Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File:                     NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier:          7WZO+AR2dVGdDJb9RV+0WL8ZRd8jYT4NR2wndhzWMQM=
Subject key identifier:   00:AC:6F:41:59:60:0A:CB:F4:0A:7C:85:AB:9C:FF:30:C1:3E:78:42
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer:       /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial:       01962F74B51437801CAA78BB9881A43288F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number:          0E21
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: MjfPB6z00e-ff7RNJtIi20gDUz8.roa (hash: Cpw1zTo9jE0fDsY0ux+7L1DgxTy3Nnzm8fXHw47pw5Q=)
                          2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: bwwNSUs2FnCQGS9FHVHRLFVmFc4PXAHJ23l2xMnSGSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b5:14:37:80:1c:aa:78:bb:98:81:a4:32:88:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=00ac6f4159600acbf40a7c85ab9cff30c13e7842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:77:cc:2a:15:e9:59:30:c2:a2:28:a0:c4:
                    a5:5d:dc:fe:a9:e8:29:cc:12:e4:ed:39:b3:d2:43:
                    23:89:40:5b:f4:4d:a2:c0:b1:f5:fe:4e:e9:c9:28:
                    76:07:ea:91:69:d4:2d:24:83:8e:ce:1e:05:c4:cc:
                    6f:1c:e6:ba:f5:0a:ad:ab:68:33:a8:d7:81:56:68:
                    ae:fc:83:01:b8:54:f7:cb:b2:97:05:38:b7:d7:e0:
                    ca:53:ef:7a:35:77:fd:8c:8a:c7:8a:dc:ae:ff:ba:
                    93:e8:db:6e:52:f2:a0:8d:5c:ea:10:9e:c2:d9:c3:
                    1a:72:ef:ae:77:b8:b8:3c:eb:4d:c4:82:59:7f:80:
                    eb:dc:f6:e3:4b:b2:7f:bd:75:28:b6:fc:cf:a1:a4:
                    54:96:8f:a5:3a:43:37:bc:c4:6b:02:74:79:ab:8a:
                    84:95:86:37:60:89:37:b5:fd:6b:e5:94:d5:56:1f:
                    c9:2e:fe:bb:55:53:e8:ca:35:8d:89:79:50:f6:63:
                    fe:94:a4:e3:53:bb:97:5a:13:32:37:98:26:d3:61:
                    e1:1f:2f:a6:63:2c:0c:e6:02:d4:29:47:68:d8:9b:
                    4a:49:27:a2:5b:eb:24:30:2f:fc:fe:e2:0d:38:a1:
                    22:ca:d2:b9:e9:89:56:5a:a2:b4:09:50:9d:1b:77:
                    67:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AC:6F:41:59:60:0A:CB:F4:0A:7C:85:AB:9C:FF:30:C1:3E:78:42
            X509v3 Authority Key Identifier:
                keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:58:04:cc:32:b0:9c:91:f6:4a:cf:b1:51:12:24:ee:b5:86:
         df:c0:a5:12:5a:9b:2e:68:74:62:ee:eb:f7:83:8a:e6:d4:4d:
         f2:e1:c1:ed:ce:cd:a6:86:94:5a:8d:86:57:7a:1b:db:fb:4f:
         8a:d6:c4:3c:cc:be:e3:51:d8:ff:b6:3f:38:44:9c:4e:e8:f7:
         33:4c:89:97:1f:d9:ce:56:20:56:1b:b2:04:4e:7b:39:10:23:
         42:e2:8a:e8:f9:ab:bc:9d:11:44:aa:13:5d:4d:32:b1:d1:1f:
         59:a2:40:75:8d:27:d2:f0:84:63:c3:50:71:c0:2d:f4:87:81:
         9f:2f:b2:b2:a4:c0:1b:73:49:cb:3c:d6:89:e0:66:f0:f2:d8:
         77:e0:d5:b9:43:d4:e0:a8:33:f8:b1:b8:0d:76:b0:a4:6a:fe:
         fa:59:f5:fd:99:55:60:86:f8:15:99:d0:3a:97:34:4e:b9:16:
         ca:4a:21:6f:01:9a:3c:46:8b:f0:45:ec:b9:08:92:89:50:fe:
         61:76:04:a3:77:ea:f8:4b:b9:a8:77:7a:e7:c9:43:58:ca:56:
         90:ab:82:db:e6:8c:a2:70:b0:a1:50:36:1d:bb:03:99:9f:50:
         ad:a5:ca:45:39:b2:21:90:4c:42:09:21:dc:18:9f:b7:13:74:
         0b:aa:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----