Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File:                     NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier:          fAhHvbPLbNVsItyFuZEZ3KMg9S8kvE6+IP7qnaJANeE=
Subject key identifier:   01:9A:41:39:71:56:D6:AB:2F:BC:1A:5A:55:35:29:46:D2:47:D3:CC
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer:       /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial:       01962F7440ECBE8A8AEAA072131B0C384E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: rPh4SDmS64CxlQgZzE6xzQtupIFXr5BRfPhepIzZsqQ=)
                          2: apGrLeQXGFDnmjDGU5J1xhLa7ts.roa (hash: TvPWK0JX9FOtKwbjXZr2maaJZh4hwmSWvBJ0nfoejxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:40:ec:be:8a:8a:ea:a0:72:13:1b:0c:38:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=019a41397156d6ab2fbc1a5a55352946d247d3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:0a:0f:6a:19:e2:54:28:7b:d5:e2:ab:9e:
                    eb:d7:f5:3a:91:c4:40:55:ec:5c:e5:3d:9d:75:74:
                    94:fb:24:7b:13:83:65:54:24:aa:e8:39:5d:1d:e1:
                    e1:9b:f2:b8:fa:77:a2:fc:4d:b2:d5:d5:5b:af:ca:
                    24:d5:f1:1e:a1:a8:16:20:63:79:45:f8:87:79:f1:
                    7f:82:88:1c:6e:b8:50:8d:83:8b:c5:7e:bd:a2:67:
                    58:bd:e7:9c:75:07:69:51:be:24:d0:c9:53:9e:2b:
                    0c:e3:26:5b:8b:12:7e:dc:8d:20:b7:a0:90:34:ba:
                    03:47:ed:a1:ff:08:a8:a8:21:b1:d4:b5:07:c3:55:
                    0a:dc:4a:64:44:ec:ee:ec:ff:d8:2b:88:39:c2:df:
                    9b:51:05:39:7d:79:11:f1:bb:9a:aa:05:fc:42:e6:
                    72:b9:78:f3:5f:e5:91:9e:b7:97:16:5f:e3:84:c6:
                    97:d6:77:a1:fd:02:25:76:23:c6:79:24:87:20:0d:
                    50:6b:2c:4b:bb:4f:da:34:ca:d2:87:a7:15:51:de:
                    d7:f0:4e:33:68:aa:29:7a:92:7b:f5:52:3a:96:79:
                    b8:30:ac:cd:da:a7:f3:b5:ec:30:a8:2f:8c:03:40:
                    31:8a:3e:05:e8:78:cf:fa:04:96:03:bb:cd:78:1d:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:9A:41:39:71:56:D6:AB:2F:BC:1A:5A:55:35:29:46:D2:47:D3:CC
            X509v3 Authority Key Identifier:
                keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:06:81:a5:17:04:eb:63:42:04:a0:34:f6:ec:1e:aa:42:61:
         5a:35:b5:85:43:ba:5c:6a:07:17:13:f4:51:0c:1f:4b:29:03:
         28:60:4b:7e:02:c6:b5:f4:31:07:45:17:64:60:e6:d6:a7:c1:
         03:e3:04:3b:70:b8:91:68:95:6e:4c:53:4d:c6:e6:d1:cc:ec:
         83:b8:eb:df:5e:65:6d:1e:94:f9:2e:56:3d:b7:9a:6d:12:ad:
         05:46:c1:e9:af:35:8f:f7:f1:84:18:fa:12:b7:a5:b5:62:0e:
         ba:52:94:b2:4e:c3:ee:7a:60:b3:eb:4e:0b:83:dd:40:93:16:
         92:3e:fc:6a:8b:bf:29:9c:ea:04:01:8a:49:09:80:d7:f5:1a:
         4c:52:ea:e2:4d:81:76:47:70:9b:2e:b8:fa:26:dd:f3:2d:78:
         6c:80:d4:6c:c2:b7:f0:d4:8a:69:2b:25:e4:60:7b:ad:43:0c:
         5f:3a:21:6e:0c:59:2d:ba:87:d4:e5:7f:b9:71:32:74:b7:6a:
         32:6a:66:e1:9d:99:70:0f:c1:5b:74:c2:94:be:c4:c7:a6:dd:
         ee:f1:4f:df:6e:a0:8c:8b:f9:0e:e7:15:4f:f6:34:91:d5:94:
         11:6e:b5:a3:c8:b0:39:b8:62:8f:45:aa:81:72:7a:ad:02:2c:
         62:8b:aa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----