Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File:                     No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier:          gwil51/D+KMUNRck0dKo+8q/pTuFRYq4V79NFB98gxM=
Subject key identifier:   B0:7C:55:4A:B6:13:BA:CF:D9:6F:87:1B:AB:F5:79:3F:D2:E4:4A:9B
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer:       /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial:       01962E61736ACDD691D2139C25480C082D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:00 +0000
Files and hashes:         1: L7FYC8e89xGKnty6O1mK_Gb2H5U.roa (hash: McrAWYa182W0VDulttkCRb8Sku8UBSHS1nLFi0h9Euw=)
                          2: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: s8ZZI86BzBQRfp8H+92r2bgJjCDK1/NDbnrP20xVNx4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:73:6a:cd:d6:91:d2:13:9c:25:48:0c:08:2d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
        Validity
            Not Before: Apr 13 09:01:00 2025 GMT
            Not After : Apr 14 09:01:00 2025 GMT
        Subject: CN=b07c554ab613bacfd96f871babf5793fd2e44a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:d8:fe:47:fe:bb:5b:78:39:02:87:ea:33:
                    d2:46:f2:54:9e:15:a1:dd:f6:73:ca:fb:ad:42:d2:
                    1e:c3:24:e9:08:c6:e2:4e:71:8d:d9:32:d5:02:f8:
                    f4:da:5f:dd:0d:f8:5f:f7:ff:91:6d:b0:f9:ad:d1:
                    97:a6:5e:20:12:1a:2e:e1:b6:f9:a0:bd:5b:99:91:
                    2f:cd:c2:6e:cc:7c:45:53:4f:e0:2f:a1:e5:bf:5c:
                    0a:1d:c3:28:a6:bd:ea:76:94:67:ea:77:35:f2:f2:
                    c3:8a:78:ab:16:e1:1e:d6:c5:ff:ae:1e:01:de:5a:
                    f4:5a:20:5e:03:42:59:25:f3:2e:ec:22:72:3d:65:
                    f5:1b:6c:20:a8:b0:da:eb:03:92:39:82:ba:5a:d5:
                    f9:50:7c:79:66:03:2f:2b:24:88:c7:93:a5:78:e3:
                    72:ce:89:f2:87:e7:2c:ed:c4:63:6f:eb:80:c3:67:
                    a5:78:19:76:ea:b3:97:f0:3c:85:2a:75:d4:f8:bc:
                    63:cc:1d:09:f1:e4:87:cb:cd:cb:4e:d3:f3:c9:e2:
                    96:b3:3c:e6:27:73:9c:49:82:d3:63:83:5b:e5:e1:
                    94:28:64:d0:54:13:cb:37:10:28:0e:55:73:15:5c:
                    6f:b6:dc:a4:ec:23:6b:48:90:74:6c:0f:8d:42:94:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7C:55:4A:B6:13:BA:CF:D9:6F:87:1B:AB:F5:79:3F:D2:E4:4A:9B
            X509v3 Authority Key Identifier:
                keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:d2:ce:6f:48:ba:ef:14:67:cd:dd:10:ad:db:3e:73:e3:
         5c:b6:b4:d1:ea:fe:63:1a:4a:83:67:f9:f8:52:6d:26:f1:98:
         ab:89:aa:2d:01:12:ad:5d:ee:c2:15:53:06:26:c2:81:dd:a5:
         e6:40:ed:f5:61:6e:12:6a:17:77:f9:1a:29:dc:17:be:dd:de:
         5b:b9:f4:b7:1e:be:1b:81:91:73:25:fd:08:6e:a9:fe:14:d0:
         f3:4f:2f:54:13:38:24:54:5c:22:52:1c:31:f7:33:6f:5f:e6:
         4e:08:4a:9e:91:e5:46:c3:30:f3:3a:66:67:ea:c3:6f:aa:9f:
         2b:a0:ee:46:04:8b:4d:00:1c:7c:0f:95:73:c0:2b:d7:30:1d:
         c6:7b:3b:5b:18:bc:62:28:61:e2:e6:94:d1:b0:ce:c1:4e:aa:
         8b:00:81:b8:75:f5:fc:5d:d9:6f:81:5b:aa:ee:e8:6f:0e:62:
         30:18:53:88:27:12:3c:0c:b7:17:83:50:5b:3b:62:81:79:2f:
         08:69:b4:cd:16:75:17:e2:80:9e:68:54:54:47:45:f1:49:2d:
         10:b9:de:92:08:af:64:6b:e5:2a:2f:37:b3:01:93:2e:66:49:
         30:b2:f4:be:e7:e1:b4:8a:8a:e8:d2:7b:b0:e3:37:ac:8f:c5:
         9f:4a:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----