Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
File:                     NrQT5TbZk1PwsFDudG_90k7bWTA.mft (raw, json)
Hash identifier:          eZheVX5gAO/sApVPOyvv4NmtYofkPPlwHRnW5d7xduY=
Subject key identifier:   6F:56:F0:56:83:92:C1:55:31:9A:DE:75:53:C9:87:62:B8:CE:7F:72
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Certificate issuer:       /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial:       01962F74596840DBD65947F89511B07A339F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: NrQT5TbZk1PwsFDudG_90k7bWTA.crl (hash: aQz0N79DltzA/xtigUsSdIj4f/U6vl7cpHXu+ttN6Mk=)
                          2: kkI0VJ623ZMpCKAjZsrxAXz6PWk.roa (hash: wTnvsnp3yJHDHnSTINs0tfqN/DigtBsLrefQ3ls6zYA=)
                          3: uucUmYI6JsmVzUOd6RM4u1Uvm6c.roa (hash: FHR3fbJwd259J3Jj1zln57qgHYJEZGfouW6MVY+3Iko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:59:68:40:db:d6:59:47:f8:95:11:b0:7a:33:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=6f56f0568392c155319ade7553c98762b8ce7f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f8:c0:b4:12:35:e8:d8:2a:d7:b1:4d:33:95:
                    d1:7f:0a:8c:01:61:57:70:4f:43:1e:aa:2f:5a:ad:
                    a1:38:be:c2:d7:11:65:e9:d7:5e:6a:8a:ea:69:53:
                    7e:55:79:c1:98:6c:94:4a:64:db:f1:23:57:45:a6:
                    7a:47:21:8b:dd:1f:c6:ed:67:29:39:bb:55:2e:2c:
                    3b:72:0f:9a:40:af:ae:98:96:8c:99:01:a1:6a:95:
                    f2:b2:d2:d9:e6:32:65:8d:53:d4:c7:e1:24:9c:ce:
                    98:ac:e8:42:88:12:fe:11:8f:4b:5d:f6:b2:13:08:
                    b3:c9:9c:be:74:79:5b:83:2d:af:e4:19:74:28:36:
                    95:21:3e:f7:15:99:ea:cc:7d:c2:9e:c4:fd:2d:79:
                    8a:d9:3b:7f:95:a4:33:51:1e:8e:9c:a3:e6:86:63:
                    a9:44:90:3c:31:f0:3e:e0:dd:0b:6f:1c:27:b3:f1:
                    19:b2:f8:a3:b3:4c:76:57:5c:a9:8d:4b:d2:da:8b:
                    59:6b:e2:ba:86:32:f9:9b:22:78:b5:15:46:c4:d4:
                    4a:3f:ac:41:b6:30:5e:db:8b:8b:8e:30:9d:74:92:
                    f5:67:38:8c:77:f1:0b:2c:58:4f:7d:9b:21:1b:5e:
                    f0:e3:3b:d9:d8:a1:e7:9b:07:32:97:24:75:11:4b:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:56:F0:56:83:92:C1:55:31:9A:DE:75:53:C9:87:62:B8:CE:7F:72
            X509v3 Authority Key Identifier:
                keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:0a:56:da:c8:50:be:a1:7a:c6:df:9a:63:a0:2f:e5:3e:
         b5:5f:ba:bd:6f:64:98:92:21:32:0b:3f:93:12:4f:9f:bd:d7:
         af:05:dc:9d:1d:bf:02:5b:f3:7d:9a:c6:8a:4c:f1:3a:26:67:
         6c:e0:63:6b:f1:83:06:9a:15:38:86:03:4d:9b:5f:43:12:3c:
         cd:e4:2f:36:41:31:e1:c9:d9:ea:78:49:00:f8:36:1c:90:0b:
         50:f3:57:86:42:70:f6:da:50:99:38:3d:11:01:ff:22:4c:93:
         eb:1e:98:a9:e0:54:93:9b:b4:fd:96:94:2b:cb:6a:09:32:c8:
         6b:f4:9c:5f:f6:97:88:83:87:6f:47:e3:07:fe:b8:24:1e:da:
         15:72:0c:1a:a9:3c:43:b2:c7:74:7d:dc:7d:10:90:ec:ba:8f:
         cb:2b:d8:e0:16:33:54:49:8e:fb:90:5b:5f:20:35:76:f6:17:
         fb:01:4c:48:6e:5b:76:78:23:04:2b:b0:fb:31:eb:d0:e3:d1:
         fb:d4:02:b3:ad:1d:a5:bb:40:d8:4e:f5:fa:1d:e9:80:01:0b:
         dc:df:a4:2a:20:a2:49:51:81:26:88:bd:4d:7f:4f:ea:02:04:
         8b:7f:38:c2:e7:8c:e8:e4:40:cd:5f:2c:c2:5e:f5:b0:e4:12:
         11:f5:c1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----