Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
File:                     NkUaLqQK8XFeYxMWlGiZaspxu4o.mft (raw, json)
Hash identifier:          GO/VCPxKgYLIj7EURmy5mUDcZr6JB2YZeMbYkkvak28=
Subject key identifier:   E0:1A:28:C2:07:A9:CF:D3:C0:79:97:F1:34:4D:EE:C4:A0:B5:93:99
Authority key identifier: 36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A
Certificate issuer:       /CN=36451a2ea40af1715e6313169468996aca71bb8a
Certificate serial:       01962F06BCE1B3B6BDC652FB9A66C665FDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft
Manifest number:          0A2F
Signing time:             Sun 13 Apr 2025 12:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:32 +0000
Files and hashes:         1: NkUaLqQK8XFeYxMWlGiZaspxu4o.crl (hash: wAVdkitFD7OM7dKmSF8+RvJfRAKfRKBVj7ryDrI+dl0=)
                          2: O0F84RWu36-icdnEP0gqMSZmFC0.roa (hash: VjIGx/MTrmEnOtVvtOZHwU506/ftw5kzWXyYKquguXQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:bc:e1:b3:b6:bd:c6:52:fb:9a:66:c6:65:fd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36451a2ea40af1715e6313169468996aca71bb8a
        Validity
            Not Before: Apr 13 12:01:32 2025 GMT
            Not After : Apr 14 12:01:32 2025 GMT
        Subject: CN=e01a28c207a9cfd3c07997f1344deec4a0b59399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:04:b5:1f:14:cd:df:ed:0f:68:b6:c9:1a:3c:
                    6d:2f:9b:b9:f6:b9:23:5d:b3:ee:ca:a8:69:7f:cd:
                    68:7f:09:ad:df:14:70:3e:8e:1b:f9:ca:e3:61:61:
                    6f:ae:e1:89:6f:b3:ee:5b:fd:15:86:a5:09:f8:14:
                    34:5c:fb:fc:b6:5c:44:e8:7c:7d:6e:c9:91:fd:cd:
                    8e:1d:52:e0:25:86:2a:a5:b4:25:a9:5e:75:57:92:
                    a5:6d:85:76:53:99:5b:85:74:12:66:af:77:e6:df:
                    28:fd:a1:0d:7d:70:81:4c:18:84:07:79:b6:25:55:
                    c7:41:36:45:26:15:66:de:2a:96:10:9e:2e:d3:7f:
                    e9:6d:11:71:ef:21:19:b6:53:2e:20:52:4a:04:ce:
                    03:77:d4:95:9b:8e:1e:da:f2:8e:d9:23:29:48:87:
                    1b:5f:03:8b:be:8d:50:01:12:75:72:5b:f1:6a:57:
                    73:ef:8c:35:d5:ae:0b:42:f7:ad:b8:66:a3:53:2a:
                    e5:43:e9:7a:90:77:1a:93:ce:b1:fd:69:d9:3a:18:
                    0b:13:86:a7:67:65:12:dc:d0:d5:03:9d:31:93:22:
                    2d:0c:d8:ce:f6:52:d1:cd:b0:23:3d:a8:a4:d4:6f:
                    7e:28:38:2d:56:c2:14:29:77:36:fd:86:bf:d0:8b:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1A:28:C2:07:A9:CF:D3:C0:79:97:F1:34:4D:EE:C4:A0:B5:93:99
            X509v3 Authority Key Identifier:
                keyid:36:45:1A:2E:A4:0A:F1:71:5E:63:13:16:94:68:99:6A:CA:71:BB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkUaLqQK8XFeYxMWlGiZaspxu4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8b3822-6eaa-43a2-9a32-be308c12f7bc/1/NkUaLqQK8XFeYxMWlGiZaspxu4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e8:28:c5:bf:2c:6a:80:fb:3c:f8:8d:d2:74:8b:0a:00:7e:
         f0:23:44:d6:88:27:0a:9d:b8:52:87:bc:56:9a:2d:b8:d5:e6:
         71:e0:86:31:fe:47:80:43:e2:42:1d:8a:3e:a5:3e:6c:3b:4b:
         9e:13:12:c3:bd:ab:f5:b2:33:d2:3c:95:35:c3:60:db:df:1e:
         fe:0a:cf:ab:97:66:20:0f:27:37:09:69:b9:41:be:9e:50:44:
         fc:be:ab:21:78:ef:7e:bf:77:d2:0e:f2:c4:a5:42:da:70:c2:
         97:36:02:5e:94:f0:32:a7:80:63:1a:13:ba:76:e2:f7:11:23:
         20:a5:63:66:07:26:02:19:44:4e:05:9f:af:03:9a:6c:60:39:
         36:f0:81:5b:07:1b:01:9f:bb:25:71:d6:1c:bb:50:10:76:75:
         9c:d7:0b:4f:da:76:18:d6:b2:88:65:c0:6c:57:e8:86:3e:79:
         24:20:2a:bd:36:42:79:92:66:21:86:c4:ba:44:c2:89:0e:2d:
         16:4f:29:f0:6b:0e:3e:f7:6d:fe:ed:8a:fb:a8:21:6f:0e:7e:
         67:5f:3f:73:7f:df:68:46:d2:7f:97:b4:cf:77:64:eb:c1:d1:
         fe:81:f6:73:1d:ab:60:f3:55:c9:a5:76:86:28:dd:ca:95:76:
         11:1c:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----