Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
File:                     N50QO5Uwccqp4aiXOAiQQJbnk9g.mft (raw, json)
Hash identifier:          ZLR/c6CSASqTbXrR4QktUUty8k8XOHoAHXcfJge9UYI=
Subject key identifier:   7D:7D:F9:86:3E:F3:DE:AF:B5:22:EC:7B:D5:A0:30:BD:D6:A1:CC:D5
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Certificate issuer:       /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial:       01962E99B04D091547ECE226B424745E0B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
Manifest number:          07BB
Signing time:             Sun 13 Apr 2025 10:02:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:26 +0000
Files and hashes:         1: J2OkX8bApJPiRItiujPnBGrsZY4.roa (hash: i7nPB++63HS9z1hezyAi0vnytbZFG8+Xg2xHv015LZ0=)
                          2: N50QO5Uwccqp4aiXOAiQQJbnk9g.crl (hash: hi9Bd6Sbt4lPT7hSxp5cD8MtSthvn7rajhTatPH3E7w=)
                          3: Ol1gwf97KN8C2okTQgFoNBJAj_Y.roa (hash: nOhD6696K5uFNmSeTl0PuDWrBC3Uu0s0j0X6YVs7JlM=)
                          4: UKgpB89XWxDrwt2wvJCexcV0Vro.roa (hash: EhxlZRaFnaHWTa4h+4XITRoT+tWzmXi1bhPwvQrMspw=)
                          5: owDo-dE90Q4aVz9Otyrxfp0jJuU.roa (hash: R3FfKqa+CBkhoX3AH8SVbam9fEJqpTMt1H0aKWJw/DM=)
                          6: siGNpjOukqtq61iEt69vPKECUBY.roa (hash: KGLP98dU7eIP8APR/O7z5omV59hwh3Vy+VU74c3Ej2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b0:4d:09:15:47:ec:e2:26:b4:24:74:5e:0b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
        Validity
            Not Before: Apr 13 10:02:26 2025 GMT
            Not After : Apr 14 10:02:26 2025 GMT
        Subject: CN=7d7df9863ef3deafb522ec7bd5a030bdd6a1ccd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:2f:56:ab:f2:17:a6:29:ad:98:41:31:2e:
                    1a:68:51:3b:8e:e3:12:b8:27:68:23:e7:9b:bd:c9:
                    2a:ab:22:fe:30:ed:f8:c8:ec:7b:d9:89:15:62:b0:
                    e9:07:d4:80:3b:cd:2f:f7:ba:6a:b7:74:a3:b8:23:
                    4a:35:bd:98:dc:12:7e:a0:4a:8a:90:73:71:6d:49:
                    8c:03:b1:68:db:6c:d1:17:d1:3d:1f:ff:9f:ed:4c:
                    df:1e:44:6d:50:b4:25:ce:0f:dc:b4:90:e9:9d:a5:
                    eb:1d:c9:a2:54:20:e8:d3:8e:21:f9:0b:a1:7a:00:
                    fa:6c:b4:23:5f:d7:5f:11:18:05:98:08:e6:bc:e3:
                    21:b8:01:f4:cc:d6:93:59:d9:58:d4:52:58:2a:da:
                    14:e6:7f:45:84:3c:2a:84:73:45:8f:8e:f0:02:10:
                    a3:4a:a4:c8:ec:97:0a:f4:10:62:9d:46:6a:c7:a3:
                    61:c5:b9:55:fa:3e:ca:4a:8f:46:32:59:14:9f:5f:
                    c2:6b:18:9b:31:4e:fe:1e:15:cc:2d:a3:76:c1:31:
                    6b:2d:3d:96:5b:00:79:7c:47:9b:52:61:48:a5:b8:
                    06:06:6b:ce:77:94:82:13:67:09:2b:4f:dd:6a:c7:
                    23:43:45:b9:1e:bd:f0:52:85:d6:2c:77:df:f6:ad:
                    b4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7D:F9:86:3E:F3:DE:AF:B5:22:EC:7B:D5:A0:30:BD:D6:A1:CC:D5
            X509v3 Authority Key Identifier:
                keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:82:50:2d:68:07:e4:e9:42:2c:eb:5c:d6:05:26:d5:cf:e9:
         d9:3d:90:aa:e4:b0:bb:45:4b:f3:65:51:f3:84:7f:f0:5c:b0:
         19:89:22:80:90:2c:e7:14:e9:95:1f:f1:83:e6:db:38:dd:24:
         fa:13:d6:59:23:03:c9:4e:65:2d:34:b3:7b:5d:8d:69:e4:99:
         0d:67:62:56:ca:04:45:19:4c:8a:5f:c6:5d:79:75:fa:64:8a:
         f9:27:38:95:d5:80:5d:95:75:ec:56:6f:85:a6:87:02:26:4d:
         62:09:5f:bb:23:34:c8:5a:a1:98:4e:a2:87:ca:7f:5e:6b:ea:
         87:72:9e:21:15:24:16:6a:23:f3:f1:2c:ea:e3:e6:50:53:bd:
         9a:2a:3d:fc:39:aa:04:b3:43:17:1e:e6:b7:ee:a1:74:6c:58:
         a4:f2:54:fa:07:7c:d0:8e:25:72:df:cc:5c:4f:59:b0:fa:a2:
         cb:38:dc:cc:b2:13:fe:e4:02:11:07:51:cd:0d:c3:29:34:83:
         1f:3c:04:e8:c7:aa:28:8f:2d:d1:79:b7:04:9a:0b:2c:e3:68:
         8b:34:96:a8:ef:3a:ad:c5:32:60:ca:0f:02:30:69:24:e6:21:
         cb:c4:89:55:28:64:3d:07:0e:c9:a9:36:fb:69:43:b3:c8:81:
         77:d7:52:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----