Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File:                     NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier:          YqksTs9c994IycSTFfezcSVu07oIGsozWLV/S6WPfHU=
Subject key identifier:   A1:2A:7C:2D:EC:6E:7D:0D:17:55:48:3B:D6:79:3F:07:2A:5F:3C:87
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer:       /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial:       01962E2ACD4C47A1FA4EFC05F558739A1CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: F470tnYSTCJIz1acwbblcooUfQxVDIu2zTAnBhmcAHo=)
                          2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cd:4c:47:a1:fa:4e:fc:05:f5:58:73:9a:1c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=a12a7c2dec6e7d0d1755483bd6793f072a5f3c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:06:b2:0b:19:1a:17:56:04:79:5f:99:21:8e:
                    00:d1:8e:36:31:30:3f:c1:3b:bc:4d:d8:09:8a:f7:
                    d1:47:74:84:c5:c1:27:bd:a7:98:01:65:ae:6b:ed:
                    f5:83:22:ea:2b:18:3d:aa:42:f1:20:c8:ee:2b:fe:
                    34:1d:d3:20:ca:de:21:03:d4:c6:c7:c4:63:2e:2d:
                    ef:70:2c:7f:b5:88:bc:0f:86:48:b4:ec:de:de:cd:
                    e8:b6:a5:7c:81:4c:2c:33:94:aa:87:59:5e:b3:ff:
                    4f:a1:80:98:2a:fc:ef:53:46:1a:3c:53:4a:95:a7:
                    91:89:70:2c:5a:b1:6b:1c:d7:ab:36:63:95:f8:2d:
                    25:4b:be:d9:9c:ea:3e:18:6c:49:62:4e:2b:34:46:
                    c4:fd:24:f9:6f:5e:c4:82:b8:53:f7:f2:9b:9a:37:
                    f3:cc:f7:82:b3:97:68:59:85:2a:4a:48:55:1f:81:
                    b7:8c:e1:e8:e5:cb:a9:07:91:af:d0:b0:0d:06:2a:
                    b7:7e:e1:64:2c:ff:0b:54:85:81:6e:07:9d:44:34:
                    48:42:6c:1f:ed:fe:2b:80:40:c4:34:dc:33:46:fd:
                    a4:6d:11:fa:c0:37:54:9b:dc:a4:37:0d:7c:a3:d1:
                    d2:4f:83:38:d4:60:80:64:6c:f9:c7:6d:68:54:9b:
                    20:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2A:7C:2D:EC:6E:7D:0D:17:55:48:3B:D6:79:3F:07:2A:5F:3C:87
            X509v3 Authority Key Identifier:
                keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:70:6c:ef:81:f5:03:66:88:c0:a7:30:29:21:d1:16:8f:b0:
         d8:ba:86:f4:0c:18:11:13:e7:81:6d:10:78:53:73:9b:c1:af:
         18:69:c5:7f:72:d0:af:0c:2d:f9:85:b9:cc:4f:31:64:70:21:
         ab:45:04:87:21:ee:f6:a6:70:bf:70:85:9d:f6:03:3d:6b:3f:
         85:57:47:d4:bc:70:ce:fc:14:91:ca:62:c1:8e:dc:4a:cb:f1:
         b9:e1:57:b2:83:db:b8:63:11:14:46:08:05:53:7a:64:19:dc:
         b3:78:f0:5b:77:8a:8c:79:26:73:15:64:9b:1d:c6:0f:25:f2:
         3b:25:02:9c:29:90:26:b0:ce:f8:d0:a1:23:d0:dd:86:50:da:
         31:f5:86:32:da:28:42:81:6d:78:60:e1:da:66:ac:0d:bc:1f:
         5b:a4:72:47:30:99:8f:47:32:8a:94:24:1e:88:64:f3:7a:a6:
         bb:5a:f2:21:3b:7c:97:3a:90:47:ec:ca:1d:72:4f:98:88:ec:
         ed:80:a5:ea:44:61:2c:4c:e9:54:5f:86:60:60:92:0f:d0:ed:
         04:ee:01:2f:f1:1d:f0:9a:41:b9:1f:b1:6f:32:04:61:74:4f:
         47:e8:d9:3e:02:72:d5:65:26:ff:87:b4:09:35:f6:1d:30:d8:
         8f:74:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----