Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
File:                     NOg_QeXSQlTJCobjsrt6gK8DlyE.mft (raw, json)
Hash identifier:          5DnI1s9F+2EwYfucOdGToAwcUE8uepReR0zb5l29BNQ=
Subject key identifier:   CD:4D:2C:A5:96:AB:17:02:4E:F0:6A:D4:B7:A1:48:58:7A:36:34:05
Authority key identifier: 34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21
Certificate issuer:       /CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
Certificate serial:       01962FAB28E028611402330DB3CBCD628E79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft
Manifest number:          137E
Signing time:             Sun 13 Apr 2025 15:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:08 +0000
Files and hashes:         1: NOg_QeXSQlTJCobjsrt6gK8DlyE.crl (hash: k23Wtp3GHMNifVz955HKQRiNb23vFmSNEoprxcqXGHQ=)
                          2: UO1KioDak-iT8kDHcohpIq9FtOw.roa (hash: c3Q9cGyrR1r4x1r6NclTtEj7o03+DJv3Ywm72vFkEgk=)
                          3: kh50C_NbBjs1xffmc65N3htJRDA.roa (hash: zegMkFf00MvL1ZefKCFbf5kmHagYnvltoauO7HXIkok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:28:e0:28:61:14:02:33:0d:b3:cb:cd:62:8e:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e83f41e5d24254c90a86e3b2bb7a80af039721
        Validity
            Not Before: Apr 13 15:01:08 2025 GMT
            Not After : Apr 14 15:01:08 2025 GMT
        Subject: CN=cd4d2ca596ab17024ef06ad4b7a148587a363405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5f:90:07:15:76:f3:e8:32:87:03:35:af:00:
                    97:3f:17:82:50:e2:91:5e:76:07:a5:a0:7d:db:90:
                    97:6a:3a:97:6a:72:ed:5f:7c:29:7e:b8:56:e3:a9:
                    58:9b:a4:28:2b:b2:4d:40:ed:97:57:de:58:1c:06:
                    94:b1:cb:58:00:19:ec:79:97:93:59:7b:0e:4d:46:
                    77:d7:ae:49:6b:37:ae:f3:1a:48:99:9d:b9:a2:85:
                    1e:4d:16:1b:e2:f8:75:9c:43:42:eb:57:13:58:3f:
                    59:f9:d7:e0:21:c3:db:23:22:f1:43:d3:52:b6:e7:
                    ab:33:51:0d:ed:a3:bc:83:f8:2f:d0:1b:c5:65:7a:
                    f8:84:99:a6:04:2d:35:13:30:73:4f:64:e6:51:2a:
                    e8:52:23:18:10:4c:2c:80:5b:a4:d9:21:3a:e7:41:
                    d8:c2:ca:02:5a:3a:23:b5:d7:c2:1f:7e:7a:ce:38:
                    90:9b:7c:fb:ee:11:5a:a1:16:5e:58:d5:e0:f5:9a:
                    d1:4a:96:8c:c0:d7:1a:07:2e:81:f2:a6:0f:04:4b:
                    97:be:88:87:bb:a4:a4:bc:95:a7:a3:79:a6:31:5f:
                    ab:12:77:ad:2a:07:ce:ec:7e:49:6d:13:f2:87:15:
                    98:0a:bd:60:9a:68:9b:04:dd:0d:5e:8f:e2:a0:df:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4D:2C:A5:96:AB:17:02:4E:F0:6A:D4:B7:A1:48:58:7A:36:34:05
            X509v3 Authority Key Identifier:
                keyid:34:E8:3F:41:E5:D2:42:54:C9:0A:86:E3:B2:BB:7A:80:AF:03:97:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOg_QeXSQlTJCobjsrt6gK8DlyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fba28c-6b17-4626-963c-058cc953e803/1/NOg_QeXSQlTJCobjsrt6gK8DlyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:68:20:80:6c:1b:74:ab:98:c0:34:c0:02:6d:85:a9:d3:
         fd:af:07:b7:20:c3:55:81:e7:64:3a:1c:44:b9:f5:aa:a3:83:
         6c:0e:d1:ae:84:1d:67:4b:b9:e8:ad:85:1e:09:35:f1:77:d2:
         8e:c1:d1:09:24:df:21:3c:d1:6b:ef:b2:45:ae:fc:9d:8f:e5:
         a1:9d:d1:b6:56:67:1c:19:c0:8c:a6:58:2c:f0:e9:18:97:66:
         a0:8f:ff:9a:42:c4:cf:7d:8a:4d:4a:9e:47:56:a1:af:eb:9c:
         02:85:06:4c:62:63:ea:4a:26:3f:ae:a9:ba:3d:e6:92:b1:81:
         87:58:8b:42:35:75:8a:81:0c:f1:27:35:e1:9e:92:d1:25:01:
         00:1f:2d:f3:44:da:78:b9:51:40:d3:a9:7d:cb:a7:a4:55:4c:
         51:d0:e9:ad:2b:8a:3b:8f:4c:92:3e:97:fc:fe:51:e9:08:23:
         bd:4a:fe:cc:10:53:ef:73:72:f3:1f:23:d5:63:71:c1:18:18:
         8d:8d:3c:8e:3a:95:a1:7f:f3:f2:90:49:65:8c:ab:5a:0d:52:
         8a:37:32:13:b4:e2:1c:aa:0a:31:4f:91:5f:dc:b7:f9:04:de:
         35:d4:d2:a7:1e:83:50:95:78:45:c7:43:73:c6:fa:89:ca:e4:
         a1:f5:d8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----