Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
File:                     NHkVOIV45h2IaEmiHXC6B1FJwaE.mft (raw, json)
Hash identifier:          dZFO8kH9iNvnHnvDmF+9ENxkqoXMvaEjh/25IhGNoGg=
Subject key identifier:   3F:54:B8:7E:1E:E9:1C:EF:D1:40:99:D2:75:CC:DC:50:7B:02:43:DC
Authority key identifier: 34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1
Certificate issuer:       /CN=347915388578e61d886849a21d70ba075149c1a1
Certificate serial:       01962E9972EDBD0D0FC2A67D28AD85D75D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft
Manifest number:          0A76
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: NHkVOIV45h2IaEmiHXC6B1FJwaE.crl (hash: Cqi2Xf7E6JiechFi0K+KX7hTK5ZaJskYn/XsFX5fvWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:72:ed:bd:0d:0f:c2:a6:7d:28:ad:85:d7:5d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347915388578e61d886849a21d70ba075149c1a1
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=3f54b87e1ee91cefd14099d275ccdc507b0243dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:42:98:30:6b:0b:34:1d:e1:c5:fc:d2:bf:
                    1a:9b:98:e9:8b:61:28:1b:83:cf:77:79:1b:30:c2:
                    34:09:bb:26:61:d0:94:74:79:d9:02:fa:03:4e:54:
                    32:86:bb:22:dc:2c:a0:32:46:71:d0:12:01:67:77:
                    37:fe:e8:e0:cc:97:31:92:d5:19:22:d5:50:56:39:
                    6e:6c:b0:e6:69:a7:68:82:94:41:be:34:4c:6e:7e:
                    61:82:05:c4:49:f1:41:98:a4:5e:cf:a2:e7:dc:60:
                    d2:6c:fc:45:87:8e:69:71:8a:f3:79:86:4a:cf:c0:
                    3d:70:72:bf:0d:0a:bb:76:84:b1:72:1f:6c:e6:24:
                    94:74:6e:02:02:b4:63:33:12:3c:f3:d9:2b:5b:e0:
                    01:f9:9f:51:a8:bd:39:d4:c8:1b:d2:2d:a8:b7:98:
                    0f:89:1b:65:aa:97:1c:2e:ba:b6:be:d5:4e:3c:e1:
                    d9:47:40:d5:f7:4c:fc:dd:b2:56:a4:36:4f:99:69:
                    03:25:f9:dc:f8:93:b2:54:dd:73:fb:c8:96:14:87:
                    19:f4:59:fa:34:d8:7b:02:f2:ca:8a:0d:e5:4a:dd:
                    0d:6b:cc:2d:1a:46:13:56:2a:9b:87:78:4c:dc:e6:
                    f4:72:2e:53:9d:82:89:bb:6a:01:3e:3d:5b:9c:10:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:B8:7E:1E:E9:1C:EF:D1:40:99:D2:75:CC:DC:50:7B:02:43:DC
            X509v3 Authority Key Identifier:
                keyid:34:79:15:38:85:78:E6:1D:88:68:49:A2:1D:70:BA:07:51:49:C1:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHkVOIV45h2IaEmiHXC6B1FJwaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4ef69e-9978-436d-90c9-82d97c069566/1/NHkVOIV45h2IaEmiHXC6B1FJwaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:32:85:e1:98:a9:22:3f:3b:20:92:28:69:56:6a:6b:9c:5c:
         90:f1:52:f7:a6:a4:2e:c0:67:8a:04:04:3d:9b:30:cf:3a:ac:
         62:ad:9b:42:77:4b:2c:69:21:5a:39:6c:4f:c6:c3:67:4f:16:
         4f:58:18:ac:51:c9:83:c2:97:ac:93:72:bd:19:61:35:06:51:
         ec:3f:03:b1:93:d2:df:5e:13:04:15:53:ee:17:e3:f7:60:18:
         1b:3d:9d:c5:7f:d8:e9:9b:8b:20:e5:7f:17:7d:e3:83:0c:93:
         29:a8:eb:42:b3:45:5b:ef:d5:99:ac:00:8e:d9:ef:5b:6b:64:
         61:87:8d:82:2f:34:2c:31:9d:d1:9c:1b:ae:fb:e7:ad:e7:9d:
         56:8d:eb:4e:09:45:e4:21:1e:3c:b0:4b:27:43:70:d0:c9:cd:
         7a:e2:d1:78:bf:05:21:e9:3f:75:c0:86:04:36:d2:63:cc:3b:
         2d:29:d5:8b:bf:13:fb:f1:85:ab:61:eb:dc:15:ad:4b:eb:89:
         61:43:2f:73:ad:b6:a8:1e:a8:dd:f5:ae:8c:d8:6d:b9:09:30:
         12:c7:22:be:2b:16:0b:d6:58:01:c0:53:34:e3:37:93:d5:bb:
         aa:20:8d:44:79:fd:20:18:e1:95:a0:36:9b:ae:91:1c:de:3b:
         78:e9:83:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----