Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
File:                     NbA-yF0IYHprHd8f553GUcz-Pzc.mft (raw, json)
Hash identifier:          sUhyjyDUv5O9uv/5xDT14EMbU4qI7BJlzpyoqSL9VNs=
Subject key identifier:   29:1B:E1:08:B6:F1:AE:E9:AF:B2:76:2B:90:5C:A9:56:B5:65:1D:45
Authority key identifier: 35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37
Certificate issuer:       /CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
Certificate serial:       01962E2B1DFC1D6668189209020C32A9CDC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: EeFPhEstvW1EwmoMEs09YH1cZlE.roa (hash: zuogsczPuVIDLnfiQ5YgxbbQeRIuIE6FvsJkQLHPGfI=)
                          2: NbA-yF0IYHprHd8f553GUcz-Pzc.crl (hash: au7ahIFjSrgntWwU+CNFUkWsgz9aEwO/Upzm2jwVwC4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1d:fc:1d:66:68:18:92:09:02:0c:32:a9:cd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b03ec85d08607a6b1ddf1fe79dc651ccfe3f37
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=291be108b6f1aee9afb2762b905ca956b5651d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:aa:a2:d3:6f:a7:62:71:71:88:a8:36:b4:
                    fd:82:39:96:0b:8f:fd:09:d2:43:b1:14:43:c9:69:
                    c3:fd:7d:49:e3:ba:58:83:e5:98:a1:eb:11:2e:c4:
                    cf:12:51:d4:d7:1c:de:96:54:2e:98:4a:55:44:92:
                    85:1a:88:57:64:4a:1d:35:03:5b:1f:1e:7d:66:ec:
                    0c:9f:c6:a9:98:ad:8b:75:13:ca:fd:cd:24:ed:81:
                    dd:02:64:bd:10:fd:55:d0:ae:ce:b9:5a:50:00:1b:
                    b2:54:e8:80:5f:a9:6a:ca:c7:01:b5:ca:53:6f:82:
                    04:81:de:4b:c1:59:6c:9a:72:3b:43:9a:80:d9:fe:
                    f6:4c:39:94:dd:37:b3:a0:b1:29:fe:95:48:df:99:
                    2d:07:3b:75:2b:1c:8c:ae:77:4a:e7:5d:91:3b:00:
                    34:81:03:aa:15:75:22:ec:9d:d5:6b:7c:3f:cb:95:
                    08:dc:4c:3f:46:d1:e7:67:b1:6c:82:ca:0e:a3:32:
                    69:ba:75:3d:2b:e0:00:e5:fb:cb:b2:83:56:5e:28:
                    3d:3f:9c:71:f5:b8:c8:20:c1:4a:d5:c7:17:09:7c:
                    1c:e2:48:e2:45:df:3b:36:53:cc:a4:b3:e7:55:cb:
                    71:e1:07:85:07:d6:14:f5:1a:41:77:9e:45:3b:2c:
                    92:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1B:E1:08:B6:F1:AE:E9:AF:B2:76:2B:90:5C:A9:56:B5:65:1D:45
            X509v3 Authority Key Identifier:
                keyid:35:B0:3E:C8:5D:08:60:7A:6B:1D:DF:1F:E7:9D:C6:51:CC:FE:3F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbA-yF0IYHprHd8f553GUcz-Pzc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cc4fe9-e48c-42da-97ea-ab57cabc18f7/1/NbA-yF0IYHprHd8f553GUcz-Pzc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d5:bb:83:21:48:05:49:9f:8a:fd:b9:3a:52:d0:47:9c:d9:
         27:53:61:ce:fa:53:39:9f:83:16:7b:a9:f5:02:17:f4:07:a2:
         ad:d7:a8:d5:a5:6d:c0:cc:85:bb:ab:35:ea:70:5e:91:b7:c4:
         05:78:39:f9:5b:21:25:bc:8c:ac:1c:a5:dd:71:62:fb:66:fd:
         f6:7b:ab:64:f5:3d:1c:9e:1f:56:1a:e9:4a:e1:09:af:d8:6f:
         61:55:0d:cc:a9:de:b9:2f:8f:4e:5a:5c:63:a9:1e:04:2a:37:
         97:4a:f3:36:27:06:b2:e5:42:40:6e:a8:77:4d:e1:d7:0b:f0:
         2f:c3:7a:f0:7d:60:82:92:12:c8:29:fd:40:08:9d:9b:1c:7b:
         7d:cf:52:6d:31:42:26:38:54:df:a5:37:08:10:46:df:72:6b:
         d6:15:a8:0e:73:2c:55:20:c8:d1:d8:17:58:50:cb:ca:46:94:
         aa:54:57:6f:01:ad:f0:9b:fc:33:12:dd:be:98:04:9d:e7:66:
         9d:b4:c6:a1:af:a4:69:a5:00:ab:98:6f:51:0f:dc:28:a2:1e:
         18:d2:01:81:bf:f7:a5:8a:a7:f5:c3:24:05:82:98:e3:05:b8:
         f3:3c:5c:c6:2e:07:60:05:60:1b:49:eb:cd:77:00:1d:f4:ec:
         22:c4:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----