Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
File:                     NSFqNgJ3h24-k7Kb1LuckjH60vc.mft (raw, json)
Hash identifier:          KlWOqAeX0ATf+zzHyze3vrBPRhFcfxPChNKIqz++M7s=
Subject key identifier:   1B:0F:D9:9B:2F:7D:3B:7A:9A:D1:FB:F0:BF:BC:6C:70:45:97:1C:69
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Certificate issuer:       /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial:       01962E2B2B0F87889BDAF64CCBEA98D771B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft
Manifest number:          0F4D
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: 57xvgs1C64qj87aIpNvXlZvGXRo.roa (hash: zjoFwMxs5GYLsG8xg0G8PjPosJWEnHUje1reYWnSt8s=)
                          2: NSFqNgJ3h24-k7Kb1LuckjH60vc.crl (hash: lt026BRnd8NHqEx6WybvJ3x7wa3ggUK6ZVCiWW1yNFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2b:0f:87:88:9b:da:f6:4c:cb:ea:98:d7:71:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=1b0fd99b2f7d3b7a9ad1fbf0bfbc6c7045971c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:93:90:23:fb:26:35:98:67:3a:bb:62:1c:
                    c1:78:a9:86:59:5a:1b:7f:08:b8:ac:23:3b:74:22:
                    13:db:2a:6a:3e:2f:66:5b:ff:08:5e:55:b2:27:8e:
                    ef:2d:cf:fe:d3:72:02:4c:e2:ba:37:b3:9b:d6:7f:
                    ee:0d:4e:5c:0c:ff:45:3a:6d:10:68:1c:65:3b:c6:
                    f9:6d:84:66:2a:32:0c:27:86:75:22:9e:cc:f5:fc:
                    bf:12:fc:19:24:da:e9:b8:0d:a7:3c:ff:8f:3f:dd:
                    d9:76:83:1f:4d:21:62:ec:cd:b3:e9:1d:e9:81:e0:
                    77:db:74:48:0b:e2:ad:7b:ad:fa:cb:84:da:c6:27:
                    fa:a2:ff:d6:1d:59:6f:0e:19:ba:7b:58:73:9b:30:
                    85:22:98:45:4e:9d:7c:6d:02:51:ab:c9:97:cc:f5:
                    43:ce:13:db:32:43:51:04:fe:b5:aa:38:3f:e8:ce:
                    d8:7e:ed:78:ce:0d:3b:db:36:cc:e8:72:1f:43:9d:
                    eb:9f:25:64:1e:4b:a3:09:72:de:83:8d:2e:77:04:
                    2f:57:48:6c:c2:1a:d8:18:9f:e0:fe:21:b6:2c:05:
                    45:ef:95:26:98:96:23:7f:f8:75:5a:f9:16:e4:15:
                    1f:75:f2:6d:4a:32:47:68:9d:f3:37:d8:08:81:b5:
                    e2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0F:D9:9B:2F:7D:3B:7A:9A:D1:FB:F0:BF:BC:6C:70:45:97:1C:69
            X509v3 Authority Key Identifier:
                keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:19:1b:de:e5:05:13:fb:61:9f:cf:18:bc:77:7d:e2:c1:9b:
         a7:2f:54:38:72:e6:3f:1a:f4:68:87:ef:88:7a:e1:8c:cf:bf:
         b5:f6:8a:c9:22:f8:11:35:67:9e:d5:0a:f9:64:02:3c:a2:60:
         58:6d:8f:88:49:c8:b2:99:c6:27:61:c5:bf:c7:9e:c0:23:b7:
         e9:27:85:f3:93:82:b8:e4:8c:20:c0:d3:50:4e:16:c0:16:f3:
         6e:15:ed:75:cd:b3:c7:bf:6f:b7:91:e9:76:cf:4b:27:13:f8:
         24:0a:16:3f:d9:e9:74:a6:c7:7c:f7:75:2a:80:33:eb:5a:44:
         97:2d:ac:06:f7:32:78:e6:b5:1c:e4:cc:03:1d:01:4a:1b:ad:
         5c:8e:05:6e:41:68:20:69:e9:99:96:37:54:22:9b:0d:4b:e7:
         bb:0d:8a:54:15:43:28:e0:f0:2c:a9:01:1e:bf:8d:ce:b2:c7:
         96:7d:1b:97:b3:07:a8:34:e6:3e:f4:21:51:5e:e9:e3:23:48:
         86:ba:fe:96:3a:b4:73:ff:11:82:4d:d3:f4:93:74:ce:0e:cd:
         48:18:4d:09:d0:7e:f3:21:69:a5:74:72:a3:59:cf:b1:c8:46:
         30:92:9e:94:ab:f7:27:13:45:e7:eb:fe:2f:c1:d0:b7:dc:54:
         4a:d6:49:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----