Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
File:                     NkgvLv77kno8r_6h2R8kF_PS59c.mft (raw, json)
Hash identifier:          QOlavDblGc/Ad06TJ68P64plzypeLPyzLJVxG6+RmsA=
Subject key identifier:   23:99:26:F4:B0:EF:67:2D:33:A2:B0:AE:D6:D7:34:76:28:F0:BA:9D
Authority key identifier: 36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7
Certificate issuer:       /CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
Certificate serial:       01962E9977099ABE10C39593C7BC7AB27B6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft
Manifest number:          0EAB
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: G4a30ttfjHFxij-eVrmW-fidH94.roa (hash: WeyOFJKV6AN+3rP0u3s/qWHiA31iewGjEQEJOzY4D5I=)
                          2: NkgvLv77kno8r_6h2R8kF_PS59c.crl (hash: 6vgMGlqPbUwMYaS6d+vVRFBmlBfhfqd/zg6eXEuddZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:77:09:9a:be:10:c3:95:93:c7:bc:7a:b2:7b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36482f2efefb927a3caffea1d91f2417f3d2e7d7
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=239926f4b0ef672d33a2b0aed6d7347628f0ba9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:ca:09:25:af:da:87:52:a0:3d:91:b6:77:
                    20:23:d1:38:d4:a5:28:57:ff:6d:b6:d5:d0:fd:74:
                    8c:a3:7f:70:c8:1f:0c:19:df:42:94:07:ea:97:54:
                    5e:7d:4b:e0:7c:9c:bc:9b:ed:af:cc:5b:c7:bb:a3:
                    e6:2d:08:81:dd:5b:f3:74:f0:33:e8:d4:6f:77:ae:
                    52:37:33:5a:1b:b5:42:61:29:53:0e:a6:61:30:53:
                    2b:08:64:51:e6:45:62:8a:23:f6:6d:f2:ed:a4:8b:
                    b9:87:43:50:e2:85:e2:60:6c:1a:a7:11:4a:5e:0c:
                    ba:27:78:c9:82:e7:5f:10:7d:27:36:2d:be:70:87:
                    1d:81:33:2a:36:bf:05:7f:5a:00:33:c0:d5:d2:1a:
                    0d:f2:3a:0b:a8:38:a8:3f:ce:3d:f1:3f:ff:b2:08:
                    78:00:60:df:42:9a:da:62:e1:2a:c7:eb:3b:06:d0:
                    62:6f:96:54:0e:07:e6:4b:e1:7d:12:c4:a6:db:cc:
                    a4:d7:9d:92:7e:09:38:72:4a:32:a3:cc:95:cc:16:
                    d2:70:ce:ae:ae:01:34:3b:a7:df:6d:f6:94:27:28:
                    9f:13:54:cb:31:51:13:2c:80:b1:10:69:56:c2:08:
                    5d:35:b1:4d:fb:57:18:61:e5:30:bd:c0:73:d1:c6:
                    e4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:99:26:F4:B0:EF:67:2D:33:A2:B0:AE:D6:D7:34:76:28:F0:BA:9D
            X509v3 Authority Key Identifier:
                keyid:36:48:2F:2E:FE:FB:92:7A:3C:AF:FE:A1:D9:1F:24:17:F3:D2:E7:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkgvLv77kno8r_6h2R8kF_PS59c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/e4b00c-a929-48d4-b7d8-7688731bed9d/1/NkgvLv77kno8r_6h2R8kF_PS59c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:dd:f4:eb:6c:c1:38:c4:c2:bf:68:57:06:57:d5:b4:d0:8c:
         16:45:9b:26:94:58:74:ed:ad:86:d3:14:6c:be:c0:b2:3c:46:
         b1:d6:a1:f2:02:6b:cc:82:f0:19:7c:bd:50:8e:c4:b1:e1:5e:
         a4:b6:d3:22:73:00:0d:eb:a3:09:94:21:c4:30:eb:88:57:f9:
         b6:39:0c:81:a4:01:b6:f2:a3:42:0c:29:8a:f3:52:9a:28:54:
         09:59:fc:ba:be:4c:8f:09:da:74:f6:85:99:f4:77:87:90:ec:
         b8:38:a9:de:38:84:bf:59:bf:f8:df:c6:42:04:b3:84:37:aa:
         dc:bf:5a:13:fa:30:bd:c3:30:4b:54:d9:0e:2a:f2:7c:3e:e5:
         22:7d:2c:9c:6d:70:2b:0a:1f:2c:e2:a4:c9:d2:6c:e3:fb:f5:
         5d:df:5e:37:70:60:54:ee:a7:27:f6:a8:99:40:b8:2c:dc:3a:
         4c:4b:03:db:26:1f:fc:a9:68:36:2d:ac:8a:0b:0c:6b:c8:05:
         b5:3d:da:ef:72:e9:45:2c:92:ba:a3:fc:31:de:2f:98:a6:26:
         4a:25:a5:34:b1:5f:68:15:53:a8:19:22:79:83:08:98:22:a0:
         7d:9a:8d:0b:48:a6:bd:bb:9d:27:5b:7e:e3:6c:db:06:de:29:
         09:0d:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----