Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File:                     NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier:          Ow/s0M46Ceh6IuiRqRSrtxNjRqP4wz7zbyq9Nydg8Po=
Subject key identifier:   52:63:65:F4:B6:B3:AA:90:57:92:43:A3:59:C6:43:84:F2:CD:4C:F7
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer:       /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial:       01962F071CFEB198710B36CB692F46E433C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: Y9tGKekzaIOLYxx/T+Qk/WXp2yZKU2SNP+limDT+lTg=)
                          2: t18fV6YPwA2MAEndpMc8X0ToRWw.roa (hash: H0VTW6jFucioUCNK4Zk3Ys3jO7tUvJYmK3uUV0BFJlM=)
                          3: udb2liD_hmmSjMQHfxOs3ILFeak.roa (hash: I8Ss2wHMn10fRDENu7eQisoAjY4IBsPU1iECaxEl9xQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1c:fe:b1:98:71:0b:36:cb:69:2f:46:e4:33:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=526365f4b6b3aa90579243a359c64384f2cd4cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:87:6d:42:3a:26:5a:f0:2e:e0:b2:f8:ed:
                    b3:2d:b7:66:48:04:08:bc:ca:e7:55:38:23:b3:28:
                    ed:1e:ad:d4:38:d2:87:81:8c:21:8e:ff:ea:44:65:
                    7f:98:c0:fd:bb:96:7b:9e:29:ae:14:4d:b5:51:ee:
                    3f:9a:98:fa:72:6e:8b:20:c8:6d:92:2a:bf:49:7f:
                    48:03:42:c7:55:a6:e7:fa:df:b6:ef:45:bd:89:82:
                    8d:6c:57:04:6f:96:33:4c:1d:2a:80:c6:e7:18:ce:
                    55:d6:9f:b6:09:cf:3b:29:a1:d6:bd:ef:4d:70:95:
                    16:cf:50:aa:79:d9:9a:59:cf:61:f7:66:64:90:9e:
                    0f:f7:ac:7e:3b:cc:3a:f3:5c:b3:93:7d:cf:16:59:
                    61:47:1f:1c:86:ab:1e:1d:3d:fc:1c:9f:69:04:69:
                    ea:27:89:fc:77:03:6f:b0:43:bf:37:62:24:55:57:
                    85:38:d6:7a:10:51:44:19:5d:d9:ea:5d:cf:88:f7:
                    af:d7:ab:95:6d:57:b8:db:6b:b3:ff:6c:3e:30:0a:
                    3d:76:9d:3c:ce:be:0d:87:7b:89:67:51:8d:72:4d:
                    2e:83:ae:5d:8c:4b:07:d2:43:00:1e:3e:46:5c:6e:
                    be:59:85:bc:2d:5e:86:15:4a:71:f9:51:fa:7f:7f:
                    a7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:63:65:F4:B6:B3:AA:90:57:92:43:A3:59:C6:43:84:F2:CD:4C:F7
            X509v3 Authority Key Identifier:
                keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:00:df:72:38:49:74:56:f5:d3:ee:6f:90:8b:3d:5a:44:f9:
         27:b5:6e:a6:aa:5b:65:87:23:17:eb:37:c5:d4:d4:69:21:25:
         c2:1c:21:d8:ad:fd:a6:e9:34:4a:48:11:ad:a4:44:64:95:cc:
         09:61:1a:5e:e7:f5:4e:94:7b:6a:da:da:f6:a0:53:4b:e7:81:
         41:34:cb:e1:eb:99:e7:db:ef:83:44:bd:30:72:31:a1:07:f3:
         dc:58:0e:79:79:32:8b:91:0a:6b:bf:2a:1f:01:06:92:e6:3a:
         de:5c:c8:98:ee:81:97:2f:85:9d:ed:1e:b7:bd:7f:23:6e:4b:
         83:de:96:ee:b7:76:8c:37:25:b4:e9:81:d8:ae:17:ff:d3:55:
         26:3a:d4:5f:13:1c:4a:54:f8:fa:5d:01:56:46:35:f3:70:a6:
         2f:04:aa:f0:e7:fd:70:7a:ad:bd:90:a9:a9:10:87:91:42:0c:
         88:29:b2:af:9e:9c:89:7c:86:16:74:be:05:f3:66:e8:4e:85:
         df:d1:ca:cb:cc:d8:b2:97:bb:39:f8:79:fc:4e:06:b6:9d:dd:
         f0:40:8d:59:e3:ee:29:c3:f8:b8:e2:5b:9c:61:a5:ce:1b:52:
         62:e5:2a:ef:2b:4e:df:ac:f6:ff:22:32:95:17:b1:98:f6:e8:
         55:cb:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----