Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
File:                     NhfAZZZmmF4YXYQSHowgo2ROqY0.mft (raw, json)
Hash identifier:          zU+Ch6kcwiednwVxZJPHFmCOPILAl5BUMbIOONnPuGA=
Subject key identifier:   7F:B6:A8:9B:CE:E9:09:74:3A:BE:83:EC:41:56:20:1A:5A:8A:BB:27
Authority key identifier: 36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D
Certificate issuer:       /CN=3617c0659666985e185d84121e8c20a3644ea98d
Certificate serial:       01962DF403D46800D0BC45FEF9C49C9C3E1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft
Manifest number:          0D6E
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: NhfAZZZmmF4YXYQSHowgo2ROqY0.crl (hash: WlFsb7oCrUX/hszG4ZQtcUyBgFl1GL4oO9uRrUdf1lg=)
                          2: ZFMFiXOWwPj8k4IMO6NkGD3u9_Y.roa (hash: d308Fz0xAcOGQMBvbHe9umSC8kJ11mxoDxfXwvbWkEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:03:d4:68:00:d0:bc:45:fe:f9:c4:9c:9c:3e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3617c0659666985e185d84121e8c20a3644ea98d
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=7fb6a89bcee909743abe83ec4156201a5a8abb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:ba:11:16:b3:1f:8f:81:b8:11:24:73:7a:
                    6a:1b:31:59:0e:95:7a:c9:69:53:16:30:0e:cc:0c:
                    15:c8:b8:1b:eb:9f:7c:4b:cf:7d:08:cf:97:91:b0:
                    e7:95:fc:49:5a:a6:b3:d2:cf:5d:3d:88:fc:d8:f8:
                    33:7e:09:69:41:75:52:1e:97:40:5b:ff:01:51:e8:
                    32:7f:7e:cf:8a:1a:87:ad:20:14:c0:89:1d:29:7e:
                    d9:cd:0a:c4:de:d7:f1:57:7a:0a:be:b7:7e:8c:14:
                    7b:8d:1c:1b:5e:95:9a:a1:5d:fc:b8:aa:18:cd:5e:
                    cc:37:78:ac:1d:19:0d:6b:e8:94:18:07:b9:59:f6:
                    ae:f7:a9:3a:e0:37:28:2b:94:d0:06:2e:9f:89:28:
                    5d:72:45:fd:91:42:f8:1a:e6:c4:ae:72:07:be:af:
                    66:ba:b7:fe:bb:bc:68:ee:a1:8b:5d:32:61:fd:f7:
                    5c:71:69:de:a4:bd:27:22:69:da:53:3b:e2:2d:b8:
                    86:2e:54:bb:a4:b0:4b:38:9b:30:03:f9:2f:ea:b8:
                    38:77:e0:3e:bf:55:6e:91:9c:0d:73:9b:4d:2e:1b:
                    1a:71:23:a5:0c:cd:86:a2:12:5e:29:cc:b8:90:56:
                    16:5a:58:6a:6b:e6:96:2e:25:f4:bf:25:fc:b7:d3:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B6:A8:9B:CE:E9:09:74:3A:BE:83:EC:41:56:20:1A:5A:8A:BB:27
            X509v3 Authority Key Identifier:
                keyid:36:17:C0:65:96:66:98:5E:18:5D:84:12:1E:8C:20:A3:64:4E:A9:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhfAZZZmmF4YXYQSHowgo2ROqY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d1791d-1c94-42e6-9e3c-67acd2c88051/1/NhfAZZZmmF4YXYQSHowgo2ROqY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fa:4b:37:29:d7:96:02:22:27:25:db:77:30:2d:9e:6d:a0:
         ba:88:fb:8a:f2:41:32:fe:fb:b3:9c:c1:13:75:76:d2:a3:00:
         58:3b:05:69:a3:f7:d6:e9:83:ec:3f:5e:7b:d9:bf:52:37:33:
         a2:7f:43:82:1c:ec:c5:a3:f0:c1:d6:08:96:84:81:45:da:ac:
         74:74:1e:ee:d9:8c:7e:de:c1:c5:a6:8f:f3:17:a6:e8:01:86:
         b2:89:ee:b1:bf:29:13:1c:67:d3:dc:27:bb:e4:d5:d1:ab:50:
         72:7a:41:e2:1c:d2:1f:74:62:a4:e3:8b:37:0a:42:b6:ca:84:
         77:ff:cc:59:05:71:4b:23:86:24:11:e3:3c:12:0f:f8:6d:dc:
         90:aa:bb:03:58:47:86:2f:df:de:5a:51:84:d0:60:a2:fc:09:
         29:8d:09:05:54:c9:a1:17:88:bc:e3:ae:39:d6:27:7e:8e:5c:
         a1:f3:bb:cb:23:8a:3b:d8:51:e0:fe:88:fd:9c:0f:bd:e8:0d:
         e2:3c:96:5d:1b:76:91:8b:54:1b:bc:d7:b7:23:f4:f2:ee:7b:
         5d:57:77:d9:5a:a9:06:82:36:30:e6:ba:9d:56:2a:68:40:64:
         60:d0:ad:d6:d9:2d:d5:2d:11:8d:58:65:c1:0e:cf:9e:6a:0d:
         da:da:13:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----