Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
File:                     NdrPcDZ9CsMFpawau68jmLJtk1U.mft (raw, json)
Hash identifier:          pykWcKifhYKtEopQKYk9+gVVut3qP0+h7JLdtRjW3JE=
Subject key identifier:   C9:EA:91:10:8F:85:D3:D5:BB:7B:9C:8F:AD:45:5C:1F:E5:09:DE:AD
Authority key identifier: 35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55
Certificate issuer:       /CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
Certificate serial:       01962FAB7F85A61F32BC2D3DD8F160C2CE78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft
Manifest number:          0284
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: NV-I2foKzHLj-RMxKytozaQe67g.roa (hash: PhlDXyOiHHSXRcXTISte8ar8TbgSTtrPQqIchH8glHs=)
                          2: NdrPcDZ9CsMFpawau68jmLJtk1U.crl (hash: 20694NcOmj7wlZ2om9MZy5r0yIQeVrKSKTqfPhOkpB4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7f:85:a6:1f:32:bc:2d:3d:d8:f1:60:c2:ce:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dacf70367d0ac305a5ac1abbaf2398b26d9355
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=c9ea91108f85d3d5bb7b9c8fad455c1fe509dead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:fd:85:39:f7:34:fa:78:f0:1f:a6:2e:2f:
                    29:a6:7b:01:0e:8e:e9:c8:3f:cd:77:43:00:ad:62:
                    ff:cb:af:ec:f5:25:ab:1e:bd:a2:17:d6:c0:4f:15:
                    25:d2:62:63:bb:55:27:7e:41:b2:38:47:ec:ee:0a:
                    8e:4f:84:5a:79:8e:52:39:d4:d4:1c:f7:c9:65:34:
                    89:a0:68:76:73:04:88:eb:74:70:36:47:34:10:89:
                    2e:6b:83:9c:6b:09:92:4c:be:0f:ce:21:e8:75:f4:
                    a2:2f:57:a8:3e:09:c8:03:51:1a:80:8d:6b:d9:4a:
                    91:f6:38:7c:83:30:d7:8a:d9:8c:b0:67:94:fd:84:
                    38:e9:44:95:a7:a7:ac:87:1a:2f:b9:d9:b5:9d:7b:
                    d1:d9:61:a0:5a:96:b1:eb:5e:1b:e6:58:02:c0:26:
                    ff:16:cd:f5:95:c3:7d:7c:da:ad:37:99:13:8e:96:
                    43:92:3a:73:d7:e4:38:e4:c5:27:f4:ea:58:1d:5a:
                    d9:9f:66:72:d8:b8:bf:7c:ee:1e:78:49:bb:65:d9:
                    81:a1:3e:ff:02:e2:d5:6f:21:e1:51:bf:aa:56:89:
                    0a:6c:93:1a:80:9f:06:33:4d:d6:a6:70:83:b4:46:
                    7e:1b:27:7a:ef:97:5b:6e:b5:bc:5d:9c:98:7d:15:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EA:91:10:8F:85:D3:D5:BB:7B:9C:8F:AD:45:5C:1F:E5:09:DE:AD
            X509v3 Authority Key Identifier:
                keyid:35:DA:CF:70:36:7D:0A:C3:05:A5:AC:1A:BB:AF:23:98:B2:6D:93:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NdrPcDZ9CsMFpawau68jmLJtk1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f6892f-51b6-4e4a-b1e0-fd3fd1803294/1/NdrPcDZ9CsMFpawau68jmLJtk1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:75:2c:17:0b:3d:93:1b:e5:ba:1d:24:05:7c:03:ce:ac:
         4d:05:0a:69:7a:df:73:be:2b:99:77:e5:7b:d3:21:3e:a8:ae:
         8c:f2:11:4c:f8:66:24:0c:19:3e:4a:c7:97:9c:4a:c0:65:cb:
         ef:a5:13:2a:52:6e:ed:1a:5d:4e:ac:78:96:d4:7b:a4:52:8d:
         d1:5d:f2:9e:76:81:d9:d5:93:77:8b:8a:9f:24:52:25:ac:bc:
         21:30:84:93:9d:ed:51:6f:9c:59:e0:e7:71:a3:87:ac:38:49:
         0e:80:c5:f8:09:25:57:81:b7:99:0b:c6:c4:e9:6e:f6:d5:02:
         01:e2:91:35:19:6d:bb:03:22:71:82:ab:45:38:ec:ff:19:82:
         b3:f7:9b:fd:b6:48:b6:fa:72:67:0b:e8:a5:05:99:cf:8b:ed:
         de:76:99:87:2b:5a:61:ca:56:2a:e4:2a:06:df:4e:93:2e:8e:
         e2:fa:fa:73:67:eb:e7:3e:69:c2:f2:e4:87:9d:d8:2b:67:7d:
         d3:81:ba:d3:ec:1a:e7:d6:c1:26:d5:7e:68:6d:97:e0:b5:0e:
         47:79:24:52:e4:f6:99:b2:a5:e7:a3:79:6e:0e:67:88:70:8b:
         29:bd:ee:fb:a9:28:29:17:2e:ee:33:bd:71:2e:39:8c:95:07:
         b5:88:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----