Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File:                     NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier:          4tV5QoSchViTeTYaG9fDWqA76YKY0lIgbHJmqvv5oG8=
Subject key identifier:   8F:12:E4:04:EE:73:E0:CC:AB:B5:CB:A0:0A:84:CB:5D:90:C7:71:BB
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer:       /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial:       01962E617470899F1AF6F503B293BAE83E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number:          11EE
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=)
                          2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: JTVxkzzRA4xHlvpvZO237LI2a0IKPoVOI1OSdNGfVE8=)
                          3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:74:70:89:9f:1a:f6:f5:03:b2:93:ba:e8:3e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=8f12e404ee73e0ccabb5cba00a84cb5d90c771bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:b4:3d:23:2f:4d:51:07:75:58:47:71:34:
                    19:d8:a0:36:b6:42:e0:70:b0:4e:76:6d:f5:bf:d2:
                    05:e9:95:c1:35:2d:23:0e:a1:03:15:6c:31:f8:3f:
                    63:aa:14:b9:ed:7e:67:ab:b1:93:2c:8f:1e:57:8d:
                    d0:c5:73:76:97:e2:31:af:5b:f6:93:62:0b:e7:08:
                    a8:9f:96:10:de:66:a2:d6:5a:ba:13:79:c4:ec:cb:
                    91:d6:e5:ab:e6:f0:3e:15:ee:e3:4d:c2:39:bb:9e:
                    71:3f:2b:a1:32:da:75:05:75:ff:ea:e9:3c:54:92:
                    77:8a:2c:5b:40:a1:57:ae:83:6d:ec:8f:d7:13:b3:
                    41:eb:c4:6a:45:6a:62:ed:fe:9d:54:43:7d:f6:70:
                    0e:f9:e1:1c:69:66:ef:d6:3b:f6:99:0c:ae:fd:28:
                    83:dd:4c:73:3e:e0:8c:0a:8e:04:5d:ea:18:f1:c6:
                    8d:22:2d:c2:96:f6:d2:38:83:c0:91:6c:0f:fa:0a:
                    6d:7e:bf:a8:d9:45:a0:0c:08:60:1a:d3:71:d5:79:
                    a5:d7:d6:78:7c:3d:bd:7e:aa:81:70:87:77:a3:e9:
                    60:57:1f:61:9d:49:f6:a2:7d:37:5e:cf:80:b1:6d:
                    1c:b6:ce:3c:dc:ab:f3:0b:34:65:84:c0:ae:c5:1d:
                    13:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:12:E4:04:EE:73:E0:CC:AB:B5:CB:A0:0A:84:CB:5D:90:C7:71:BB
            X509v3 Authority Key Identifier:
                keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:77:e1:d0:21:f1:f1:94:9e:13:09:24:4d:4b:46:70:9c:f8:
         89:ed:3c:a5:4a:0f:51:f3:e6:44:e2:a4:1b:3d:84:9a:0b:21:
         28:f5:4e:6e:62:b7:ff:c1:82:4a:1f:df:24:1b:89:15:be:84:
         92:18:03:fa:15:1c:b7:f3:84:ca:39:3c:06:02:d6:f8:95:30:
         97:45:f1:1e:4d:ad:2f:a1:3c:40:de:34:eb:e3:04:80:a8:6d:
         b1:38:a9:6e:6e:57:5b:80:e2:93:fa:2b:14:4d:11:65:d4:bc:
         08:43:7b:ae:dc:0f:38:47:65:f4:bb:96:b1:74:bf:4f:f0:5d:
         40:41:77:ec:8d:01:fd:3c:19:ed:2e:28:dc:c9:09:a2:8e:26:
         5b:d4:da:41:b4:ca:39:67:41:d7:32:26:b4:a3:d2:af:10:96:
         7b:58:62:94:4d:96:e1:0b:c5:24:07:55:93:72:86:10:83:33:
         e4:4f:4c:52:0e:eb:c1:67:d2:9f:fd:60:14:dd:56:7d:09:8d:
         cf:9a:3b:2e:15:d1:0e:2d:5c:6d:59:f5:46:d7:30:ba:b6:a9:
         76:81:e6:04:69:b1:16:71:c7:97:e6:63:9b:ae:4f:23:12:2d:
         23:c6:26:87:30:6c:ec:66:a0:9a:72:01:67:36:4b:7a:86:1a:
         50:d0:08:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----