Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
File:                     NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft (raw, json)
Hash identifier:          eJSdMlU4Vnk3kLCU+OwqX9s9c7f3lR7TrWTnuhFN++o=
Subject key identifier:   65:34:5A:73:70:D9:23:F8:96:9C:5D:52:5D:9D:35:8F:26:EC:07:A0
Authority key identifier: 35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0
Certificate issuer:       /CN=3546ff45ce50557edc4c0306e1f869482ad423e0
Certificate serial:       01962F3DDB27CAAECF91929509FE4951D583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft
Manifest number:          06A5
Signing time:             Sun 13 Apr 2025 13:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:45 +0000
Files and hashes:         1: NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl (hash: llKAGyespl2zVbVb6xtUvBAlknnZkdhwmrwENMywyWw=)
                          2: Rv1036YGXSxZ-LNtEMTG-yB-cpE.roa (hash: 9hIhakYU1jL8ELRanjY68hTQVJc33GMXNtFCdw91hfI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:db:27:ca:ae:cf:91:92:95:09:fe:49:51:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3546ff45ce50557edc4c0306e1f869482ad423e0
        Validity
            Not Before: Apr 13 13:01:45 2025 GMT
            Not After : Apr 14 13:01:45 2025 GMT
        Subject: CN=65345a7370d923f8969c5d525d9d358f26ec07a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:31:d9:ee:6d:3e:d7:7e:b9:f2:69:a1:9f:
                    d9:29:3c:05:f2:b1:46:5e:c6:bc:15:51:4f:c4:0b:
                    3e:70:cf:8a:20:7d:8a:42:3c:10:14:e9:ed:ea:07:
                    c1:d9:b6:49:2d:03:f8:d8:b9:61:19:6e:d7:46:bb:
                    16:a1:49:d0:73:48:b5:c8:c7:18:f0:a1:a3:56:39:
                    51:f8:71:eb:5b:43:6e:15:ae:4c:38:80:b2:96:27:
                    e2:d9:cf:b2:7a:8d:04:ba:2f:63:ee:0d:64:d8:d0:
                    58:51:53:b2:e5:d6:a3:78:26:bd:2e:c9:70:21:e6:
                    77:ca:54:81:e6:96:6d:3a:71:84:c5:fe:e8:71:c0:
                    a6:ed:25:15:93:d2:88:90:de:c1:07:43:15:5a:ac:
                    76:37:6f:3c:84:f1:39:cf:1e:d8:a9:05:dd:ea:61:
                    06:3f:e4:8c:5c:11:88:a4:66:ba:c1:82:3c:2e:eb:
                    08:ba:74:67:fc:39:17:02:82:3e:f1:b5:59:2e:e9:
                    22:5b:10:e5:59:ef:33:78:c6:0b:12:c3:01:ac:53:
                    a3:eb:6e:e2:e6:f1:62:b1:45:34:c4:fb:1b:87:73:
                    10:44:6a:67:57:71:5b:52:b9:5c:0d:dd:d5:9c:ae:
                    bc:05:43:56:2d:6a:6a:d9:53:96:82:d6:b3:64:10:
                    35:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:34:5A:73:70:D9:23:F8:96:9C:5D:52:5D:9D:35:8F:26:EC:07:A0
            X509v3 Authority Key Identifier:
                keyid:35:46:FF:45:CE:50:55:7E:DC:4C:03:06:E1:F8:69:48:2A:D4:23:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c90869-ee20-4939-840e-640c74a94cc6/1/NUb_Rc5QVX7cTAMG4fhpSCrUI-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:49:26:fa:f8:45:c0:98:b0:2d:df:17:4c:72:7d:75:db:44:
         85:27:62:24:01:59:b2:53:b8:37:e2:65:82:d9:b0:1b:01:d2:
         cc:b2:2c:bd:45:90:52:d2:4e:47:5f:89:53:a5:a3:c5:07:46:
         27:f2:85:09:ee:e1:e6:73:72:3b:c1:8c:66:ce:c5:62:2a:18:
         0b:ad:37:9d:67:be:7f:9a:a3:24:63:63:33:6a:df:53:7f:e0:
         53:b2:dc:bc:d0:ca:9d:ce:13:1b:cb:ba:8f:fe:e3:e1:93:74:
         cd:65:39:6b:97:16:6d:b8:ee:05:48:d3:8e:ef:7a:0a:06:1a:
         0a:c3:45:ce:4e:8d:71:9a:bd:e7:13:a0:8f:3b:f3:7c:ec:44:
         98:05:56:58:99:a2:56:e0:ec:a2:82:db:40:aa:a9:bb:9c:18:
         3f:3d:24:6d:89:57:23:5e:46:99:7d:ee:2d:04:ae:38:a9:04:
         a0:98:0b:cf:fd:e6:63:5e:20:d1:9e:88:6e:9d:68:a2:fb:dd:
         4c:b0:66:df:ad:d0:f1:37:78:3b:1a:81:40:2a:69:9e:5b:96:
         e0:ed:27:0d:a3:64:7f:c1:80:80:e5:c2:46:31:a7:16:b6:3c:
         21:5f:49:e1:e6:7d:88:81:af:5a:af:69:c0:e1:4f:8a:10:73:
         7f:44:52:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----