Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
File:                     NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json)
Hash identifier:          iXRGbch1AUkXWv+J9kj6NqRM2f2kUYgcyQW5pw3hQAc=
Subject key identifier:   99:1D:60:CF:F5:F9:26:F7:68:BB:5C:F7:4D:91:51:BD:B8:53:81:78
Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51
Certificate issuer:       /CN=3490424c688ff519fb9e204d8f1588553455b151
Certificate serial:       01962E2ABE4731D67A56524170C8D76E45D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft
Manifest number:          03D8
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=)
                          2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: Sspm1WnTx+k8K3AsoWM+SmqxZWwZLnPqqBaDGSnKB90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:be:47:31:d6:7a:56:52:41:70:c8:d7:6e:45:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=991d60cff5f926f768bb5cf74d9151bdb8538178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:46:9e:b9:a0:a0:34:53:3c:c7:ee:21:30:c0:
                    44:7c:cf:f6:c3:06:3a:9c:4f:73:2c:6a:dc:01:90:
                    f4:8e:67:47:08:92:24:41:2b:3a:2b:6f:78:74:cb:
                    26:7b:91:51:ce:a6:de:48:e8:fb:10:fe:31:47:d2:
                    7a:44:2f:35:75:58:8f:6f:04:bd:97:12:f9:23:ee:
                    53:2e:b3:12:cf:2d:b8:eb:e0:9f:7c:62:26:6d:8c:
                    05:6b:d4:c4:7a:e8:46:c0:e7:fb:e4:a4:1d:0e:91:
                    f3:7c:82:7f:c3:84:80:8c:a6:55:02:f9:1d:56:e4:
                    0f:a9:80:d9:b7:f3:9b:ea:9a:21:72:48:44:c3:6d:
                    e3:72:88:ed:52:82:3c:8a:9f:f7:36:46:52:a5:1b:
                    22:77:7d:31:89:83:f3:3d:ef:e0:9a:5f:91:7f:fe:
                    d3:4c:54:f0:4e:1d:16:32:a6:ca:c0:66:c9:1d:90:
                    72:c8:93:6f:df:40:d4:68:9a:f5:d9:8e:15:7d:68:
                    8a:d9:e4:96:24:b2:0b:51:55:fc:ed:9c:3c:ba:33:
                    b2:8c:b0:ad:0a:d3:53:9e:60:39:1a:b1:fd:ff:85:
                    8a:07:b6:11:58:aa:ec:60:07:ea:c2:df:78:42:4c:
                    a9:7b:ef:45:a5:8e:a2:ea:2b:03:48:2f:34:c1:9b:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1D:60:CF:F5:F9:26:F7:68:BB:5C:F7:4D:91:51:BD:B8:53:81:78
            X509v3 Authority Key Identifier:
                keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:98:07:67:78:bc:a3:30:c5:7a:b8:dc:74:14:2e:df:79:90:
         d8:46:1c:16:eb:c2:2a:d0:04:cb:b3:d7:8c:ef:9e:74:8e:b0:
         c0:7a:6c:7f:78:50:5c:ca:5a:dc:dc:d1:a9:70:e1:78:7e:ea:
         24:30:cc:a6:73:8f:2d:2f:5e:ec:e9:22:33:d8:cd:d7:3e:9c:
         a1:a6:63:14:73:55:01:40:20:44:83:c5:db:21:91:0d:b2:97:
         66:e3:51:7f:f3:25:56:62:cd:ff:49:3d:21:ec:b9:3e:06:9e:
         69:bc:33:a8:cc:e2:d8:6c:a3:c4:3d:d7:ab:aa:26:dd:49:da:
         16:bd:fc:78:2d:3b:f8:30:2d:8b:8a:be:83:f6:96:69:86:c8:
         0c:fd:12:af:54:9d:15:57:6b:68:75:02:46:00:4c:03:9b:fd:
         6d:1f:a5:69:8d:9b:8a:78:ae:ad:0b:06:d5:60:6c:d8:af:d3:
         2b:71:b1:97:d4:19:3d:2c:dd:b1:33:e1:8d:69:a0:81:88:1e:
         b7:4f:49:3a:2c:b8:c0:a0:69:c4:cb:95:2f:d2:b3:d9:f4:b0:
         42:71:13:09:a3:cc:9a:b5:b7:ce:e8:05:2b:38:a7:b0:eb:87:
         9e:0f:b9:46:e4:40:27:0b:bc:e4:49:13:43:8d:13:43:9d:7a:
         2f:0e:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----