Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.mft
File:                     NREZcs9Nkki9sYjTtBmuD7flZGs.mft (raw, json)
Hash identifier:          AlQCszFmYS1j45fM8Q92GmNJw42S8Ozftun8EJMcIgQ=
Subject key identifier:   0E:31:8A:9B:B3:F6:67:95:3A:7D:2D:E2:3C:53:AD:77:D2:86:DB:DC
Authority key identifier: 35:11:19:72:CF:4D:92:48:BD:B1:88:D3:B4:19:AE:0F:B7:E5:64:6B
Certificate issuer:       /CN=35111972cf4d9248bdb188d3b419ae0fb7e5646b
Certificate serial:       01962E99C1505FE0EAD053F5910840341EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NREZcs9Nkki9sYjTtBmuD7flZGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.mft
Manifest number:          0CF8
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: NREZcs9Nkki9sYjTtBmuD7flZGs.crl (hash: lS1m+NjzwulIhec9K90+ebJ8KaX5I26BSD6HOj7PFSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c1:50:5f:e0:ea:d0:53:f5:91:08:40:34:1e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35111972cf4d9248bdb188d3b419ae0fb7e5646b
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=0e318a9bb3f667953a7d2de23c53ad77d286dbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fb:1e:ef:39:62:2f:d5:b0:2b:f1:d9:29:19:
                    b8:3f:e5:35:4b:5b:8c:a1:2e:3f:40:dc:a0:ee:df:
                    da:63:22:7a:a3:7d:35:98:3a:21:30:0d:47:34:cc:
                    ea:e1:56:56:25:57:7b:6c:76:5b:f8:20:5a:83:8f:
                    c0:ab:40:b2:f0:9c:88:78:2a:57:c4:d8:86:64:a6:
                    b4:2b:ef:f9:2d:3c:a0:a2:57:47:ef:42:f6:5a:83:
                    1c:c8:c3:96:f8:6b:a6:80:05:13:08:09:a7:fe:9e:
                    0a:58:d0:4e:08:1b:74:f3:66:1c:48:28:48:4f:ce:
                    cb:c3:e5:df:81:2d:13:ec:07:3a:a1:a1:7a:95:f6:
                    41:2e:f9:ed:25:b9:24:66:59:ac:46:41:96:3c:2b:
                    c5:83:0a:2d:32:16:2a:07:31:19:01:fd:58:10:4c:
                    39:8e:af:55:b9:c9:cc:81:48:90:e6:04:67:5f:8a:
                    b7:f5:90:05:be:e7:6a:8e:4a:7a:8f:27:35:4b:6a:
                    20:9d:ba:ec:f4:85:f0:74:b5:e9:4e:a1:0c:0b:9b:
                    df:6a:d3:ab:99:bf:55:11:43:09:84:55:3d:51:03:
                    63:70:77:66:8d:c4:e9:94:87:4f:a7:07:dc:bd:c7:
                    00:81:9b:91:23:96:54:53:66:cd:c5:1e:45:ad:f2:
                    9a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:31:8A:9B:B3:F6:67:95:3A:7D:2D:E2:3C:53:AD:77:D2:86:DB:DC
            X509v3 Authority Key Identifier:
                keyid:35:11:19:72:CF:4D:92:48:BD:B1:88:D3:B4:19:AE:0F:B7:E5:64:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NREZcs9Nkki9sYjTtBmuD7flZGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f6b2bd-190b-4d0f-ba46-59e6325dd22b/1/NREZcs9Nkki9sYjTtBmuD7flZGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:13:28:6d:77:ae:7f:5c:0a:48:a7:ee:34:df:1d:9b:40:a5:
         c5:1e:3c:23:78:06:a9:7c:9f:47:ba:c8:d7:1f:49:33:68:91:
         28:db:e0:ab:2d:5b:97:29:da:5d:f5:1a:37:18:47:53:f8:cf:
         72:33:69:7a:c0:ad:ca:6f:99:1b:fc:d9:5e:03:f0:35:9d:ed:
         1c:32:13:c6:4f:4b:e8:98:17:fc:41:57:1d:bb:76:3e:27:1d:
         8d:a1:5f:73:70:29:fb:d4:25:23:be:da:c0:08:3c:11:91:2c:
         88:58:44:8f:d9:bd:90:f9:7f:e4:d1:3f:95:f9:e8:01:64:93:
         20:83:21:13:b2:55:a8:a6:92:10:3b:9a:79:ea:1d:ef:aa:c1:
         55:19:cc:45:09:fd:08:83:bc:1d:3f:f0:4c:ca:ad:fe:54:94:
         26:25:21:f3:39:68:dc:9d:4b:eb:4c:9a:61:cd:c2:9f:a4:5b:
         2a:04:42:30:23:13:51:eb:c8:66:2c:cd:2c:c2:b1:0e:e1:7a:
         f1:97:b8:0d:ec:63:ea:fc:a3:57:3d:9c:f5:41:7e:73:74:2d:
         8e:91:0c:d7:c0:f1:a1:46:21:cd:4c:46:bb:05:bb:b6:44:1f:
         5c:b8:cb:24:47:51:ac:cc:d9:80:88:9b:a7:8d:c1:79:c1:80:
         a3:17:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----