Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File:                     NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier:          0KLklvfAzcYY5BfqTTUr7m1g1jmg+wc3P+tl9+IzNMs=
Subject key identifier:   A7:C1:1C:BE:3A:49:BD:99:AF:60:4A:A3:AD:76:E7:72:ED:48:5F:2B
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer:       /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial:       0195E046A699AC76970F7389423C0E8220A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number:          11F0
Signing time:             Sat 29 Mar 2025 05:01:21 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:21 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:21 +0000
Files and hashes:         1: 6-1i0N_EbFZTo9ANl2hYmIXY6kM.roa (hash: QWIH2VncfiqkLEzvbdcgtq9ctbO+I+7aPSyiE4vt93o=)
                          2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: pxV/q0plQNOlN0yaLKVgUoECt9CzM4Ez3KXIMMp2LH4=)
                          3: PzRiqf6-YVqlskQDhqkV86tLS2k.roa (hash: hb2uYQFMFVLH00O7jFoKdZGYwNQ4nvgVdgn8uModie8=)
                          4: gu7MjE2UvzrS0XGUY6b4iCkG2LQ.roa (hash: kYyvw5YUpEYRs591UgfTOuS34Jj5NCcUlDlrBVHVgqQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:a6:99:ac:76:97:0f:73:89:42:3c:0e:82:20:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
        Validity
            Not Before: Mar 29 05:01:21 2025 GMT
            Not After : Mar 30 05:01:21 2025 GMT
        Subject: CN=a7c11cbe3a49bd99af604aa3ad76e772ed485f2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:a9:f0:e3:5f:04:4b:7a:78:78:9e:65:af:
                    ca:53:82:a6:91:64:f9:f2:c3:45:f9:6f:85:56:0c:
                    9b:cb:72:15:cf:c5:dd:95:2f:d2:0f:59:73:f0:90:
                    00:85:00:43:24:6b:17:89:65:10:3d:68:53:59:e9:
                    8d:98:16:40:f3:6f:c8:ba:70:45:55:51:fb:6b:c5:
                    71:a5:a1:af:89:4a:f1:92:d6:e9:ff:57:da:67:48:
                    e4:c0:c1:ed:01:2f:cf:6d:31:6b:15:e7:42:7f:47:
                    c6:53:66:18:9f:da:48:8f:da:d8:99:96:ec:a5:3a:
                    0a:16:61:3e:a5:37:28:aa:a3:b6:43:62:cf:9c:78:
                    e2:e8:16:43:eb:2e:2f:f3:2e:83:ab:96:ee:31:d9:
                    d5:e0:ac:1a:2b:4a:70:f5:a5:84:84:a1:34:a4:2b:
                    d0:5d:59:c1:05:b6:76:38:f9:31:f1:98:72:5c:11:
                    52:6b:30:4d:7a:96:a4:cb:ca:d2:9b:14:25:2e:a9:
                    66:08:48:66:e5:af:e8:d8:9e:39:26:e3:a9:03:df:
                    76:64:fa:ae:7c:1e:b2:4c:1b:ce:ac:fc:d7:90:c7:
                    ea:8c:49:5a:97:9e:53:e3:b4:05:dd:cd:94:5c:bc:
                    6c:68:89:ef:27:eb:bb:02:eb:fa:59:e6:d7:05:ed:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C1:1C:BE:3A:49:BD:99:AF:60:4A:A3:AD:76:E7:72:ED:48:5F:2B
            X509v3 Authority Key Identifier:
                keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:6e:ae:ab:e0:b9:7b:6a:32:e2:c6:d7:d3:4e:7f:14:9c:
         29:64:42:c4:d1:6e:41:04:07:21:be:84:68:d6:ed:ae:05:4e:
         10:55:88:cc:8c:c7:0d:8a:99:8c:90:d9:ac:10:8f:c1:26:85:
         dd:6b:89:3f:93:27:9c:98:c6:bd:8d:c0:c2:48:ea:87:38:b6:
         74:cd:33:12:62:fc:29:b1:d8:22:92:00:ba:e9:74:7f:ab:a2:
         35:86:ae:0f:78:05:cb:65:d8:8e:a8:74:4f:8d:c8:b1:f1:38:
         a6:fa:33:bc:66:0d:a0:2a:46:bd:84:1e:6a:11:2b:95:5f:1f:
         01:94:eb:6d:4e:2e:4f:66:25:b6:f9:35:70:97:d2:1d:c7:9e:
         ff:b0:a0:65:e3:11:b8:f4:fa:94:b9:e0:2d:49:46:cc:3b:91:
         1a:bb:12:f5:fc:6c:b9:ec:6f:62:ee:16:72:cc:de:d3:2e:5e:
         9d:c1:c0:2a:c4:59:be:66:bf:1a:41:7c:88:84:5d:34:70:eb:
         cd:c0:ad:fe:74:a2:98:8c:80:76:44:f6:50:94:17:41:7e:63:
         5a:c9:93:bc:b0:72:c6:12:0b:4b:b2:7b:84:6f:58:61:85:a3:
         fe:84:0b:80:08:0b:62:6b:cd:38:65:21:99:42:1b:30:a3:62:
         8f:a0:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----