:
         fc:05:0c:c7:bf:be:e1:1a:d0:16:87:4a:2c:71:c3:51:c1:ba:
         17:2c:2d:51:1f:80:7d:b7:cb:ba:8d:59:e9:c7:6d:c8:35:06:
         df:06:81:a4:c1:5e:92:78:24:ae:46:8a:f8:f4:7a:e2:65:28:
         e5:63:87:b8:31:08:23:e6:2b:a4:e7:c2:13:f7:c0:fc:ad:f3:
         de:cb:cf:58:fb:62:8c:0b:19:63:b4:b6:69:2b:42:20:0a:70:
         b2:95:3b:10:05:88:09:03:95:2d:0d:7b:df:c2:3a:c2:8e:0a:
         6b:b8:19:c5:f3:33:d4:3a:60:8c:fb:32:34:db:13:df:a4:18:
         95:4c:07:06:e3:d5:d7:2c:7d:1e:36:b0:0c:82:10:b2:1d:26:
         c0:9c:9a:9f:ac:9a:9c:ea:b9:60:bd:4f:a7:1b:9c:3d:2a:6e:
         b2:62:7b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----