Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File:                     b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier:          GNlMDliT3SfRKQc0ql+w96YApNWaM6ISOVFI3QyHjt0=
Subject key identifier:   C0:05:1E:A0:54:01:FB:46:90:99:39:36:72:C0:8A:D3:3E:AF:C8:CD
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer:       /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial:       01962E9906A9D3046315F823DCF9BF8524E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number:          0CB1
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=)
                          2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: Bqq09x2yA3arsgXy4Sr+Yc+a35wtheNf7qzhpPTpcmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:06:a9:d3:04:63:15:f8:23:dc:f9:bf:85:24:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=c0051ea05401fb469099393672c08ad33eafc8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:0a:44:e5:9d:e5:9f:25:da:cf:6b:1f:56:
                    9a:13:e7:80:cd:93:da:bc:2d:08:2b:d2:25:85:53:
                    81:09:28:5d:4f:1c:1a:61:1b:fe:3f:1a:20:b3:65:
                    a4:bb:30:f6:20:04:ca:e1:6f:8c:d6:01:f8:bc:32:
                    9d:5b:cd:54:aa:7e:66:a9:60:8c:86:35:a1:e0:7a:
                    86:41:c2:8a:55:fa:47:6e:4c:5d:00:da:5e:ec:52:
                    b0:47:2a:71:76:28:18:bc:0e:48:bd:87:60:6a:31:
                    87:59:29:4a:01:62:ee:d6:de:a0:92:13:64:c2:19:
                    9c:3e:f5:79:88:0c:8c:ac:59:ed:1b:6c:46:9f:6d:
                    e5:3e:81:56:f6:00:a6:df:e7:de:d1:b1:72:10:85:
                    22:32:11:e6:97:ee:ed:5b:22:9e:50:af:17:44:77:
                    bb:b5:17:87:cc:4e:3b:b8:80:07:e2:e1:51:3d:7f:
                    2d:2e:f5:e6:d5:74:0f:64:c2:3d:33:ab:f5:2f:f2:
                    a1:35:3b:85:e6:d8:8e:18:d3:16:cb:f8:84:71:14:
                    0e:a1:f6:ac:41:6f:cf:c6:0b:67:23:e9:f6:2b:1e:
                    80:1d:d9:89:91:74:f4:44:a0:1b:80:61:01:9c:92:
                    9c:2d:ab:ff:dd:31:91:47:82:6f:90:1f:7c:91:60:
                    38:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:05:1E:A0:54:01:FB:46:90:99:39:36:72:C0:8A:D3:3E:AF:C8:CD
            X509v3 Authority Key Identifier:
                keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ab:aa:d2:b1:59:29:f9:c6:0b:5a:2a:c5:29:f9:5a:af:48:
         99:e0:4e:54:90:f6:b5:15:74:b6:be:66:12:a1:a9:97:e9:d5:
         33:c0:6e:c4:d1:7e:1e:61:4f:20:cd:bb:b7:a8:0d:40:94:05:
         f1:83:e6:72:09:33:36:5b:c5:ab:f5:a7:b0:86:61:35:b8:e6:
         41:94:24:6b:c8:64:44:7f:ac:1c:96:41:71:8c:ec:6b:87:bb:
         29:dd:73:b7:0e:6e:d3:25:8e:e2:8b:31:da:93:21:0e:15:4e:
         a9:41:76:00:d9:5d:74:14:67:3e:c9:a5:57:79:c2:7b:42:f0:
         92:a5:d2:08:03:ad:15:3f:7c:e0:4e:01:9d:c6:d7:04:e4:bf:
         81:3d:f0:8a:1f:19:3d:b1:da:7a:57:7e:a5:6f:44:a6:3d:05:
         fe:0b:d6:40:93:2e:ca:c6:32:9f:61:a8:2e:e1:33:91:5d:f8:
         43:82:ad:7b:ac:b4:5c:22:e3:31:32:db:7c:99:c1:f0:47:a5:
         5d:76:ec:8b:59:43:bf:3e:41:51:3a:5b:41:d6:93:2e:16:10:
         01:8c:26:c0:31:18:30:96:50:a0:d8:48:d3:8c:21:68:12:f9:
         5a:71:f9:1e:b6:67:43:88:1c:05:a3:3d:2a:1f:f6:d6:79:97:
         63:74:65:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----