Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
File:                     NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft (raw, json)
Hash identifier:          s+NFfOk99uIRBl7UFsvM0AAFIwtbZA22kqmYP3Zr7LI=
Subject key identifier:   F4:76:50:A3:F3:CA:F8:9B:91:F8:0F:09:8C:33:4E:86:0F:89:E3:C9
Authority key identifier: 37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24
Certificate issuer:       /CN=3722b2f090a967e0bcacd19f39ad2a887263b524
Certificate serial:       01962F3D5AB285EACCC683A8D90DDBBD9ECA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft
Manifest number:          01CE
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl (hash: rOw0+oN2ayykQNzXkJ7DWmEpPdlrlvjtZd2UmbbwVSM=)
                          2: dbO_KM950SVoV4qdoDfieNWIw0s.roa (hash: DCE7AE8Wo5HEULV6TjwRejnJ6LMRCD866TcEBq5yg4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5a:b2:85:ea:cc:c6:83:a8:d9:0d:db:bd:9e:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3722b2f090a967e0bcacd19f39ad2a887263b524
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=f47650a3f3caf89b91f80f098c334e860f89e3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:71:e7:e0:c7:84:d1:d4:7b:88:ad:f6:5a:d5:
                    b4:f2:3a:ed:26:c1:fb:7b:71:0a:9e:cf:20:22:91:
                    16:d5:d2:b4:d8:20:fa:56:cd:d1:c4:00:20:89:e5:
                    d0:6a:d0:81:c7:8e:e5:19:05:8d:35:b1:d3:54:7e:
                    3a:9b:20:b0:5c:31:e6:87:2a:ea:61:82:c8:7b:36:
                    3d:1c:95:68:80:ad:a1:d8:2f:08:28:58:e3:9b:fd:
                    7c:d6:01:51:2c:eb:7f:ad:8e:1b:3b:17:53:b2:0c:
                    07:af:25:13:3f:8d:f9:cc:2e:45:78:3b:a3:b5:48:
                    a4:96:5b:fb:38:7c:11:8a:4a:67:65:99:d3:c5:81:
                    05:32:66:d8:d0:20:bc:55:c3:1a:16:b3:b7:b0:ee:
                    18:17:49:2f:1f:c4:39:b4:35:c7:a6:41:e3:93:93:
                    70:7c:d5:d0:56:c3:06:76:aa:39:33:58:09:d7:e7:
                    ee:14:30:ef:84:1c:a8:7c:6c:bd:7d:e2:30:39:de:
                    df:b9:e4:11:78:ce:de:37:35:08:6b:be:0b:f1:ce:
                    b6:d4:ba:c9:3f:c4:d4:d1:c3:65:ea:1d:63:7b:18:
                    26:c6:b0:dc:2f:ad:cf:6c:fb:11:c9:2b:c3:f9:19:
                    09:ad:8d:20:43:bb:45:2f:07:7c:a4:cf:fc:38:d2:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:76:50:A3:F3:CA:F8:9B:91:F8:0F:09:8C:33:4E:86:0F:89:E3:C9
            X509v3 Authority Key Identifier:
                keyid:37:22:B2:F0:90:A9:67:E0:BC:AC:D1:9F:39:AD:2A:88:72:63:B5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60de46-5974-4c45-be36-8dcdb998fd5a/1/NyKy8JCpZ-C8rNGfOa0qiHJjtSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:97:4f:5b:48:5a:d8:65:5f:bc:71:0c:de:5e:02:80:9b:ff:
         1a:5c:a2:f0:45:8c:c9:89:a6:66:e5:31:75:5a:b3:f4:d1:5d:
         33:12:52:58:37:ee:b4:8c:20:5f:0d:f3:29:8e:14:1f:56:6d:
         39:0e:76:bd:e3:9e:c2:aa:e4:55:d4:0d:e7:c5:1d:28:11:81:
         74:7f:8b:31:3b:12:9d:af:58:3c:8b:6e:b2:e3:7d:3b:a3:3c:
         63:14:3e:ca:4b:fa:cf:28:4b:a1:10:6c:53:12:1d:df:d5:f9:
         1c:bf:15:cd:fb:d6:82:d0:ab:e6:0b:bc:82:ab:19:3d:ca:68:
         2b:54:67:d5:db:e0:63:3a:c7:e8:7e:6f:12:7e:39:2e:d0:10:
         23:f3:67:75:5c:74:b1:ea:0f:ab:29:32:54:8c:1b:4c:dc:f9:
         89:49:ce:7d:b4:6c:bc:bf:b1:ed:2d:0d:24:67:c1:93:26:62:
         08:cf:f2:e2:8a:02:3c:77:d0:79:c6:61:c9:9f:12:95:ad:5b:
         ea:ff:0a:a7:6d:6d:8e:02:98:d0:0d:94:c4:7a:1f:c7:b9:9f:
         7a:2f:38:b4:26:99:6c:36:bb:30:75:59:87:ad:9d:88:55:ac:
         62:d4:48:e2:61:7f:c3:f4:e4:c9:1e:e1:ea:b0:5a:2a:c8:98:
         2e:62:1c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----