Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
File:                     NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft (raw, json)
Hash identifier:          8pX9usNmNc/AEf5dPPpj8Hb7hUtg8RSqOKXhIEuLmrw=
Subject key identifier:   CF:66:7D:88:3B:5E:A1:D1:30:A6:EE:AC:09:F4:F1:52:B8:CB:63:A5
Authority key identifier: 34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46
Certificate issuer:       /CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
Certificate serial:       01962E2B0F0CA4BD13650112A28A30C9CC2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl (hash: reBTZaGgrSCSmDEGZd+k/PoYXz5uxroXpxstoX3JABI=)
                          2: aDRwFZp3Ye9nOga6oqU2-HxOi5Q.roa (hash: 55fN/khKAT7BHMTfK9zjOz/iWjkXrLDgvWhFUwURpbU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0f:0c:a4:bd:13:65:01:12:a2:8a:30:c9:cc:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3432ba1c6d0b02befe68cc94ae9d2de3107a6046
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=cf667d883b5ea1d130a6eeac09f4f152b8cb63a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:2b:b6:4c:a2:c1:f3:f1:98:fa:de:78:de:
                    d6:0e:ad:73:0b:d9:46:ed:1d:9d:59:2c:40:51:43:
                    25:87:9e:4e:6b:3d:0f:be:7d:67:fc:e8:34:ae:c6:
                    b0:d1:6b:7e:6f:c8:84:b2:89:eb:e9:69:83:49:75:
                    1e:b8:46:e5:26:67:ee:cf:60:d1:8d:86:44:36:28:
                    17:6f:17:2d:de:7f:de:d4:69:ef:2a:2a:f6:d5:e8:
                    ec:94:1c:0c:06:3b:70:ff:22:7c:fd:11:16:f2:38:
                    8a:1f:44:59:95:54:24:83:04:a3:ae:04:19:c9:a9:
                    ff:eb:d0:24:a4:cd:42:ef:e9:5f:26:33:1f:fa:95:
                    ad:f8:85:e0:a5:8c:79:34:a9:40:ad:09:66:0a:c1:
                    15:ed:70:5d:3c:f2:e4:07:f9:b8:96:fc:07:11:13:
                    65:52:4f:37:c8:28:84:52:d6:fc:04:4d:96:fb:36:
                    75:f0:5b:f6:84:0e:b7:24:b4:cc:61:d3:f6:80:82:
                    ca:73:57:a3:5c:24:bf:71:5f:e8:f9:fd:dd:5f:3f:
                    c6:9d:c7:de:43:7e:81:e5:90:c0:bb:53:5a:b6:c5:
                    1a:6e:0d:60:c1:d4:e0:15:7a:21:e5:20:07:61:4f:
                    29:17:95:e7:fe:5c:c9:13:92:b2:f9:51:18:04:bb:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:66:7D:88:3B:5E:A1:D1:30:A6:EE:AC:09:F4:F1:52:B8:CB:63:A5
            X509v3 Authority Key Identifier:
                keyid:34:32:BA:1C:6D:0B:02:BE:FE:68:CC:94:AE:9D:2D:E3:10:7A:60:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDK6HG0LAr7-aMyUrp0t4xB6YEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/25e17b-824e-4e7d-b3e8-27b87bfbee7b/1/NDK6HG0LAr7-aMyUrp0t4xB6YEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a1:f6:ba:31:36:09:60:8d:4a:d6:6b:cf:78:fb:66:4a:30:
         93:7b:f7:00:3f:9f:11:24:b6:fa:82:d0:72:c9:95:9d:bc:eb:
         bc:92:76:fa:c6:60:19:12:7e:89:2b:09:82:e5:0b:c1:0c:ec:
         9f:a5:90:36:44:fc:d4:3f:15:39:60:24:98:50:17:09:42:a1:
         e0:b6:53:98:1a:50:c4:0b:38:64:89:9a:1f:1d:ac:11:c4:39:
         fa:7e:1f:aa:9e:69:a9:48:f9:be:3b:c3:1e:5c:94:63:ac:49:
         01:d3:5e:69:0e:a4:d2:ed:46:c5:5d:bc:d9:fa:cf:c2:7e:5f:
         1d:7d:3f:ea:38:32:77:15:fc:cc:18:db:47:98:ac:c3:ee:5f:
         68:f8:d2:65:d7:7e:ef:cc:40:b4:5e:0e:a8:76:2d:21:bd:d1:
         ab:b8:95:fc:d4:54:a4:83:a6:48:7e:5f:8f:ab:b0:0d:b8:25:
         c0:58:2d:b9:e9:c4:65:34:41:b2:3b:e7:54:14:35:08:ef:93:
         bf:f8:03:d0:59:0a:77:e7:fb:e8:cb:75:fc:98:71:9a:97:02:
         70:07:56:c7:f6:d1:e7:7a:60:67:e3:e9:1d:e6:36:4f:51:6d:
         a9:64:e3:d3:ea:bb:dc:8f:08:96:8b:02:11:a3:d1:a9:41:65:
         05:a5:24:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----