Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File:                     N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier:          PIvSaCZKiYvaBOQDedhOlcFPG6ZO3V5Bms+0caovUjY=
Subject key identifier:   1E:D7:60:E9:4B:B7:27:FB:91:A3:C6:5C:54:24:76:E8:85:68:D6:14
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer:       /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial:       01962E619E31882E19F0A6891AFE33A1A00B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number:          04AA
Signing time:             Sun 13 Apr 2025 09:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:11 +0000
Files and hashes:         1: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: 0hpEY5p0HQonqM9kxCLlU4M5hPgkSOnbAUrD4WDA5Do=)
                          2: vhowbyAk5Rh70uoSE00L17bmBWw.roa (hash: BWCvKLZnXJi7kB8pBa3EtqBdHPmAZ8d1B0Q3jz/KOuk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:9e:31:88:2e:19:f0:a6:89:1a:fe:33:a1:a0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
        Validity
            Not Before: Apr 13 09:01:11 2025 GMT
            Not After : Apr 14 09:01:11 2025 GMT
        Subject: CN=1ed760e94bb727fb91a3c65c542476e88568d614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:e4:41:e3:88:93:16:1f:d5:ba:c3:c1:af:
                    d2:44:09:34:a5:3b:a7:6a:55:c6:79:59:e9:c5:95:
                    45:cf:f9:e2:eb:5b:a6:b2:dd:02:74:3f:fd:66:44:
                    98:fc:72:21:5b:1a:0d:03:06:33:be:1e:09:70:35:
                    fe:6f:8c:ed:89:e3:5e:0e:83:b5:9f:50:29:38:f4:
                    53:4b:b1:d2:44:ec:b7:91:49:8d:81:dd:e9:54:2f:
                    25:80:0f:b7:87:ee:31:5e:ab:26:97:70:c1:bf:6f:
                    95:c3:d3:3c:40:a5:b7:6b:96:88:12:6c:0a:2a:44:
                    29:e5:b0:04:39:25:28:c7:89:76:5e:68:73:88:6f:
                    2c:c4:d0:ac:f6:50:bc:e6:a8:cb:c6:28:93:da:44:
                    08:f6:13:1c:a9:05:80:d1:e0:38:de:85:e2:5c:b2:
                    b1:b5:f5:7b:10:7a:4f:8b:a6:2d:77:fc:3e:9e:69:
                    de:a6:8f:85:80:a7:d1:58:0e:a6:2c:9a:67:b9:aa:
                    ea:24:55:27:ea:36:d4:2d:61:8e:59:3d:3f:4d:67:
                    f9:e3:f1:ba:da:f2:3e:7b:88:20:3b:75:24:ba:58:
                    92:fa:44:a7:e5:8c:20:ae:d4:19:6e:29:c2:ab:9b:
                    5b:d0:5e:f8:30:d7:d2:7a:aa:9d:11:5e:e0:7a:a7:
                    02:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D7:60:E9:4B:B7:27:FB:91:A3:C6:5C:54:24:76:E8:85:68:D6:14
            X509v3 Authority Key Identifier:
                keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cd:1e:68:1a:ff:e8:ce:ba:2c:f4:11:48:ea:b7:a0:eb:23:
         22:14:ea:94:67:e4:d7:68:b8:58:dd:0c:bb:f1:0c:99:d7:77:
         57:a1:ae:92:dd:5e:f6:3f:58:91:d5:b9:af:3f:79:d6:aa:c5:
         51:9b:ef:27:eb:2c:f5:ee:51:f9:07:9e:47:61:67:cc:0f:cb:
         23:e3:6b:c6:4b:6c:bc:43:e6:4c:a9:9a:2a:d0:8c:86:f3:00:
         b6:6e:cf:1c:b8:3a:77:6a:2f:08:01:4d:f3:d9:a1:ec:cc:3b:
         ee:9d:75:80:9e:4a:28:94:50:2b:84:36:f9:18:51:6e:1d:4f:
         d1:97:21:d8:c0:79:4a:e0:ce:28:68:a9:62:59:91:2c:1d:94:
         6f:cf:d9:09:1d:09:49:c3:98:a7:05:68:b6:58:ea:53:92:a4:
         e1:9d:6e:0b:98:da:05:73:5b:1e:d8:7c:30:56:38:fe:20:8f:
         5f:07:07:35:c0:08:6b:6f:f4:34:77:f5:35:ca:fb:72:c1:48:
         0f:93:81:eb:d0:3e:ea:39:8e:81:5a:9a:ef:41:65:d7:69:16:
         1d:ad:a3:b8:d5:4c:bd:51:6e:23:0d:37:1a:78:c3:3c:45:47:
         39:84:6b:23:ab:16:9e:bd:2d:23:f2:4d:ac:08:5c:5a:eb:e5:
         e7:84:69:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----