Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
File:                     NMSVb4VnESWILFdM0uLSA6q97QU.mft (raw, json)
Hash identifier:          wMLYyzXfg5wufKzPELcKMWsEqyMzTXY4elp9fljEHFU=
Subject key identifier:   D0:7D:03:68:F8:5F:67:B7:47:CB:97:FF:B1:71:3B:E4:B5:03:EC:AA
Authority key identifier: 34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05
Certificate issuer:       /CN=34c4956f85671125882c574cd2e2d203aabded05
Certificate serial:       01962E9864F96A73400FD714E916AFFF10C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: NMSVb4VnESWILFdM0uLSA6q97QU.crl (hash: hh4Wvr9SrdWoWuVSnlLb3gP1/YlWiQOIZB88qdFZRxQ=)
                          2: xtLurjJMXgwePFKUT7vd_Bs7y4g.roa (hash: 9QOnyZtRBS25fvMRFyNZdyW0R5uMOP/pXW6ujcGtyGI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:64:f9:6a:73:40:0f:d7:14:e9:16:af:ff:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34c4956f85671125882c574cd2e2d203aabded05
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=d07d0368f85f67b747cb97ffb1713be4b503ecaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:9e:8b:73:10:01:33:94:a3:68:c7:d7:15:
                    59:0f:e9:83:d3:59:11:67:26:56:da:3b:dc:e3:5e:
                    ca:16:e5:67:3b:a2:2d:5c:30:67:e4:37:4e:ab:21:
                    20:65:af:f3:02:29:67:3e:6f:9e:6e:bc:99:5b:2b:
                    eb:6d:b0:43:ab:1b:12:6d:92:f6:07:78:0e:fa:17:
                    b9:f8:5c:fa:2d:58:fc:f9:34:0a:5f:5c:d3:47:af:
                    71:0b:16:24:5d:ef:47:5b:54:b1:5c:0f:de:34:f0:
                    25:34:71:52:42:27:7e:62:0a:9b:a4:10:eb:27:0d:
                    03:47:76:12:28:18:7e:da:96:5a:aa:46:79:77:e2:
                    95:f6:bc:d5:35:ed:93:01:4d:f8:94:c1:9a:d3:cc:
                    0e:66:c7:6b:d9:e4:bf:47:ee:da:1b:ae:95:d9:52:
                    42:a1:91:d0:f7:f6:c6:f4:19:d1:a5:7e:9c:ca:d6:
                    9d:50:fc:c7:a3:10:fb:60:72:23:9a:ad:33:2a:c1:
                    e1:46:7e:8f:00:15:dc:ce:2d:d5:0c:c7:ae:e5:1b:
                    d0:e5:db:77:e0:81:58:31:b5:f7:4e:a5:b2:2f:37:
                    56:4f:0d:ea:78:b6:4c:ed:c4:71:00:ec:20:d9:4a:
                    20:23:92:f1:ce:f6:27:d0:d2:c1:7b:58:1a:fc:55:
                    26:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7D:03:68:F8:5F:67:B7:47:CB:97:FF:B1:71:3B:E4:B5:03:EC:AA
            X509v3 Authority Key Identifier:
                keyid:34:C4:95:6F:85:67:11:25:88:2C:57:4C:D2:E2:D2:03:AA:BD:ED:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NMSVb4VnESWILFdM0uLSA6q97QU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f3e67a-cfd7-4745-82b7-2d90c7fd0d60/1/NMSVb4VnESWILFdM0uLSA6q97QU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:ba:4d:d3:5d:d5:80:36:6a:0c:af:8a:d2:f9:a7:3f:8b:
         2c:62:40:96:5c:41:5b:fb:0b:81:59:c4:51:50:4d:d3:ac:d1:
         58:b2:49:70:4e:69:c7:ef:19:fd:4d:21:7b:c4:ac:fd:2a:e4:
         76:b4:14:77:c9:e1:4c:d3:b1:33:82:9d:5d:0d:ab:77:2a:ec:
         f0:33:41:0b:13:90:93:3e:f3:7a:26:04:10:b0:0d:56:f2:27:
         d8:ec:9a:f3:56:16:d3:d6:f8:b6:fc:73:04:ae:ba:60:d7:3d:
         5a:88:d1:df:e3:06:2b:01:7e:1d:98:18:cb:ab:58:2d:45:6d:
         aa:31:7d:31:75:9c:4f:18:ac:a1:86:01:cd:6a:83:23:62:30:
         86:ae:c7:a5:19:ee:9f:ba:db:e2:9c:5b:64:82:e9:84:38:d2:
         aa:1b:22:7c:f1:7c:f2:df:3a:72:88:f5:fc:1a:d4:23:e2:e6:
         c2:ed:76:9d:3a:c2:e4:53:f2:5b:8a:bd:e4:c6:5c:31:14:02:
         ad:5f:73:78:90:0f:64:49:21:a2:51:41:48:db:ed:cd:c4:26:
         28:8f:40:5f:f2:16:3a:f0:bc:48:d9:c9:6b:07:45:b9:aa:b2:
         13:34:b8:6b:80:5d:0a:ae:af:8b:3e:47:f8:fc:d4:66:3a:50:
         59:74:b2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----