Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
File:                     Nc7L-GUaViTyKB3DVqd800vVupY.mft (raw, json)
Hash identifier:          L0Jt2ludMa80UkX94fB3RYu9LqKGGuyLbFprn/iIhc4=
Subject key identifier:   CE:7B:87:32:70:DD:BF:1A:74:64:29:40:10:82:A3:93:66:C7:34:1A
Authority key identifier: 35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96
Certificate issuer:       /CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
Certificate serial:       01962E98C2752B5F82E6C000F17A72E7941F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft
Manifest number:          0126
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: 5LZSCca0J2TzSinZYqA5NQjQQCc.roa (hash: z0sbgeMJFoDHxywMU0zRoEIuWP8/rXbc5c9YaeSPe3A=)
                          2: Nc7L-GUaViTyKB3DVqd800vVupY.crl (hash: xf1hcKM9CxJbVv1W5oVR9fJqk/lyKYwSyZxguqX/mKI=)
                          3: cr95DzEVhWtLA_b8PXKOtJAUld0.roa (hash: hVWUfMq7GUDS1WFoj/BlW6uwrsRcoF2yZGnDVDwJpMc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c2:75:2b:5f:82:e6:c0:00:f1:7a:72:e7:94:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35cecbf8651a5624f2281dc356a77cd34bd5ba96
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=ce7b873270ddbf1a746429401082a39366c7341a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:24:9d:0a:f0:03:ff:67:32:60:5f:81:28:ae:
                    44:c1:94:1c:ea:d7:0f:58:d1:e3:f1:67:8b:54:4a:
                    0b:b7:b4:4d:58:a3:6e:ed:6a:de:ad:fd:db:f0:c1:
                    fb:49:d0:88:b8:01:aa:15:4e:ff:91:cc:ad:cd:7b:
                    30:62:bf:12:7d:17:4f:5a:99:a5:c2:80:dd:79:b2:
                    47:ba:4d:f1:59:e7:f2:50:90:3d:44:ae:4e:24:ce:
                    aa:7e:5a:92:29:8b:d2:b2:ab:bc:7d:e9:60:b1:3a:
                    99:4c:61:e9:d1:12:a4:ce:11:9a:34:ac:7d:c0:79:
                    9a:e0:8f:2c:70:95:af:f3:1f:0f:bf:50:96:9a:ef:
                    39:95:4d:b1:57:0e:e6:69:a9:ee:00:4c:b9:ee:78:
                    32:1a:e9:bc:f9:a3:ef:0a:ba:6a:94:3c:65:ae:0c:
                    08:21:bc:ef:3b:23:ff:66:d5:52:9c:be:3a:ec:c7:
                    d6:a6:0e:a2:94:12:6b:fc:8d:3a:43:5e:75:f2:61:
                    07:b8:fa:89:b2:19:9c:52:b5:fb:bd:02:c1:e7:8f:
                    86:76:94:a7:9d:8f:a6:4a:72:c4:ed:17:04:63:41:
                    a6:cd:e5:d4:d5:dc:c8:78:da:e7:99:1b:ab:b8:91:
                    66:0f:63:83:38:0e:38:78:f7:95:bd:29:c2:8a:89:
                    2a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7B:87:32:70:DD:BF:1A:74:64:29:40:10:82:A3:93:66:C7:34:1A
            X509v3 Authority Key Identifier:
                keyid:35:CE:CB:F8:65:1A:56:24:F2:28:1D:C3:56:A7:7C:D3:4B:D5:BA:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nc7L-GUaViTyKB3DVqd800vVupY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/86717f-ff1f-4b95-ae81-61a6d72ac49c/1/Nc7L-GUaViTyKB3DVqd800vVupY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:0f:ca:4f:e9:af:b9:c7:bd:6e:4b:f3:19:dd:66:c1:34:fa:
         ff:74:60:37:f8:6e:46:2d:e5:92:10:9a:df:3c:4a:b8:04:0b:
         98:83:97:26:8c:82:af:a5:c6:38:70:d5:92:cc:46:34:9d:f1:
         c1:e1:38:49:ea:f6:ad:5f:94:2b:e4:cd:28:94:71:1a:79:42:
         00:29:9b:5f:83:15:08:76:f5:21:be:eb:14:aa:40:03:82:48:
         46:f0:eb:c6:73:f9:e7:05:53:71:69:f1:72:3f:c0:dc:9f:0f:
         8e:18:f8:6e:00:97:00:d8:7b:6c:13:a7:da:49:ec:78:09:8e:
         8a:e6:2e:10:9b:71:7b:f2:38:72:d9:3d:dd:11:4a:45:f7:04:
         2f:8d:7f:fa:08:07:a9:72:7a:59:76:e8:b5:8c:b9:bb:c4:ea:
         b4:7d:57:2a:95:7c:bf:a8:53:f8:dd:e1:0e:a2:e0:da:36:c5:
         9e:d7:82:ce:0b:9d:cc:76:fc:57:58:a8:29:21:26:63:54:86:
         d4:2b:ea:80:60:6d:e7:42:0f:79:68:7a:fc:52:89:ba:50:34:
         b0:0d:b0:7a:b8:94:24:35:1e:ef:3d:8f:7b:8e:be:22:dd:44:
         51:2c:e2:c1:d9:9f:c2:2c:d0:23:af:0c:cd:16:73:e1:73:b7:
         24:e0:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----