Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File:                     NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier:          Wdvuc1XtbZux2u9p922i9b4v2knudJPEsVbQ881mFRA=
Subject key identifier:   80:0B:B8:75:8F:30:85:4B:E6:EF:D2:BB:4A:60:3A:6F:72:82:DA:9B
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer:       /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial:       01962F7456DC5EFCE002BF28494FD18B264D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number:          12A7
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: 8GuN-54fOOWK-SbVRHbvHD1t258.roa (hash: +JAgmZYVHbTg/tn7L+SSKAVcpZBlqMe4rbmvvs3DmTY=)
                          2: KFmrVFMv5VvGN18H4jdGIeWGvn8.roa (hash: /z+1/Ei//uOKicmtTi2XHrdGdq2SuXHHljqI7g0rhfE=)
                          3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: 2JGAFVtKZHEWjq1zcRpzv9K/DrQmyyeYGI1Epwgy0A0=)
                          4: gaApv-P3VWnlKNagOLOw5elCXUg.roa (hash: uJOMrg9lvM87wMjmTs9ZCZY0pZU1l+jJJKNSBI4+HgI=)
                          5: mldZ02SgByZkxb9-hN-tKmR0o0s.roa (hash: DrkW1wHvYpTjqDlBZkGq/sAaUPB7borOxMsYKMVFock=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:56:dc:5e:fc:e0:02:bf:28:49:4f:d1:8b:26:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=800bb8758f30854be6efd2bb4a603a6f7282da9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:ad:02:bd:67:4b:65:af:3f:0e:0d:63:a3:
                    04:f1:58:5c:98:5e:be:97:70:e0:7e:43:08:91:38:
                    87:90:47:07:6a:c7:5c:5a:f0:33:b1:37:c6:a1:37:
                    0b:ba:28:16:86:fc:e5:4b:48:28:44:48:32:5c:e2:
                    01:e9:3e:43:60:43:b6:e1:ed:1a:9c:a6:17:69:3c:
                    74:2f:ba:49:56:62:45:b9:78:71:7b:50:34:d5:cb:
                    5a:3c:c3:5d:21:a4:20:4a:45:22:f1:9e:e9:d4:90:
                    c2:ed:99:b0:4b:6d:13:72:e2:ed:cd:2a:86:67:d0:
                    66:fd:e7:bd:e2:17:ad:5f:10:ad:71:9d:bb:e0:f3:
                    90:50:3c:53:c0:d8:f7:58:de:6f:b2:0c:83:1d:5e:
                    9d:49:6e:47:15:c3:1f:fa:65:27:6a:ee:1c:09:ac:
                    e2:76:29:f9:04:4f:c0:b5:c7:53:cf:e2:25:ca:24:
                    be:21:2b:31:7a:59:8d:3c:2b:16:ab:18:d8:68:40:
                    b5:f1:ec:06:74:db:60:ee:ce:ca:29:66:49:10:d9:
                    f9:6b:a4:7e:1e:9c:b9:4e:9d:20:43:0c:50:36:3c:
                    36:8e:06:70:64:f3:e6:2a:97:b1:39:51:c8:5b:ab:
                    88:a3:90:bb:fc:c3:81:de:3d:17:c5:9a:d7:3d:9a:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0B:B8:75:8F:30:85:4B:E6:EF:D2:BB:4A:60:3A:6F:72:82:DA:9B
            X509v3 Authority Key Identifier:
                keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:25:a1:a3:41:8e:b7:d9:4e:95:5d:eb:49:f7:12:6a:53:b6:
         39:a0:bf:d5:7f:82:ea:04:d6:3f:eb:d5:56:f1:4d:eb:b0:0d:
         ef:94:9a:47:28:c7:83:32:cd:0f:7c:64:69:5b:52:b3:7a:87:
         0d:40:c3:6e:2e:e4:19:fb:3f:94:58:35:60:85:06:ab:af:5a:
         ea:a1:2b:aa:ce:46:17:d7:37:f2:c6:ad:c4:fc:1d:bf:12:83:
         80:c5:b5:39:8b:30:d0:8c:e9:29:cf:80:97:e1:34:3f:9f:66:
         08:35:ac:9b:99:dd:64:42:72:ee:bd:89:cc:8e:d5:77:8d:82:
         ea:f5:1b:9a:3e:d8:8c:40:f1:fd:77:79:92:19:eb:e8:9b:43:
         13:f3:e8:f3:da:be:6e:b8:db:00:c5:54:7d:01:6e:28:d8:e6:
         31:f6:9b:4f:a7:fc:4d:8b:33:bd:e6:cd:5a:d8:e9:33:fc:96:
         5d:da:f0:58:31:22:19:13:6c:f1:25:97:4a:25:92:40:c7:92:
         df:27:10:b9:31:8c:38:06:2a:91:ab:f1:d3:ac:b4:3f:8c:27:
         83:c4:19:47:07:a6:42:64:b9:49:19:47:93:5a:9e:70:b0:71:
         c5:cf:ac:26:f3:ef:31:7a:48:69:2b:69:8c:8c:18:f5:2c:c4:
         f7:30:9a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----