Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
File:                     NmIEOjHdm9K3yxhifrS6wRhAzhY.mft (raw, json)
Hash identifier:          cSkPwmpUEbWXzrl56WAiDy6BOq2gNRd+qHvRZrulaiU=
Subject key identifier:   AB:3A:E0:33:AC:80:2C:EE:14:46:D2:3C:74:FC:E6:5F:AE:5E:BF:09
Authority key identifier: 36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16
Certificate issuer:       /CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
Certificate serial:       01962E2B0C00F9857B95EFD173A3D5D838F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft
Manifest number:          11F9
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: NmIEOjHdm9K3yxhifrS6wRhAzhY.crl (hash: N5hhTR98S4kos6jivVSWRSr8Rq2uh+fK1f8CaWdOeXg=)
                          2: WD0FQcbHEB-uoxf6girnu5JNKHw.roa (hash: iXRex71CWC3wFm8Z6DiGxb32qluuOPal75ek37KzREs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0c:00:f9:85:7b:95:ef:d1:73:a3:d5:d8:38:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3662043a31dd9bd2b7cb18627eb4bac11840ce16
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=ab3ae033ac802cee1446d23c74fce65fae5ebf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:98:14:32:83:d3:96:8e:b9:aa:98:a4:cc:
                    6d:20:5a:07:ba:2a:cd:ae:a1:78:05:1c:6d:28:40:
                    11:df:b5:0a:2f:e8:3a:a7:27:95:27:30:7b:53:ea:
                    64:89:c6:9d:f7:40:79:40:06:62:6c:2a:00:9c:de:
                    38:f5:10:5b:ab:23:7f:9b:1e:af:03:05:d0:f5:d3:
                    4d:9f:f1:ab:db:25:d6:6c:e5:3a:03:11:ad:d6:61:
                    97:c2:70:8d:a1:cd:dd:fd:20:a1:d7:f2:03:43:1d:
                    4c:a2:8a:a5:01:ba:be:c8:3e:d2:eb:2c:3a:b4:da:
                    71:dc:db:60:66:8c:03:4e:bd:51:9b:f4:8a:47:44:
                    4e:b9:4f:0f:7b:f9:ae:e0:4c:ff:ac:c5:3a:9a:9f:
                    79:ec:0b:57:b1:5a:46:b8:fe:fa:a9:01:ec:95:84:
                    89:c7:8b:ba:ce:88:68:33:27:93:0e:81:73:68:e5:
                    38:3c:13:a7:3b:15:f8:66:13:75:80:5f:35:e2:f9:
                    44:93:a6:47:e1:35:94:cd:0f:8d:1c:98:e0:9d:24:
                    7b:20:44:5c:c6:87:c2:33:f2:21:f3:fa:9d:04:7e:
                    9e:a5:95:13:45:f9:af:94:0c:0d:fe:15:0b:c4:94:
                    74:2e:b9:de:41:b7:4d:b7:75:fa:68:0a:b8:58:cf:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3A:E0:33:AC:80:2C:EE:14:46:D2:3C:74:FC:E6:5F:AE:5E:BF:09
            X509v3 Authority Key Identifier:
                keyid:36:62:04:3A:31:DD:9B:D2:B7:CB:18:62:7E:B4:BA:C1:18:40:CE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmIEOjHdm9K3yxhifrS6wRhAzhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/c429df-af25-4cce-bed7-d9b07fbbbbdb/1/NmIEOjHdm9K3yxhifrS6wRhAzhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:00:a6:55:8d:25:fa:92:c5:07:a9:ad:ae:27:1a:25:b8:d8:
         fc:e0:cf:cc:38:93:43:e6:94:46:f7:72:25:2c:47:38:f1:d1:
         75:2a:02:31:3d:e8:52:60:b7:95:f1:04:96:26:7e:43:8f:e1:
         fc:f3:2f:14:01:83:f1:4b:15:69:87:f3:47:98:aa:06:e2:d9:
         43:71:34:f3:2c:ed:fc:7e:8e:63:7d:f5:28:42:3e:0c:7e:23:
         c2:93:02:ee:84:81:8f:b7:34:db:79:8c:d5:37:2b:e9:f2:03:
         40:46:0d:6a:a2:21:23:33:77:e4:05:66:ff:ad:b8:19:b8:ac:
         72:80:7e:64:e2:5d:ef:1e:26:1a:20:55:c3:b4:e5:5c:6e:f3:
         8e:d1:66:01:fa:d8:22:17:11:d4:ad:3c:ee:8d:13:0e:0b:56:
         16:bb:ea:c4:99:37:9d:2f:d8:dc:4f:e4:06:43:de:a0:e9:b5:
         58:8f:69:2f:fa:0e:19:09:90:9d:4e:ae:3b:1f:b8:36:2e:2f:
         ec:6d:ea:26:98:a3:4b:4c:eb:d1:47:19:7e:d0:c7:43:c7:6e:
         88:32:6a:bc:54:26:df:d3:11:b0:f5:e4:92:c2:c2:d3:d6:84:
         cb:6b:ac:8e:a1:be:62:cd:b4:a3:e9:ad:1a:76:50:5f:ea:d2:
         d2:f0:4b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----