Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
File:                     1NZco0qWiw2FYauHdtuwLdt8eDM.mft (raw, json)
Hash identifier:          dZj17n/iIo++JDIG5Zfd0joSG3psshi9Eajb62dY2nQ=
Subject key identifier:   3C:4F:3A:19:84:EE:B3:FF:25:1B:C1:05:7B:9B:6E:EA:D6:AF:CD:AC
Authority key identifier: D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33
Certificate issuer:       /CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
Certificate serial:       01962FAB9CD9EDF0BB589EF43D1EF4F11FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft
Manifest number:          04CB
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 1NZco0qWiw2FYauHdtuwLdt8eDM.crl (hash: L6b6238EsTINUH+YSdQPh5DrBxygx9S1NgzvFsAhb3I=)
                          2: 7jIS7Kg3pQ0rAdPTN8-mhFQ9NMI.roa (hash: X1BBv86nq4mpZk7vS1wx5rzfijmXxCD6/5jYb3vftEE=)
                          3: JBZwLHOeun9xUsFliq37fa6QYAo.roa (hash: 8ByuZxbvTl/x0Sjxc//zO5GFMR7JeQh92bNKijR57Vc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9c:d9:ed:f0:bb:58:9e:f4:3d:1e:f4:f1:1f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4d65ca34a968b0d8561ab8776dbb02ddb7c7833
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=3c4f3a1984eeb3ff251bc1057b9b6eead6afcdac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:54:e6:e0:0b:7c:fc:9c:41:14:04:8b:8c:
                    b6:c8:77:0b:8e:22:fd:59:2f:a7:66:4d:97:06:e2:
                    16:58:64:a5:d7:7a:55:75:f4:24:22:ca:05:5c:f2:
                    eb:ad:4c:04:91:81:28:21:35:20:76:b8:92:8d:68:
                    5e:0f:b0:cc:9e:74:7e:87:3f:80:83:4e:6b:01:8e:
                    d3:fb:ab:02:cf:3a:e7:6c:30:35:02:ae:7a:08:ea:
                    df:ea:fa:b5:42:ba:85:db:70:23:a6:06:b5:69:9d:
                    c3:92:ed:0b:80:da:3e:26:64:49:da:f1:12:61:94:
                    79:94:11:10:23:e7:60:84:5f:61:2e:54:88:c6:54:
                    44:ae:15:66:7d:66:eb:8e:e6:43:32:14:3f:6e:69:
                    70:21:c0:a5:5f:c3:e7:8b:9e:5b:95:21:f9:82:f1:
                    fc:83:96:48:40:7a:1a:a7:51:e0:56:b5:19:a6:2a:
                    f0:bf:4e:69:03:85:7e:f0:c3:7e:07:d5:dc:39:ba:
                    ca:07:00:77:d7:7d:34:9c:ce:05:9a:f4:07:bf:69:
                    aa:51:d4:32:b6:4b:88:64:74:5c:7b:38:24:87:7b:
                    a9:e4:fb:6e:34:e5:97:71:b4:70:b9:0a:33:9a:14:
                    4f:3f:21:a6:3b:04:da:0f:8f:87:fc:e6:01:f3:e1:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4F:3A:19:84:EE:B3:FF:25:1B:C1:05:7B:9B:6E:EA:D6:AF:CD:AC
            X509v3 Authority Key Identifier:
                keyid:D4:D6:5C:A3:4A:96:8B:0D:85:61:AB:87:76:DB:B0:2D:DB:7C:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NZco0qWiw2FYauHdtuwLdt8eDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3cc34d-0f32-4a5d-984b-32eff95b39dc/1/1NZco0qWiw2FYauHdtuwLdt8eDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f4:bc:bc:b9:7e:d5:6d:dd:ce:d9:af:1a:fb:a1:96:ec:43:
         08:3c:25:ff:f4:f8:1d:11:84:01:1c:6d:a8:4f:42:26:63:e7:
         fb:ed:6a:e9:b5:56:48:4a:f3:f7:f3:1b:25:76:ba:dc:e7:ab:
         59:8e:e1:e5:26:23:d6:55:b9:08:36:9f:3c:e4:df:e6:dd:4d:
         7b:79:57:ca:f5:91:64:56:12:3a:03:05:9a:b9:b4:37:e3:b0:
         e0:8f:91:ad:46:ee:39:77:ea:f2:89:2d:6f:a4:9c:4f:a3:e2:
         6e:29:17:35:a9:4d:a8:c8:30:e1:4b:b4:9b:7a:1f:69:03:92:
         b5:22:e0:60:58:d4:bf:15:d6:ba:e6:37:d6:a1:8d:e9:e7:58:
         b5:46:ef:5c:30:23:ee:06:ef:0a:21:0e:e2:ca:b6:30:48:6c:
         b6:18:38:5a:6c:e1:62:08:cc:86:e8:ac:d7:73:fc:34:fc:38:
         d5:da:a7:36:9c:6c:44:aa:72:a7:4b:17:4c:3c:4d:d4:aa:a1:
         19:91:03:42:e6:dc:4c:67:54:d3:a0:c1:58:aa:89:a4:a7:7f:
         4a:98:31:b4:1e:60:c2:ee:05:89:c1:ea:12:f7:47:55:16:df:
         ae:42:24:74:59:cd:c0:2d:cf:50:59:b9:74:ca:ad:5a:69:28:
         8e:95:89:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----