Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
File:                     Nb4qqbT7-QcV68yQU0-dLVT32kM.mft (raw, json)
Hash identifier:          rgyk/zX98LLn//l1pOD2nisCOxKD1L6qkogVDUJ1PS0=
Subject key identifier:   87:53:DA:16:E7:98:E0:40:2E:B6:48:13:45:4F:91:45:B3:1F:EE:F9
Authority key identifier: 35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43
Certificate issuer:       /CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
Certificate serial:       01962ECFD4179606E249EB42D7A99B7D6F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft
Manifest number:          FA
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: Nb4qqbT7-QcV68yQU0-dLVT32kM.crl (hash: Stt1LSDX8VILP/pD3BVFAW3nXaE4/e1gxyZfpeLu+T8=)
                          2: NepfpGWCX6iiE6umFGKvSmfWR3o.roa (hash: FLwtEJgUjgrIcEp00Qgejhk+RC1p+QNIVoP/IiMZjv4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d4:17:96:06:e2:49:eb:42:d7:a9:9b:7d:6f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35be2aa9b4fbf90715ebcc90534f9d2d54f7da43
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=8753da16e798e0402eb64813454f9145b31feef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:1b:ad:30:af:57:f7:88:28:f1:0b:b6:15:
                    28:31:92:4e:ba:33:24:8f:d0:eb:a3:2d:fd:12:8f:
                    42:f2:19:6d:d3:63:09:22:85:60:b6:9d:cf:cb:5b:
                    ac:a2:ff:15:7d:09:e2:c0:71:4c:24:e7:5e:cc:03:
                    ea:65:95:bb:c4:27:5f:05:98:a5:8e:c8:c6:0b:2c:
                    51:c5:e3:28:71:52:43:8e:2a:0d:3e:69:28:23:cb:
                    d8:85:ba:6b:70:68:d1:0c:e3:23:c5:ec:e9:cb:f1:
                    a1:6f:35:f7:1c:ea:c6:fb:f9:f4:01:f8:ae:93:bf:
                    d5:8d:01:e4:d1:61:5e:3a:22:b6:56:d9:99:0e:a9:
                    b2:1d:1f:19:b8:b7:26:c9:35:2f:c1:27:15:ff:74:
                    c0:86:3b:d6:b5:2b:c7:9a:8c:4b:bb:46:a5:d1:3e:
                    c8:45:7e:2b:58:d8:b7:8f:9b:41:25:96:a0:40:77:
                    de:ce:b3:fb:89:d0:b9:15:67:be:db:be:e9:8e:d3:
                    ab:db:7d:fb:76:94:46:74:d3:0f:27:5e:9a:89:c8:
                    9d:87:e7:2d:14:79:c9:c1:4b:19:a3:bb:52:18:e1:
                    aa:4f:de:fe:63:de:e7:c3:37:34:d5:40:26:f6:bc:
                    8d:8b:33:2c:81:c2:98:83:13:b8:2c:8b:d1:11:03:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:53:DA:16:E7:98:E0:40:2E:B6:48:13:45:4F:91:45:B3:1F:EE:F9
            X509v3 Authority Key Identifier:
                keyid:35:BE:2A:A9:B4:FB:F9:07:15:EB:CC:90:53:4F:9D:2D:54:F7:DA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nb4qqbT7-QcV68yQU0-dLVT32kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9a9958-09d0-4a28-ae88-cb9f04c1e154/1/Nb4qqbT7-QcV68yQU0-dLVT32kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:20:51:0f:4d:bf:82:c3:6d:8d:c4:76:0a:6e:5d:99:be:e8:
         1c:c6:e7:4d:05:8d:e6:b5:32:54:fd:8f:5d:99:86:cc:e6:52:
         63:58:f0:1f:b5:09:dc:25:f5:8d:8f:44:98:a5:75:76:53:f3:
         26:d9:f0:03:9e:87:88:c8:8b:8c:5f:f3:0e:49:cd:68:15:af:
         a6:56:9e:b8:7d:48:78:06:1a:e6:6c:52:cb:9a:e1:ac:ae:a9:
         a0:4e:6e:ba:40:49:91:d1:11:78:50:bb:8b:09:d6:8a:c6:47:
         35:83:3f:a4:99:ce:f4:35:ad:93:9a:c3:6c:fe:3e:18:7c:a9:
         3c:f0:92:b3:c0:63:e5:c6:52:41:74:32:d0:eb:0b:e4:b2:9e:
         83:5b:5c:3f:2f:b2:67:dc:4f:99:81:f4:9e:66:f5:d9:5d:63:
         90:41:95:b8:dd:d4:c8:f1:1d:94:ea:3b:8d:f4:67:a3:c3:e6:
         39:d1:c7:28:35:1f:69:0c:75:ad:0f:31:92:17:22:75:4d:58:
         dd:27:74:f3:59:3a:8e:8d:00:6b:48:21:e5:57:36:61:43:67:
         c3:20:34:42:02:0c:be:7d:68:86:9a:4f:99:60:ba:e5:7c:00:
         0e:59:46:87:cf:83:cf:15:ff:41:20:f7:44:fc:a7:c1:8b:db:
         29:e6:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----