Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
File:                     NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft (raw, json)
Hash identifier:          nflbdLdbVXULWjdaqZCfrlf6MSoG5MLJ8uhhw0/CnqI=
Subject key identifier:   6D:78:26:F2:9C:05:34:D6:7C:29:90:58:5C:FF:7E:68:D0:F5:1C:79
Authority key identifier: 34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E
Certificate issuer:       /CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
Certificate serial:       01962ECFE418FDF9DB97F73321FC4B2B7CE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft
Manifest number:          10CA
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl (hash: b4EjKe66SUxWGclMFo4L5b1bSSq9KWk7171Q47dL3TY=)
                          2: aPFNqKZrV_epMPFvc-8vIsgJFgg.roa (hash: 83I0vKl1m5ZTxLcVY4fj2guNAuZT35HFxx/AGVAfz8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e4:18:fd:f9:db:97:f7:33:21:fc:4b:2b:7c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34ddcbc8f61b260fd3f3e78b6b86877cb95fd83e
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=6d7826f29c0534d67c2990585cff7e68d0f51c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:23:06:c9:73:30:6e:cb:f7:26:64:12:43:
                    29:50:2a:81:3b:1b:1c:00:77:71:00:69:61:ce:69:
                    0b:8c:7d:9a:0a:aa:9c:9f:5f:66:69:e5:32:b7:f9:
                    1f:77:4c:17:e7:0f:3b:0d:20:0a:74:31:d9:38:79:
                    01:03:f5:51:50:21:0c:d5:19:b4:e0:5c:a1:8a:7e:
                    a7:26:4d:c1:44:af:f1:0c:28:13:b0:53:36:75:94:
                    3e:e6:a5:96:a3:df:1c:13:d8:3b:ad:98:5e:1a:67:
                    7a:46:b9:77:2d:a6:4c:67:66:eb:37:c0:4c:4c:da:
                    40:2e:57:26:1b:62:af:84:33:cb:25:bc:04:0a:cf:
                    d3:b5:b2:87:e5:ad:53:16:3f:3d:20:ad:ec:d6:6c:
                    bb:ef:3a:b8:a5:50:03:bc:0e:92:63:d5:2c:79:64:
                    e9:20:f6:6a:bd:f5:c2:54:e9:ab:de:f3:e0:36:c7:
                    5c:55:7f:56:7f:5b:98:25:30:54:a1:2b:27:75:82:
                    c9:b1:15:3f:05:ed:2a:10:b9:a5:98:61:cf:8a:a1:
                    98:7b:0d:12:c7:ed:6e:84:e8:a3:9d:ca:b1:2f:db:
                    12:db:e8:83:68:10:7b:82:30:c5:14:81:62:47:61:
                    11:1a:e3:25:2b:c7:ff:38:30:c9:fc:41:bc:d3:c1:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:78:26:F2:9C:05:34:D6:7C:29:90:58:5C:FF:7E:68:D0:F5:1C:79
            X509v3 Authority Key Identifier:
                keyid:34:DD:CB:C8:F6:1B:26:0F:D3:F3:E7:8B:6B:86:87:7C:B9:5F:D8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN3LyPYbJg_T8-eLa4aHfLlf2D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/6508a1-4412-40c7-8a72-52cd6e89aa8d/1/NN3LyPYbJg_T8-eLa4aHfLlf2D4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0c:92:e5:9f:9c:94:ce:89:62:8d:53:ca:f2:5e:da:8a:5e:
         b5:c3:b3:a8:f4:66:e4:27:c1:34:72:65:41:62:16:58:8e:3f:
         62:3c:e9:8d:fe:8b:5a:1e:82:59:b0:ce:ac:66:ad:9e:d4:19:
         65:ac:ee:4f:a1:c7:2e:d4:27:69:91:0e:5f:6d:02:39:6e:c5:
         f9:0f:a8:0b:78:a2:f3:d4:db:d2:70:2d:64:5a:4a:ba:cf:c3:
         0f:b1:4e:24:c0:e2:87:de:25:48:cb:3e:cf:0b:62:1b:d6:07:
         af:89:9c:81:3d:90:52:d5:d9:96:3f:4e:2d:88:fb:d9:36:f4:
         e8:e7:f3:ed:2d:77:8d:aa:b4:b8:b9:28:01:b1:e3:61:bb:8c:
         e5:2a:0a:34:39:7b:53:de:7d:51:56:0b:6a:a2:c6:e0:0b:f0:
         79:ea:1d:9e:96:21:46:b3:d6:00:01:98:27:8e:d6:49:6f:a4:
         e4:23:3f:05:4a:ab:64:0d:f6:1e:8f:ee:17:34:9a:8d:59:da:
         f8:a3:c1:cb:c1:39:46:82:77:5c:b2:ea:0b:97:aa:8a:78:04:
         3a:13:f0:de:5e:d5:a7:f0:95:45:4f:20:65:44:9e:b8:05:ba:
         07:7a:c3:11:13:a3:69:82:6d:82:6b:96:b4:da:57:d1:93:38:
         3f:34:d4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----