Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
File:                     NW2albrOGXhcQGR2Y_MdkFYmHC8.mft (raw, json)
Hash identifier:          /P6N4q+J6qCIWUANbqhtdS9cU/j14OD1+UKbA9Vwbe8=
Subject key identifier:   39:FB:C1:60:28:75:1F:9C:12:23:65:22:49:8F:DA:51:16:89:48:8C
Authority key identifier: 35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F
Certificate issuer:       /CN=356d9a95bace19785c40647663f31d9056261c2f
Certificate serial:       01962E99B28CEA64C602AC3FA8157D91BB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: NW2albrOGXhcQGR2Y_MdkFYmHC8.crl (hash: Hm4s2CAZYutqY3VSOQN5ifW7e5EKNn9AqcXY1Q2l9X8=)
                          2: VMysSyLNDVGWd0vcTeYPwlMA5rc.roa (hash: 6+DEgCnpiKyTQCIOlcuNMISjTH2qj/1LJFyn3yXus8Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b2:8c:ea:64:c6:02:ac:3f:a8:15:7d:91:bb:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=356d9a95bace19785c40647663f31d9056261c2f
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=39fbc16028751f9c12236522498fda511689488c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:a0:2b:5f:f3:1f:3d:02:fc:16:48:90:e4:
                    21:21:ae:ba:46:26:46:34:44:d6:5a:c7:5f:2d:47:
                    61:68:74:b2:90:06:eb:40:f9:d5:33:d0:05:b7:be:
                    f2:5a:d5:13:9c:b2:dc:fb:53:ae:7c:fa:4c:ea:59:
                    38:36:c3:2e:99:ea:7b:20:50:c1:9d:16:72:11:58:
                    93:b4:4b:53:1f:5a:4d:cf:6e:4f:c2:f4:db:5e:1c:
                    39:e1:cc:73:7e:c0:25:22:80:d9:ad:bf:26:a4:cb:
                    2f:a5:8a:66:09:b8:57:ea:5c:ce:e4:62:05:e0:f1:
                    19:38:cf:8a:4d:7d:05:1c:94:e5:f9:d7:08:a5:1f:
                    26:7f:a2:21:e4:f0:55:95:f3:bc:3a:7d:ce:8b:71:
                    d4:d7:77:57:7d:94:0d:22:19:d0:9f:4e:25:d0:44:
                    f8:0e:f6:b2:81:d2:94:03:62:b4:42:98:b0:1e:0c:
                    d1:1d:f6:04:56:17:fb:a6:09:c6:7a:87:a2:54:59:
                    5c:13:c2:e2:b8:a9:d6:5d:1f:1d:38:5e:d8:40:57:
                    5f:ca:49:b2:9f:c1:6c:7a:1a:cc:db:06:5d:ba:3c:
                    95:ec:5c:64:30:be:09:99:06:d6:86:58:e8:1e:a1:
                    bf:09:a6:af:49:3d:3f:27:ed:3e:6f:2a:db:e6:08:
                    85:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FB:C1:60:28:75:1F:9C:12:23:65:22:49:8F:DA:51:16:89:48:8C
            X509v3 Authority Key Identifier:
                keyid:35:6D:9A:95:BA:CE:19:78:5C:40:64:76:63:F3:1D:90:56:26:1C:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NW2albrOGXhcQGR2Y_MdkFYmHC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/dd9c90-31a9-4995-9da3-4efde6eb32d4/1/NW2albrOGXhcQGR2Y_MdkFYmHC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7d:1a:1b:c8:29:f0:bd:72:cb:2d:20:bc:ed:c6:4a:63:93:
         a6:31:5f:71:c7:84:a3:85:1b:8d:0b:67:d2:de:a8:58:83:72:
         b2:51:23:bc:d5:2a:9e:20:8a:7f:01:33:b9:44:e5:76:a4:4a:
         e6:bf:61:c4:d2:33:da:1a:1d:23:b5:b5:17:06:b5:06:04:6f:
         28:62:df:fb:df:ae:2e:3f:25:f4:5f:fc:c5:7a:4f:56:95:88:
         f6:66:77:67:13:66:c1:40:bd:63:72:1b:27:71:90:44:3d:32:
         1a:27:ec:01:50:c8:77:d1:5f:4b:df:2e:ac:85:2d:3f:6a:7c:
         ac:fe:ca:89:ec:37:fa:df:c3:63:19:ed:8b:a9:1d:c3:30:fb:
         33:f9:cb:72:b2:11:cd:44:36:f4:41:f5:22:80:02:c9:84:aa:
         7f:07:4f:b1:46:7e:0e:65:f6:71:bf:7c:43:b4:a8:41:42:2a:
         fe:ff:b4:5d:c9:bd:05:74:b5:54:89:c9:3c:94:ab:05:57:80:
         6d:06:8e:7f:65:85:c4:89:86:f3:35:c9:ac:2f:5b:31:fa:42:
         83:36:a1:fb:c5:75:16:56:66:04:bf:0c:dd:a3:d7:37:e7:93:
         9e:fd:8d:00:1b:93:9c:1b:32:60:9e:92:28:50:0a:3a:f9:11:
         56:6e:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----