Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
File:                     NuBUKH2-dgYtF3DYPGoWAADbDX0.mft (raw, json)
Hash identifier:          ptvAvbITbJDTDNJOe4toRNgFs1AOtzOsVBYTTpSEi5I=
Subject key identifier:   A9:BE:4B:BB:F7:0C:35:94:BA:17:4B:3A:6F:EE:3F:30:E9:7D:53:70
Authority key identifier: 36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D
Certificate issuer:       /CN=36e054287dbe76062d1770d83c6a160000db0d7d
Certificate serial:       01962E98F9F51B1AEEB133F177670A5CBF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft
Manifest number:          0496
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: NuBUKH2-dgYtF3DYPGoWAADbDX0.crl (hash: PGzURd5gWN+gAhA482tAhJBAHoHWtli1S6pggFV2Npw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f9:f5:1b:1a:ee:b1:33:f1:77:67:0a:5c:bf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36e054287dbe76062d1770d83c6a160000db0d7d
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=a9be4bbbf70c3594ba174b3a6fee3f30e97d5370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:0e:a1:b6:6f:ff:2f:b5:f0:22:60:bb:72:
                    ad:ab:24:62:ca:c7:8b:1b:af:63:d6:fe:b0:93:63:
                    f3:ec:8f:e7:29:c3:c7:1a:9a:6d:79:06:1f:ad:b8:
                    df:a3:2a:c8:d2:10:d1:65:78:95:53:d5:ea:0e:f9:
                    a5:5f:da:63:76:f0:b4:8b:0a:eb:e6:5e:6e:4f:b2:
                    29:09:d6:4e:12:85:eb:4d:1c:0b:cf:63:b6:25:21:
                    f4:17:ab:b1:ca:26:5a:b1:23:1b:b8:8a:f3:92:4f:
                    be:8d:92:01:44:4f:98:26:4c:98:fc:4b:e0:8f:8c:
                    4b:c8:89:41:26:95:23:6d:1e:60:a3:1f:e9:24:f0:
                    7e:57:50:58:88:7a:38:c9:9a:1d:4c:03:83:bb:9c:
                    ae:39:ef:88:53:de:e0:b3:23:b5:3c:29:9c:01:12:
                    ec:e9:07:85:6f:0d:3d:e1:c8:1b:d0:62:b5:19:f3:
                    1e:ee:4f:06:e1:56:f3:0b:94:9a:a9:6c:d2:58:12:
                    3a:c7:71:75:e1:16:3b:d5:81:56:23:d3:e8:13:2b:
                    2c:c4:3e:5d:c0:95:05:0e:ea:3d:0b:a8:06:6d:24:
                    c7:5a:9b:36:86:f1:ea:a2:71:1a:9e:9e:b9:ac:3e:
                    8e:e0:d1:ee:11:6e:bf:97:1b:65:60:58:4a:d5:e9:
                    7d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BE:4B:BB:F7:0C:35:94:BA:17:4B:3A:6F:EE:3F:30:E9:7D:53:70
            X509v3 Authority Key Identifier:
                keyid:36:E0:54:28:7D:BE:76:06:2D:17:70:D8:3C:6A:16:00:00:DB:0D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuBUKH2-dgYtF3DYPGoWAADbDX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a2b8e6-8d54-439b-8ce1-c4974ac2672e/1/NuBUKH2-dgYtF3DYPGoWAADbDX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:16:d6:4d:5a:4d:56:6c:5d:36:2e:cf:0c:30:a3:7f:be:5a:
         5d:5b:b2:3f:f2:05:23:04:0b:2b:6d:68:30:53:51:d3:2e:6f:
         1e:80:01:64:74:6f:2e:d8:47:e3:27:83:41:77:43:a2:ed:37:
         13:d3:78:6a:4e:6a:1e:ed:b8:8c:97:4a:3e:77:cc:10:17:d7:
         60:66:ff:3f:42:9c:11:25:53:10:87:1f:f5:be:ca:19:30:a5:
         f6:ba:3f:f3:9b:f9:28:2b:2c:de:59:7b:c1:4c:68:71:53:36:
         25:ad:25:9a:3d:7d:1b:0f:8e:11:27:41:ff:b3:c5:18:27:09:
         f1:26:51:b8:45:6a:18:f9:a7:65:96:55:25:83:49:0e:89:c5:
         cd:18:db:cb:ef:24:75:f7:03:c9:dd:48:c8:fd:d5:29:41:f9:
         da:c0:c0:a9:84:5c:9a:62:92:46:a2:0d:f9:a6:aa:de:cd:a9:
         15:9c:11:75:21:68:3d:a9:ca:c3:37:28:c0:fa:35:2e:0a:ce:
         c7:10:e5:6d:20:22:53:a3:da:81:57:df:24:0d:41:0f:e3:c8:
         16:eb:88:b4:e0:89:1f:0e:94:7f:59:9b:62:bc:94:a9:dd:d6:
         3c:48:e9:de:f3:3a:2c:13:e5:b9:a9:10:81:3b:79:5e:bc:df:
         b6:96:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----