Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
File:                     NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft (raw, json)
Hash identifier:          2gdF2cMt/WuzsFcDe+H8qbHoyyzfOmMEIcuZci0S28E=
Subject key identifier:   FC:97:97:60:E9:77:6D:8D:59:3E:0F:CD:95:79:5F:C5:E6:D1:5D:1E
Authority key identifier: 34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55
Certificate issuer:       /CN=340551ace81314829351a27e399aeddb33246155
Certificate serial:       01962ECFC696069550FAE6252399245A7A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl (hash: 6d/06PoX56ZaElaEEpgeG0YRK+lSxj0DwxVwkyxLfEI=)
                          2: imECYFGKC-3y-aw_FjEqqGuMgCg.roa (hash: W1gRIBzxFMrRJWBGFPIeo4wKyMzv3I/ninZ6Px3gAlY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c6:96:06:95:50:fa:e6:25:23:99:24:5a:7a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=340551ace81314829351a27e399aeddb33246155
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=fc979760e9776d8d593e0fcd95795fc5e6d15d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:1c:08:56:db:0b:09:dd:24:35:18:bd:40:
                    dc:4a:07:80:e6:e6:5c:f5:77:10:bf:d1:97:14:29:
                    97:a8:f9:0d:8c:13:ec:ec:ed:da:69:23:68:bd:9e:
                    4f:ac:00:26:22:91:69:a5:45:23:51:63:77:f1:07:
                    69:eb:46:9c:c4:0f:3b:5c:dc:d0:d3:07:af:bf:e1:
                    7e:68:ec:a6:19:ff:0a:30:4a:5f:45:86:f2:2f:f5:
                    88:9d:19:d8:7a:0e:d1:58:0f:80:8a:fd:a6:83:c1:
                    b2:18:c5:71:da:73:b7:d9:4c:5f:d4:a7:af:c1:82:
                    c7:df:4f:67:a1:a5:93:80:e7:7b:a3:b8:6f:2a:32:
                    37:43:2d:ca:c1:e0:30:32:06:7c:e9:b9:13:4f:fa:
                    3e:f8:82:b9:22:5c:b8:07:f1:f1:45:35:b8:0d:11:
                    cd:bd:c5:8a:1e:c3:20:49:4b:9a:68:9d:25:fa:10:
                    5a:f7:c2:21:ce:de:b8:ad:61:fd:2b:ff:a8:49:79:
                    2a:dc:12:d0:5c:54:91:e4:d1:4f:88:7e:f9:db:e7:
                    5a:c8:cd:2e:bf:ab:40:ac:c2:9a:cc:17:bc:a1:b4:
                    44:53:e3:df:43:a6:1f:c0:75:44:13:a6:75:a0:6e:
                    2a:87:47:f9:73:1c:63:a2:d8:35:41:7a:60:f2:c0:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:97:97:60:E9:77:6D:8D:59:3E:0F:CD:95:79:5F:C5:E6:D1:5D:1E
            X509v3 Authority Key Identifier:
                keyid:34:05:51:AC:E8:13:14:82:93:51:A2:7E:39:9A:ED:DB:33:24:61:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/aa3805-c8a4-4f65-87cb-13ea56d1f63a/1/NAVRrOgTFIKTUaJ-OZrt2zMkYVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a2:b8:9e:d3:fc:8f:b1:47:a9:5b:44:fd:ff:5d:4a:4c:4e:
         38:28:6c:78:ba:6d:d7:9d:0c:f4:1f:e8:f3:68:a3:6e:a9:8d:
         16:48:78:56:39:d3:97:65:93:30:b1:8b:ec:f2:b9:97:99:33:
         ec:73:d1:65:4a:de:4b:72:96:ff:39:7f:58:dc:55:c4:ec:b5:
         7e:b6:8b:81:49:e6:7d:4a:fd:f6:75:59:34:95:4c:13:28:70:
         2e:59:4d:29:cf:a3:5f:dd:bd:c9:1f:c9:47:ab:ed:1c:a7:74:
         b3:f6:f0:52:53:61:58:30:22:50:95:08:f2:32:49:54:bc:00:
         32:e0:e5:75:92:27:bd:31:3a:3b:f4:e0:5c:78:2e:a8:84:54:
         8f:da:bb:e4:b0:c0:36:5c:28:a0:8f:6f:99:9f:16:44:3e:04:
         a2:8a:1e:9f:64:a2:f5:d1:0c:49:65:a8:07:66:2e:3a:16:66:
         bd:e6:8b:09:5c:57:43:d5:38:bc:81:56:c9:5b:72:bc:28:f7:
         3a:58:10:45:58:1f:78:40:49:a9:7b:ce:9f:71:cf:a1:80:bf:
         dc:db:00:54:0f:e0:fa:21:3f:31:ec:89:fb:da:d1:35:4c:49:
         bd:3c:19:53:b6:b3:db:3b:47:c1:20:85:ef:c0:11:da:df:da:
         43:2f:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----