Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
File:                     NJxIN9k5hA1fbHSqwINm70v-SHQ.mft (raw, json)
Hash identifier:          YMjd3ZLrK/Wt4X7axT7DlDTQJF2yUwj7W9rmEvowY5E=
Subject key identifier:   82:1F:EA:F1:6E:83:7A:2B:98:A2:57:41:BB:9D:3D:0D:80:46:81:03
Authority key identifier: 34:9C:48:37:D9:39:84:0D:5F:6C:74:AA:C0:83:66:EF:4B:FE:48:74
Certificate issuer:       /CN=349c4837d939840d5f6c74aac08366ef4bfe4874
Certificate serial:       01962E98B71873EF653983A4FD4E7820CD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft
Manifest number:          D6
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: NJxIN9k5hA1fbHSqwINm70v-SHQ.crl (hash: yFXZcDG7kqNWY6ICCQViV0gfC9mlAxv/W74kHdkNSqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b7:18:73:ef:65:39:83:a4:fd:4e:78:20:cd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349c4837d939840d5f6c74aac08366ef4bfe4874
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=821feaf16e837a2b98a25741bb9d3d0d80468103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:19:b1:63:c3:2d:23:ee:b1:1c:b2:81:c2:
                    8e:c0:7d:eb:d5:4f:f3:a7:2e:4f:6a:31:f5:9c:7d:
                    bd:39:c1:29:2f:54:02:95:d4:67:6c:b1:d7:93:ca:
                    37:db:15:a8:3f:b1:eb:29:2b:28:dc:99:52:18:3c:
                    0b:93:22:27:95:9e:78:37:7d:d7:68:5e:4e:77:20:
                    03:b1:bd:6c:56:dd:8e:c0:d1:80:a5:fe:23:27:df:
                    7d:d5:9f:a8:3a:a8:34:57:14:60:bd:a1:4b:3f:30:
                    2e:42:84:de:cf:b0:51:4f:70:23:10:d4:be:ef:0f:
                    47:4f:ff:a3:6e:e2:aa:c8:fe:f3:af:78:33:0c:e0:
                    b9:5a:fa:f6:7d:56:28:86:d4:b3:f3:1c:b9:c3:7f:
                    00:40:59:89:38:de:30:e4:3b:3c:95:6d:be:17:65:
                    96:bd:2b:de:aa:77:40:14:57:a7:81:10:74:e1:26:
                    15:5b:ce:76:f6:55:ce:52:d8:f0:64:6e:3f:d6:03:
                    5d:2f:77:aa:14:70:fd:46:33:62:85:52:93:02:86:
                    6a:e3:8d:63:fd:ac:77:28:76:7c:b8:19:f9:a4:53:
                    46:ac:50:18:db:53:d0:73:cd:e2:51:09:fd:21:a5:
                    b0:51:a0:d5:5c:93:a9:9c:3a:69:e4:91:05:f0:b4:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1F:EA:F1:6E:83:7A:2B:98:A2:57:41:BB:9D:3D:0D:80:46:81:03
            X509v3 Authority Key Identifier:
                keyid:34:9C:48:37:D9:39:84:0D:5F:6C:74:AA:C0:83:66:EF:4B:FE:48:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJxIN9k5hA1fbHSqwINm70v-SHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afd71b-0268-4409-a383-584a76399414/1/NJxIN9k5hA1fbHSqwINm70v-SHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:85:68:18:c7:c8:f5:fc:57:15:ac:91:57:6e:47:1c:e1:93:
         6c:45:7d:42:c3:92:6c:c5:5c:b8:ca:2b:7a:e0:14:53:8f:51:
         61:c3:af:c7:23:a4:7f:42:11:19:4c:dc:f2:e8:e6:1b:e5:e9:
         9d:2c:0a:41:20:d4:18:09:a8:de:54:02:32:32:47:41:52:2a:
         c0:c3:9e:80:a7:37:e8:90:40:77:19:13:01:03:67:fa:a4:d9:
         2f:dc:a5:76:46:25:c9:6e:6c:6d:26:bc:64:af:ec:ad:53:08:
         96:a5:5c:b0:05:17:01:f4:b0:ef:cd:cd:de:ff:c0:9b:fb:f5:
         f6:b5:2d:14:37:b4:cd:e6:14:17:d5:7f:d6:48:65:80:db:3f:
         dd:f1:da:a9:ee:c6:6d:08:0a:1b:57:ac:80:56:2f:98:51:36:
         87:7a:9e:32:1f:47:7d:65:5a:35:52:61:05:fa:77:69:40:c8:
         9f:20:f7:06:3e:20:ed:f9:64:34:2b:b5:ba:8d:b8:ba:c8:31:
         0f:c5:8f:7a:6b:9a:8b:06:66:90:a7:ee:0f:12:4e:2e:62:7f:
         ab:24:bb:2e:9e:5a:cd:dc:ab:ae:66:ea:31:22:4d:25:e9:24:
         04:d2:39:2d:97:d1:36:49:70:33:7b:ec:69:56:6e:b2:8d:a9:
         c3:6a:e0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----