Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
File:                     NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json)
Hash identifier:          FZL57uWekkRpSxTAJNLE/z30fJPKLVSndgd+9rXCq/A=
Subject key identifier:   DE:0F:0F:23:24:CF:16:5D:D2:80:81:DC:C7:74:6E:5E:F8:98:4D:35
Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5
Certificate issuer:       /CN=36319bcd4747ed5b202bb578acb390d16fc411a5
Certificate serial:       01962FAB935F00CEE4B8C2E7E630A1289A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft
Manifest number:          117D
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: 1-nnyIMUn3fhhCGC-D-gP0F3cqEo.roa (hash: nfA7AP7Kn3mops0IdhqDXV8NM9fBW2I0VcSnl9x1rKI=)
                          2: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: vo405yVovEQ92rg+yS3/wMos1evA4Fw4nogzFM6neZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:93:5f:00:ce:e4:b8:c2:e7:e6:30:a1:28:9a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=de0f0f2324cf165dd28081dcc7746e5ef8984d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:c9:5f:c6:2a:92:2d:f1:41:4f:49:c2:2f:
                    dd:2a:da:6b:8b:b2:13:f8:10:70:7d:0b:a9:1d:c8:
                    b3:ef:95:84:05:6e:1b:5c:82:85:e3:3e:e4:68:23:
                    e2:48:ae:0d:bd:c0:02:9b:7e:f0:36:be:65:57:37:
                    f5:ef:f8:95:c3:fd:43:bc:8b:e6:48:b9:31:5f:11:
                    0c:5a:53:f6:64:7c:e6:ad:a5:b7:65:7c:5f:83:fa:
                    ef:3d:65:25:6b:c2:49:76:50:75:be:92:64:fe:97:
                    00:d8:5a:3c:26:27:15:74:49:35:91:cf:eb:b3:44:
                    6f:e8:83:65:c5:bb:64:c7:c3:f9:fa:2f:14:f3:93:
                    ef:3c:6f:25:18:52:85:0b:5a:6f:86:41:6e:2e:49:
                    cd:01:aa:9a:f5:00:d6:f3:b8:8e:40:3c:7d:c2:2f:
                    01:f0:07:3a:b7:eb:eb:1f:e6:ff:23:4d:04:e6:d6:
                    94:6d:c1:03:8d:f2:a0:e5:75:df:43:7d:37:97:d5:
                    02:2b:2e:84:96:f2:30:f3:e3:75:09:ae:6c:8a:17:
                    84:b9:19:4e:6b:2a:d0:84:44:07:d3:8d:62:be:d7:
                    bf:9e:a2:8b:d5:ed:63:51:a2:7d:47:12:2b:ce:64:
                    39:e3:56:b2:c4:4a:bf:43:5c:3a:19:2e:95:ee:74:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0F:0F:23:24:CF:16:5D:D2:80:81:DC:C7:74:6E:5E:F8:98:4D:35
            X509v3 Authority Key Identifier:
                keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:10:79:4f:2d:12:21:b0:50:1b:1d:ab:50:1b:08:8f:f5:50:
         78:d7:a5:1d:dc:f5:4f:fa:db:7a:92:17:9f:bd:3f:90:47:74:
         15:ed:6e:a9:7e:e7:04:c6:bf:c1:2d:f1:fe:7d:23:a5:24:bc:
         f9:c7:48:07:ab:f9:b9:e1:e2:ff:5f:49:91:5d:63:8c:e5:59:
         59:ed:3b:e2:c1:b6:7a:0c:1b:08:f1:1e:42:31:9c:76:b4:fe:
         1f:85:b1:61:1a:d5:6d:62:04:72:0f:37:92:2b:49:c1:db:95:
         36:80:b0:ec:ca:76:7b:42:06:90:81:69:9d:c2:07:77:81:e6:
         23:3c:96:db:51:b0:46:26:7d:4e:85:e3:f4:ad:24:ad:db:38:
         be:4b:e4:4f:f2:fa:f8:3f:ba:bd:e6:d0:f7:18:b7:48:5d:3a:
         d2:38:7b:98:13:b2:69:e3:8a:ec:ff:de:34:3f:76:64:53:71:
         3b:70:36:35:78:aa:da:f7:ea:ee:4d:d7:3f:2a:84:63:46:5d:
         b0:8e:30:84:c3:b1:6f:83:72:19:3d:27:52:96:c8:d1:a5:29:
         49:7b:ea:2d:9d:51:54:38:de:27:28:02:ed:c2:d2:55:21:77:
         58:34:62:04:28:5c:43:11:66:2f:f4:5e:2b:72:97:b5:c5:59:
         c1:75:37:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----