Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
File:                     NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json)
Hash identifier:          mW4mfDvYKpbZWxK+Gdt2djpYfxvPd1ro09hQOTBhluM=
Subject key identifier:   42:37:0D:BB:39:CB:75:97:D4:32:A7:A4:65:97:0E:0C:79:E3:8C:7D
Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26
Certificate issuer:       /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
Certificate serial:       01962DF3D2E7BECEA34BBBE4BD12125671BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft
Manifest number:          7D
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: 91RnLU7QhjHDMjCAPuzSRS6luMus7zJL3fX84ty8UwE=)
                          2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d2:e7:be:ce:a3:4b:bb:e4:bd:12:12:56:71:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=42370dbb39cb7597d432a7a465970e0c79e38c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:ab:c5:04:fe:36:e9:9f:5e:71:45:b5:33:
                    43:2a:92:b4:c5:b0:9e:5b:4e:64:1c:d2:1d:14:40:
                    9c:0f:7b:70:65:f4:7f:a1:1e:21:a1:e3:ff:eb:06:
                    a7:c2:fb:75:de:5c:a9:fb:39:7e:91:a4:98:71:2c:
                    59:2b:05:f0:db:69:81:50:34:d1:fa:d6:c3:83:32:
                    26:34:49:39:e9:fb:d7:f2:4e:64:49:7c:1f:ef:10:
                    2d:d5:9b:6d:ed:98:fe:f0:05:a7:a6:2d:5c:d7:3d:
                    1c:72:dd:67:74:f9:64:13:59:78:93:0b:d9:c9:aa:
                    c1:df:d0:a5:f0:a1:1e:02:29:27:75:84:21:ec:ec:
                    cf:62:1b:ac:10:3d:d6:2b:93:4a:8a:87:d1:6f:75:
                    04:2e:6f:15:45:31:73:c3:62:44:1b:41:be:db:2e:
                    3f:bd:a4:d1:f9:52:c1:31:ba:85:51:4f:11:62:ab:
                    5c:68:c0:5a:fc:d0:6f:56:65:a1:88:25:a1:da:9d:
                    76:1e:2d:05:59:33:be:07:ad:3e:65:94:c2:50:5b:
                    8d:9b:fc:e5:c6:20:9e:e4:e3:31:ef:d9:80:14:82:
                    31:91:bf:10:80:79:a8:61:10:f5:f8:b9:95:e4:46:
                    06:61:ca:6c:64:37:34:3d:0a:84:b7:65:56:be:b2:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:37:0D:BB:39:CB:75:97:D4:32:A7:A4:65:97:0E:0C:79:E3:8C:7D
            X509v3 Authority Key Identifier:
                keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:31:d4:5d:9a:cf:8b:e0:a0:c0:38:b9:7b:01:e0:dc:77:f7:
         17:75:44:cc:33:1a:6c:52:d6:e3:ea:e6:d4:1f:ab:56:92:d9:
         ee:a5:bf:2b:79:fb:3a:fe:93:a4:e6:7e:3e:1a:9b:4d:e9:43:
         1b:ee:aa:ed:f7:81:57:f1:e2:97:e4:73:6c:2e:f4:45:b6:23:
         e3:15:92:a1:53:46:e3:a9:8d:1d:ca:06:0c:2c:ed:6e:0b:4f:
         5d:79:30:6b:a2:21:df:b0:8f:2f:45:58:61:fd:0d:da:83:ff:
         2a:fd:00:5d:6d:9e:5e:88:de:c6:a7:9f:8f:26:f8:4c:a7:b2:
         ea:22:69:ad:36:a4:0a:5a:6a:1c:66:12:f2:35:fc:68:7d:dd:
         72:e8:53:a5:66:c7:84:9a:08:68:29:eb:ec:e0:b3:39:71:ea:
         b8:cc:69:c3:3d:63:f4:8e:70:8a:48:c7:bc:f7:4b:53:ae:7d:
         58:ff:5b:db:96:aa:72:49:d8:92:71:44:9f:a3:c4:d6:61:fa:
         b1:b4:eb:26:f4:bb:eb:7b:1a:83:87:2c:08:c0:6b:3e:cf:5b:
         b2:0f:fd:f7:bf:de:31:e1:53:bb:ee:0e:b3:81:58:86:b0:0a:
         4b:54:b7:96:88:7e:1d:f6:e5:82:4f:6d:a7:08:e6:37:69:20:
         cf:84:d9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----