Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
File:                     NgHDzOanHKshpLut8KuE3ePyurI.mft (raw, json)
Hash identifier:          Z3EMCHgZV1f5ThM8uqAnKvxasoK14E5bQZ6IParGD5g=
Subject key identifier:   79:2E:66:1D:E9:A8:C9:DB:3C:D7:5D:55:95:C4:DC:17:9B:D0:4E:65
Authority key identifier: 36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
Certificate issuer:       /CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Certificate serial:       01962E995A65376804D3993D6D66822EDBF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: Mk7YYF4o9LB74wKwKgBbcKzvyH8.roa (hash: OCqXIpcMD6jOp7DHnSx2liWfa4cjdFDkG92oQWOUUNo=)
                          2: NgHDzOanHKshpLut8KuE3ePyurI.crl (hash: k3J8IcasjRvte9tj9Xx7h5IS6yQbqF36tWVjhIw7uOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5a:65:37:68:04:d3:99:3d:6d:66:82:2e:db:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=792e661de9a8c9db3cd75d5595c4dc179bd04e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:ef:cf:cb:7e:6f:c1:70:31:be:f8:23:bf:
                    7b:7c:ce:fc:ea:0c:56:de:9b:30:13:6f:b5:72:1e:
                    78:73:b0:6e:76:18:55:e9:9e:8a:ae:7f:60:bc:c7:
                    41:4a:cf:e2:cf:81:22:e1:12:f8:c0:48:60:62:1a:
                    b4:ab:55:47:8a:83:7a:8a:3d:5f:76:93:9c:c4:cc:
                    1d:de:7d:76:28:bd:45:cd:b6:92:fb:11:9b:34:4f:
                    e3:1d:35:f5:2f:94:4e:d5:24:3f:ed:66:00:6f:35:
                    72:db:19:50:64:fb:87:1f:c2:63:38:74:ca:51:f1:
                    c5:7a:4f:57:75:81:ae:4f:34:5d:a5:5c:88:40:d4:
                    4b:72:c0:1c:9f:a7:53:3b:30:79:d0:65:d5:5f:12:
                    96:8b:86:b6:a3:47:23:92:c4:7c:5a:b9:a8:2f:d0:
                    13:13:1e:ed:96:52:72:51:2e:4e:01:57:b9:ed:6d:
                    d4:cb:d2:0b:84:ae:dc:db:2c:7b:3b:49:80:a8:80:
                    cc:12:33:6f:3e:97:90:80:13:9f:eb:5a:e0:48:26:
                    4b:e8:bf:af:c8:7c:80:bc:29:2f:33:14:e6:5e:f1:
                    1c:03:47:f1:44:c6:bc:70:1c:f2:e5:c8:71:fa:a5:
                    21:65:39:ba:b9:2c:d2:2d:d3:71:72:fa:b6:6b:5b:
                    5e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2E:66:1D:E9:A8:C9:DB:3C:D7:5D:55:95:C4:DC:17:9B:D0:4E:65
            X509v3 Authority Key Identifier:
                keyid:36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8a:c5:c8:3e:3d:93:00:a7:e2:09:87:10:63:36:fb:66:3a:
         57:05:0d:3c:d3:d8:c0:1b:8a:cf:f0:66:48:7f:15:26:f3:00:
         b1:12:e5:73:5d:c4:c4:d5:c0:18:ad:c9:63:6a:5c:b9:2c:a9:
         e7:5c:bc:84:28:7e:08:ff:0f:53:04:22:69:4c:44:71:d0:34:
         4b:f1:8f:8d:7c:e6:ad:4e:f0:e6:c3:47:5a:fe:10:e6:68:1e:
         4e:c1:e9:72:bb:c3:35:cc:62:22:55:7d:b5:d1:44:da:85:3b:
         63:af:53:af:7b:73:3a:7b:a4:ed:4e:6b:44:53:58:9a:01:3b:
         21:b9:83:31:47:4f:83:9b:be:f2:86:f9:76:17:51:e7:5d:cf:
         19:58:a6:7d:1d:ac:b3:7e:29:02:45:09:f2:74:04:ea:96:9b:
         2c:08:64:6c:8c:a7:83:db:7d:45:14:dd:70:8b:87:79:18:d4:
         a2:d1:59:c2:63:cc:7a:a0:47:40:61:9b:88:b7:f5:b2:22:e4:
         29:8f:81:ff:94:44:05:ea:58:76:65:78:b1:13:20:80:7b:be:
         58:17:ff:bd:c2:4b:65:5d:8c:a1:5b:10:c7:98:68:ff:ef:24:
         f2:05:e5:e2:4e:d8:01:4a:23:06:c4:87:47:b2:41:e4:6d:70:
         6f:c7:8f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----