Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File:                     _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier:          2Hiq9+q33zgFiqxfdtIFJok3XV+D3VNKzbDz/3WMqAA=
Subject key identifier:   3B:8F:42:E3:68:DF:16:55:61:02:7F:1E:D3:3E:E9:AC:EE:EF:85:24
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer:       /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial:       01962ECF969D47AAF8B32545C3245C7F1388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number:          036A
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: HUy2Ot8c8GSG7vKe32J2X71hQNZHZD0BB7+2aJTvRaA=)
                          2: nVML7LcRQkLl4LsQylRXZkNhkNs.roa (hash: aP+8mW119fycA5Li+oipfw+Kb6S3KHGW180HDqCC2II=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:96:9d:47:aa:f8:b3:25:45:c3:24:5c:7f:13:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=3b8f42e368df165561027f1ed33ee9aceeef8524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:a5:bc:87:be:9e:74:8d:0f:60:7a:37:b9:
                    09:52:b8:f3:07:2b:16:75:85:f5:c4:50:9e:c6:4c:
                    3c:04:04:5a:12:c1:3b:56:9c:c4:53:36:40:f3:7e:
                    94:b9:19:ac:a7:9c:40:31:91:42:db:ea:85:98:93:
                    30:72:1d:33:19:0b:c9:89:25:6d:4f:7e:97:2f:ce:
                    24:ff:a1:32:53:d1:21:26:0d:ea:94:96:d8:16:cd:
                    a1:65:34:62:1f:ff:a1:0f:9c:8b:10:6f:c5:5a:61:
                    79:c1:43:1b:b4:74:da:e5:c9:69:e2:fd:dd:ec:e9:
                    db:ca:f7:64:fa:6a:89:4d:99:4a:a0:17:ac:ec:2d:
                    24:b3:a3:8e:fe:58:1e:f0:d6:47:3c:6a:74:14:9d:
                    bd:f1:7c:d2:a2:49:e9:63:8b:48:c8:37:bc:76:06:
                    57:e7:77:f0:5d:a2:42:fc:9b:54:e9:ab:e5:1b:1c:
                    0d:76:4d:5e:d6:8b:e9:f0:47:4e:3c:17:d4:58:f7:
                    08:20:1a:12:3d:80:e2:f3:c1:2e:d2:56:71:77:8f:
                    b5:d7:75:ab:4a:cb:f0:71:21:73:b7:a4:c1:b5:96:
                    0e:d7:79:3d:b1:dc:a5:ec:ec:5c:5c:7f:c8:13:4e:
                    1e:7b:6a:33:aa:f8:26:a4:37:4c:38:86:01:60:80:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8F:42:E3:68:DF:16:55:61:02:7F:1E:D3:3E:E9:AC:EE:EF:85:24
            X509v3 Authority Key Identifier:
                keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f7:bd:ab:b9:57:81:d4:97:10:f6:35:75:43:a3:dc:bc:8c:
         6b:e9:79:56:88:b7:eb:f6:a7:82:95:bd:46:69:e2:26:cd:4d:
         a4:b1:ce:59:d6:18:0d:22:d2:33:bb:7f:8c:1d:a1:1a:27:53:
         ea:e3:cc:42:ea:80:97:b4:c1:e7:b3:ca:e8:25:a8:61:4d:c9:
         f5:0a:d8:ff:a4:51:87:f5:22:7d:22:5a:db:95:27:ae:38:92:
         ba:eb:6f:06:0e:cf:4e:b8:2a:fc:32:f5:eb:47:79:db:ce:26:
         2e:98:3b:9f:9f:89:af:df:1f:56:37:9a:85:14:25:c1:97:b5:
         d5:45:ff:86:b0:02:e9:4d:54:33:ce:01:9f:c1:44:c1:cd:c5:
         17:62:63:28:b4:30:80:a0:01:fb:cb:25:dd:8b:86:fe:4a:2e:
         c3:98:bb:c9:88:f4:b3:f2:0b:eb:a3:43:84:7b:d7:eb:9f:dd:
         58:8e:8c:d4:88:15:4f:f3:11:6d:09:fa:bd:45:ab:0d:7c:25:
         e6:93:eb:7f:a1:b1:34:45:2e:79:04:16:9d:0a:8c:e3:69:b5:
         07:ce:87:00:85:20:1d:3a:81:37:e3:10:43:28:26:b6:c6:dc:
         49:74:c2:87:b6:dc:cc:63:b8:96:9a:9b:5f:be:0c:27:28:43:
         54:b5:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----