Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
File:                     NZ8eO4BVHpihb8K7y33YfJoO_iU.mft (raw, json)
Hash identifier:          JSDLxH/k6DLElvaCnzPuPPRZ/s/5XwPFxSreIhtNEJs=
Subject key identifier:   EB:1F:9E:35:43:0A:5E:40:FE:EA:54:6D:ED:C2:16:F4:F4:38:31:EC
Authority key identifier: 35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25
Certificate issuer:       /CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
Certificate serial:       01962F3D8B5326DEEAA6BDF3C3BC220ECD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft
Manifest number:          0C16
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: NZ8eO4BVHpihb8K7y33YfJoO_iU.crl (hash: j/yaHt/yw5d7/bQXcbLW774NVJUzaj5kCSSnc6RjpUM=)
                          2: WQDK9xlCqpMVg3-ZBWFZfqNRgDU.roa (hash: 5EEZG5yrAU7W8n0dqk+GpepBnaLmDeUxI+tSTrknSrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8b:53:26:de:ea:a6:bd:f3:c3:bc:22:0e:cd:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359f1e3b80551e98a16fc2bbcb7dd87c9a0efe25
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=eb1f9e35430a5e40feea546dedc216f4f43831ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:33:52:f5:81:bc:65:1a:45:a6:2c:c3:bf:
                    bb:f5:84:83:47:9a:f7:4c:30:10:6d:2d:0d:cf:3d:
                    04:d1:06:dd:c5:d0:a4:21:9c:16:27:34:eb:22:05:
                    b0:43:53:da:9c:28:ca:65:d1:82:1d:bc:aa:25:71:
                    fc:bc:44:a6:aa:fe:cd:33:98:a0:88:82:a8:19:90:
                    52:80:87:5d:a6:12:05:8f:0f:fd:29:b6:9a:e8:13:
                    23:a3:cf:91:6d:f6:5b:e7:1e:51:db:40:d4:9c:59:
                    e9:11:53:dd:11:95:e5:9f:c1:7f:ec:38:73:c1:0b:
                    41:13:1e:b3:0f:4e:22:73:b1:6d:1a:2a:66:62:6d:
                    ba:1a:97:6f:08:61:38:b9:91:1d:d9:2f:46:46:d6:
                    1c:4f:c5:68:56:97:57:31:6b:a0:d3:5a:69:9d:6f:
                    0b:68:e1:45:e4:3c:43:65:5f:5b:72:bd:3c:a6:e4:
                    50:b7:9d:63:47:7b:48:ad:50:bf:54:02:7c:ba:e9:
                    d8:c2:a3:ea:b5:44:37:57:c0:6c:0a:1e:d1:83:05:
                    26:05:ed:40:c0:43:01:ad:c8:63:5b:b5:56:f7:e4:
                    e7:80:bc:6f:37:c0:db:60:b4:ce:fa:e3:85:db:a8:
                    da:3c:27:d1:31:97:f7:52:3a:e3:62:24:da:ec:8e:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1F:9E:35:43:0A:5E:40:FE:EA:54:6D:ED:C2:16:F4:F4:38:31:EC
            X509v3 Authority Key Identifier:
                keyid:35:9F:1E:3B:80:55:1E:98:A1:6F:C2:BB:CB:7D:D8:7C:9A:0E:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8eO4BVHpihb8K7y33YfJoO_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/89fd43-54f0-4a15-b2b1-3f3a02748c2a/1/NZ8eO4BVHpihb8K7y33YfJoO_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:c3:fd:69:41:99:01:27:f5:6e:8e:78:ad:0b:92:93:9a:
         25:9c:b8:96:75:14:13:bf:e2:fe:e7:33:48:ed:36:1e:d7:5e:
         02:24:49:c6:9d:61:ac:50:bc:4d:f5:0b:91:90:99:52:1b:52:
         86:bd:f8:e7:c7:bd:5a:f5:9a:33:6f:1a:2e:e4:cc:09:b8:e5:
         6b:a5:50:1f:06:91:57:34:8e:af:b3:be:c1:84:33:e1:9b:87:
         95:eb:a0:7e:8b:6c:0e:6c:2f:67:d3:e4:22:a3:fb:a3:09:c2:
         2a:97:e9:72:4e:65:12:97:fa:93:3c:f3:31:bd:50:21:17:55:
         40:41:01:d1:fb:aa:4d:08:fe:6a:31:ba:f7:03:b6:47:24:ec:
         cd:c6:2f:92:a9:76:be:5e:c5:c8:19:01:6b:22:14:72:d7:ac:
         ac:56:ac:2d:8d:48:5c:e3:80:b7:c8:8d:19:98:87:dd:d1:99:
         f9:4a:9a:c0:db:72:2d:76:22:7d:eb:ce:e6:ef:ef:b2:ff:95:
         8d:aa:81:fb:e2:f0:c2:48:6c:49:63:58:59:71:8a:a0:80:50:
         a5:d7:94:2d:70:e8:22:00:22:aa:d8:4f:86:cb:17:1c:38:27:
         01:a4:e0:34:3c:31:c8:f5:21:8d:b1:3d:9f:66:f5:41:b6:95:
         6e:7f:ba:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----