Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
File:                     NUgzKLASxNGWj8IF3gJK8vmx2rw.mft (raw, json)
Hash identifier:          jKIFdhjwUBfXeYJOalhc5vOuHAUBqK+6XcbW/Z3VJZc=
Subject key identifier:   74:38:A4:9C:AC:80:C2:25:B0:DD:08:3B:48:C0:0F:1D:6B:AB:E4:4A
Authority key identifier: 35:48:33:28:B0:12:C4:D1:96:8F:C2:05:DE:02:4A:F2:F9:B1:DA:BC
Certificate issuer:       /CN=35483328b012c4d1968fc205de024af2f9b1dabc
Certificate serial:       01962E61F791500B3E0AD1393E9A64813FF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUgzKLASxNGWj8IF3gJK8vmx2rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft
Manifest number:          0189
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: NUgzKLASxNGWj8IF3gJK8vmx2rw.crl (hash: UdjdJ14iokS1WG0I2SEHzHGzzDXjqlj75YEXWoTtMYo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f7:91:50:0b:3e:0a:d1:39:3e:9a:64:81:3f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35483328b012c4d1968fc205de024af2f9b1dabc
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=7438a49cac80c225b0dd083b48c00f1d6babe44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:89:97:36:4b:4e:7f:37:4e:65:b7:0e:e9:
                    be:de:c5:53:dd:c6:f4:e3:64:92:96:ea:84:5b:02:
                    88:e8:52:f1:3f:48:9b:2a:48:9f:6f:bd:d5:25:b4:
                    94:10:b4:4e:8b:a0:49:9f:78:ed:c5:79:c9:c6:e7:
                    38:fc:31:2c:68:e2:21:0f:09:11:23:b9:df:92:9d:
                    8a:04:b3:a2:08:9d:2c:1b:3a:6d:54:fc:c1:7a:26:
                    84:ef:84:65:31:c5:79:9b:7c:91:d3:77:43:f4:82:
                    e7:b2:2b:9c:51:ec:3b:a3:83:e7:d1:67:99:3b:8b:
                    63:68:d6:f6:d0:eb:5e:59:61:d0:f6:c1:6e:bf:0c:
                    07:6a:d9:eb:32:b6:87:a3:e1:b1:d6:35:f5:d5:25:
                    15:24:e4:3d:d7:74:02:ab:39:8d:86:b0:f8:db:58:
                    d5:72:6c:8a:fc:c5:d8:9b:93:4b:c4:f1:2f:22:fd:
                    a6:1a:1e:24:1d:6a:f4:7b:27:0c:6d:3a:b1:92:dd:
                    da:02:4f:bf:d2:30:24:f2:e7:dd:e9:e2:1f:43:4e:
                    e5:da:75:44:78:55:cc:3a:65:92:ed:4c:99:25:1b:
                    3b:d4:2a:33:32:3f:50:be:71:3f:db:46:d7:c1:69:
                    e2:9e:e2:48:a4:f5:35:41:65:49:19:24:58:ca:0d:
                    f4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:38:A4:9C:AC:80:C2:25:B0:DD:08:3B:48:C0:0F:1D:6B:AB:E4:4A
            X509v3 Authority Key Identifier:
                keyid:35:48:33:28:B0:12:C4:D1:96:8F:C2:05:DE:02:4A:F2:F9:B1:DA:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUgzKLASxNGWj8IF3gJK8vmx2rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/91070a-0a96-49df-acff-ec567575418b/1/NUgzKLASxNGWj8IF3gJK8vmx2rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:15:2f:59:93:43:24:1e:ff:fc:48:26:00:8a:d9:fd:c8:fc:
         bf:5a:12:b5:da:5a:2d:08:f7:d2:c6:c9:c6:e6:0f:c4:b1:cf:
         2b:a8:26:21:17:be:cb:f8:5f:39:e3:7e:74:49:25:db:90:c4:
         3d:29:28:2f:6e:ab:bd:da:2c:08:0f:23:1c:b8:fe:c6:16:25:
         82:18:41:f3:9a:80:9d:3c:0a:c1:5e:98:d2:9a:4c:f6:41:44:
         a4:d1:d7:c7:0c:e9:6e:5e:2f:0f:f0:f1:ae:90:99:1c:1b:40:
         03:7f:93:bd:25:68:bc:61:21:61:e6:bf:a3:f3:8d:34:db:be:
         ea:91:46:b0:be:3f:5c:15:fc:29:60:8b:86:cc:70:c6:cd:85:
         3e:45:e4:d9:6c:95:b8:c8:b5:d7:ef:69:d7:2d:8c:8a:c3:13:
         d2:6b:2b:06:e6:0e:fd:d3:99:96:16:6e:15:06:d1:20:ee:b0:
         fd:55:a3:7f:80:7a:15:b8:0f:03:c8:c5:84:cf:00:78:b1:56:
         f1:f2:d2:79:77:27:e8:e2:d2:5b:1f:3b:19:3e:4e:a2:7f:15:
         4d:4e:36:20:41:39:d5:f7:b3:0b:51:2f:84:31:c8:f1:31:e8:
         95:38:70:1e:9a:34:b0:df:c7:1f:fa:45:cc:81:18:6d:21:b7:
         3f:02:e8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----