Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File:                     Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier:          G3gVYh4tofeporquWUG8GuQ6l9RoW0iqfFi6I3OlxDY=
Subject key identifier:   8B:C3:87:7F:49:91:1C:EB:85:1E:2B:91:B7:2D:E1:D6:14:75:A1:F7
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer:       /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial:       01962F068DBC47E5E9E024A71A5F601A0244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number:          01D8
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: iWSvhkXrTwqXG9EHtEWvmhjjEwi7Cv4VtaR/03EIf8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8d:bc:47:e5:e9:e0:24:a7:1a:5f:60:1a:02:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=8bc3877f49911ceb851e2b91b72de1d61475a1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:c1:15:c1:99:ee:96:a5:91:2d:ad:c4:f2:
                    e2:ce:b6:0f:95:7b:91:ec:cc:49:6f:39:7c:47:72:
                    e2:f8:bf:5c:09:9e:59:c9:41:5e:55:e7:3f:40:fa:
                    9b:14:f1:dd:f9:46:98:69:41:f2:46:dc:ee:c4:d2:
                    d2:e5:07:68:21:5c:fb:7d:9d:25:e2:01:a2:fc:f8:
                    cf:05:f8:19:dc:a0:89:7f:30:85:58:82:cb:db:26:
                    13:13:50:f0:0b:b5:a0:97:34:53:3b:e2:45:b3:1d:
                    4c:bb:b5:38:30:f2:f4:b8:68:71:5a:34:a6:5e:6a:
                    5c:82:85:5c:77:1c:f1:df:a5:fc:60:99:72:57:01:
                    3b:29:15:35:27:1a:e8:df:38:ef:92:a0:bd:02:76:
                    13:a8:1f:01:d9:fd:04:cb:a1:07:e4:70:0b:b8:d6:
                    b7:44:37:07:84:49:6a:fe:59:73:11:10:a7:ee:ae:
                    5e:49:83:88:27:dc:61:6e:94:04:d0:a4:72:f4:2f:
                    5b:08:3d:76:d1:e9:aa:75:1d:6f:fd:42:6a:83:2b:
                    8d:5a:79:0e:a1:f7:a2:52:42:c4:22:05:6a:7a:0b:
                    6c:97:26:7a:c7:71:57:a4:a9:dc:b8:8d:c1:d3:09:
                    cb:87:fa:47:8d:4e:92:5c:3a:ac:55:b1:42:1c:72:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C3:87:7F:49:91:1C:EB:85:1E:2B:91:B7:2D:E1:D6:14:75:A1:F7
            X509v3 Authority Key Identifier:
                keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:85:cb:ba:86:b2:87:31:39:1c:f1:b1:a0:ea:32:ed:4c:af:
         c5:2e:ee:e5:20:ed:8f:8f:c7:88:3a:02:d9:a9:b4:70:89:f1:
         f8:16:88:a0:ef:11:85:cd:78:62:52:3d:a7:24:b7:2b:e1:f1:
         3f:fa:e9:26:58:19:29:26:2e:79:70:15:74:d6:6c:17:18:1b:
         6c:1e:a8:68:fd:1a:b1:91:f4:56:1d:e5:99:21:98:d5:0b:7d:
         c6:68:af:0d:25:8a:05:83:a0:95:98:96:e2:ba:55:3e:19:a7:
         0c:94:a9:b3:75:21:a3:e5:4f:77:26:0e:4c:95:62:a9:18:86:
         8a:fc:8b:b7:e1:08:9b:9b:00:1c:10:d3:2d:00:6a:2c:27:f6:
         86:32:2f:7f:c3:bd:69:7a:97:48:83:57:b8:b3:da:74:77:75:
         d5:02:1e:f1:02:28:ef:b2:44:f5:16:02:99:d8:3c:ac:23:3e:
         00:67:f8:04:b1:f6:a9:81:b0:25:54:cc:21:69:f6:6f:1f:19:
         69:e3:c7:a3:f5:40:e4:8c:1b:bf:10:63:bc:e8:ba:2f:01:56:
         0b:bc:cb:d6:fc:88:b7:55:b1:51:07:a8:56:02:15:12:18:3e:
         4f:66:2e:49:c8:4c:3c:4a:86:bf:02:cf:20:f9:83:9d:95:ef:
         e8:22:cc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----