Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
File:                     NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft (raw, json)
Hash identifier:          caDRnS51kJj7nIMj42cMQgfQuyMqi9s7/odi8+dirjc=
Subject key identifier:   DF:D8:8C:5E:ED:A4:99:B5:51:A5:87:BE:80:F4:4C:CA:E6:93:BB:B3
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Certificate issuer:       /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial:       01962DF3F0E0FDAA600D9866002938DB1B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft
Manifest number:          08BF
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: DTF9ONSmCnj34QSV3oz7U0spqDo.roa (hash: Kw2YkPP6grSzeM7Vvpfj0GyDu4r4ER5vZalMBblwx+c=)
                          2: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (hash: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=)
                          3: NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl (hash: AU2XCkzeLktga9c75HA4Ecx0zkJtd1BEVlNQHJwN+TQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f0:e0:fd:aa:60:0d:98:66:00:29:38:db:1b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=dfd88c5eeda499b551a587be80f44ccae693bbb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:3a:26:0f:ec:fe:d1:bb:a4:f4:44:f8:af:
                    b1:75:6b:ff:07:d7:6d:94:38:2a:df:8e:b0:5e:b1:
                    af:da:87:e7:2c:b4:7d:c2:96:c6:6c:a4:34:a2:fa:
                    16:3f:f6:15:19:41:1d:bf:74:88:58:65:01:0b:72:
                    02:a1:72:f7:bb:46:f6:bd:06:23:10:3e:7c:2c:ef:
                    20:ab:e8:e2:15:e6:d8:bd:5c:11:d4:86:49:fc:2e:
                    c1:21:3b:5e:51:8f:01:f2:fa:b2:bd:19:57:75:fb:
                    19:83:40:d7:8e:3d:8c:22:51:f7:2e:cf:02:24:a4:
                    fa:56:38:80:a7:c4:6e:d1:a5:17:89:19:6a:f0:e3:
                    10:be:0f:af:33:6c:97:7d:b9:4e:0b:0d:fd:d2:dc:
                    c5:d6:34:77:af:29:ca:74:8b:35:f2:46:4d:5a:94:
                    61:da:61:8a:39:08:b6:48:7c:0e:b6:c4:e9:13:3b:
                    1e:04:b2:ee:5b:6e:b0:7e:dd:d2:f1:04:38:f1:31:
                    d8:13:52:e1:53:6b:9a:44:e8:c8:58:bb:b1:ca:f4:
                    c5:f7:bb:4c:ff:87:45:98:7f:62:a9:ca:93:47:a3:
                    2f:19:e5:df:59:be:17:95:19:4f:38:93:be:37:b7:
                    70:f4:0c:f2:09:b7:3f:5f:d6:9d:56:01:72:c9:52:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D8:8C:5E:ED:A4:99:B5:51:A5:87:BE:80:F4:4C:CA:E6:93:BB:B3
            X509v3 Authority Key Identifier:
                keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:21:e9:48:90:ba:c5:2f:2f:47:0e:e4:6d:6f:46:87:ec:
         16:8f:dd:3a:93:ce:f5:c3:d3:6d:d9:30:c6:94:7a:ad:26:27:
         b4:c4:14:85:9f:32:59:48:c4:d9:87:c5:59:0c:ce:f6:24:d5:
         ab:18:6e:f9:11:9a:ee:51:f0:54:1b:91:64:81:6d:41:98:84:
         d2:4c:f4:c3:29:fa:c6:f8:62:65:67:0c:a4:a5:72:e8:b7:b6:
         d6:23:74:1d:fd:8d:82:9b:31:8c:d4:ee:ed:6a:db:80:94:93:
         5a:fa:82:f0:b3:8a:6c:b8:2a:f1:f3:5f:e8:37:75:71:05:14:
         d1:c9:0d:78:26:1a:b0:ed:47:4e:d5:bb:c7:5c:94:3e:ca:bc:
         58:92:5b:8f:ef:3b:86:5f:2b:96:ba:05:15:8d:17:fe:e9:7c:
         5d:1a:26:08:92:78:8c:e3:99:b5:ce:ba:53:5d:dd:83:a2:4b:
         16:9c:eb:70:84:d4:e1:3e:40:c3:ae:eb:43:35:58:5d:ae:75:
         dd:9b:8b:8b:22:1d:b3:95:94:e5:06:d9:e1:d3:e8:91:29:d0:
         88:d8:18:a9:fb:3f:c7:1f:3c:4f:f7:df:8e:43:31:f3:38:1c:
         ad:3e:bd:7d:62:85:d4:1a:6a:86:92:25:4b:3e:6e:5d:51:ba:
         30:76:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----