Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
File:                     NharGOa87eCFC8quvZWZk-hAhus.mft (raw, json)
Hash identifier:          3YaR3dbgRzB844d5tUagRxP0Yhyk6H0emjjwn8B4LHY=
Subject key identifier:   E4:7A:7C:B1:4E:5C:27:66:20:98:51:17:3C:F1:3B:05:C4:B8:25:8A
Authority key identifier: 36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB
Certificate issuer:       /CN=3616ab18e6bcede0850bcaaebd959993e84086eb
Certificate serial:       01962E98B882F4D962CD417DCC15BF421526
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: NharGOa87eCFC8quvZWZk-hAhus.crl (hash: GE+0z8LhP1aEB8F8ZWoCco65dgsDR8yCA5B4HR+AaiM=)
                          2: a86URqUjdV6NGR4_Rkuxzk9nvOQ.roa (hash: QkDObpBQb/2gqaSVK2qoFjm69vfVIidcXe/y1fY7jKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b8:82:f4:d9:62:cd:41:7d:cc:15:bf:42:15:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3616ab18e6bcede0850bcaaebd959993e84086eb
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=e47a7cb14e5c2766209851173cf13b05c4b8258a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:a5:fe:a9:d7:f5:db:32:74:fa:0b:11:0b:
                    ec:06:c6:2b:74:93:45:08:5b:be:60:fd:97:ed:c8:
                    21:47:40:aa:9b:53:ec:ec:d4:f1:a8:10:52:f4:64:
                    48:44:22:f6:a9:2d:12:2c:69:20:d0:7a:95:54:64:
                    95:76:ef:84:ff:93:a7:fa:7d:0e:6c:4f:4f:d2:2f:
                    15:d8:6f:d0:17:ec:d9:23:12:db:68:f9:5b:cf:7e:
                    a8:87:8d:5b:78:a5:82:a1:2a:02:5c:fa:6e:b8:3a:
                    98:1c:c4:7b:6a:ca:7f:6d:3b:2f:fb:6f:fd:c8:fb:
                    c4:39:b1:3e:84:c4:f6:59:c9:40:0f:74:7b:86:9e:
                    66:48:b3:aa:e3:da:46:de:49:4b:3c:0c:17:31:fb:
                    35:bf:b2:05:d1:5e:f4:7a:3f:07:32:3c:16:13:63:
                    33:cd:db:92:32:b7:63:19:bd:fe:84:dd:99:e8:4a:
                    eb:42:2b:11:98:23:6d:14:b2:d1:ac:c1:49:90:d1:
                    e8:a9:ac:07:f8:26:ac:99:3e:48:9f:49:8e:de:43:
                    cd:7f:dd:db:56:39:36:44:15:b5:7a:84:8c:ac:b0:
                    a3:e1:e1:5b:b3:2b:34:32:ee:ea:ac:d2:9b:c9:a3:
                    47:f5:63:f1:4c:fd:52:ac:a6:f3:05:71:5f:c4:09:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7A:7C:B1:4E:5C:27:66:20:98:51:17:3C:F1:3B:05:C4:B8:25:8A
            X509v3 Authority Key Identifier:
                keyid:36:16:AB:18:E6:BC:ED:E0:85:0B:CA:AE:BD:95:99:93:E8:40:86:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NharGOa87eCFC8quvZWZk-hAhus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2f34-affd-4d1c-b416-aac2ebcbf5d4/1/NharGOa87eCFC8quvZWZk-hAhus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:30:bb:26:0b:0f:94:fb:4a:c2:f4:1d:36:52:f0:1b:05:e5:
         ac:c0:95:ed:b7:71:85:d3:51:e2:62:73:1b:b9:12:9f:6c:cd:
         ed:cb:e6:94:ba:c3:31:6c:59:35:ac:af:4b:ad:8f:f0:b4:51:
         db:e9:1a:fc:7a:5a:00:d5:b4:d3:9b:ad:aa:a1:d1:5f:8a:76:
         84:46:b2:8f:0a:18:5a:92:10:16:dd:9d:08:ad:54:21:60:78:
         6c:7f:1f:4e:b5:70:c5:eb:a4:63:f3:ac:fb:44:7a:73:64:2a:
         7b:0c:9d:59:e0:f9:23:7d:cc:4c:c7:ea:3e:c7:f7:33:ba:9e:
         c0:d6:56:db:3e:f2:de:88:6d:18:1a:3b:92:62:57:7b:b3:a5:
         04:ea:1b:ec:72:7a:58:fa:a2:4b:45:10:c9:73:8b:63:60:a0:
         3f:c5:03:88:57:d5:62:4c:17:a5:1c:b1:5e:6f:95:cb:64:ad:
         12:48:3e:68:a6:12:10:8a:60:3b:17:9a:61:6b:43:d9:1a:77:
         e5:ff:5a:13:96:c2:8e:cf:2d:34:cf:80:cb:48:6a:b0:d0:2b:
         8f:f9:8b:24:cf:fb:c8:19:22:0a:99:bf:ba:59:73:99:82:4e:
         80:5e:86:b4:cc:f8:10:f9:e0:28:39:3e:16:3b:e7:87:28:fd:
         ac:9f:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----