Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
File:                     nzeBglGggdHMfzAVMg62NSZwm5E.mft (raw, json)
Hash identifier:          MA1d/85a8B9MtQP/D+Y7a3NWgyLqCrJOvlt1gW2SAvQ=
Subject key identifier:   E2:02:45:75:82:D2:79:95:F0:CE:88:71:DF:70:20:DF:F0:7B:CF:73
Authority key identifier: 9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91
Certificate issuer:       /CN=9f37818251a081d1cc7f3015320eb63526709b91
Certificate serial:       01962E98C4FEA81EA3EDE8B302BB3C67554F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft
Manifest number:          0553
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: nzeBglGggdHMfzAVMg62NSZwm5E.crl (hash: q3xVLuIochlOCu+KC9Z00fZ4keiXkmUrnTBZTu7TXuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c4:fe:a8:1e:a3:ed:e8:b3:02:bb:3c:67:55:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f37818251a081d1cc7f3015320eb63526709b91
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=e202457582d27995f0ce8871df7020dff07bcf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4b:c6:14:e6:23:da:a3:df:f4:7c:c8:94:97:
                    4d:f0:c4:1f:3c:c5:4b:aa:3f:42:bf:b0:ad:01:b0:
                    e6:a3:ca:18:3d:cf:bc:bf:b1:6b:26:64:10:b7:77:
                    0a:ac:a6:40:22:b0:ae:45:dd:ea:48:ef:a9:d4:a0:
                    29:db:ca:5c:81:6d:70:a4:f2:bd:51:41:b8:08:50:
                    1d:71:2f:6f:ae:39:15:b2:67:ff:d1:99:81:6d:64:
                    75:c4:d8:a0:ca:c4:73:60:d9:f7:fc:ad:df:6b:fc:
                    e0:63:b4:48:30:c2:d7:89:e1:3f:de:39:63:ed:d3:
                    bf:e9:ac:ba:7a:62:e4:32:ba:4c:95:57:6d:f0:05:
                    21:ec:00:aa:36:ef:1f:ca:fd:83:4e:10:d8:f2:fb:
                    0b:17:86:72:9b:55:df:aa:bf:cf:ea:d5:3d:1d:62:
                    83:f4:56:02:e0:bb:54:a8:9a:11:b2:29:65:9a:c2:
                    66:28:3c:27:b0:21:df:3e:1d:9f:86:42:3a:19:43:
                    7f:3b:bb:29:f0:a6:76:06:a4:a2:23:22:94:1d:f5:
                    82:8b:1b:cb:a9:80:22:48:79:9d:f4:2c:e8:5c:86:
                    c5:f1:e9:a9:de:5e:c6:27:22:19:51:ba:0e:b6:c0:
                    51:f3:a6:9c:0f:22:b6:bd:4d:1f:75:91:4c:6c:81:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:02:45:75:82:D2:79:95:F0:CE:88:71:DF:70:20:DF:F0:7B:CF:73
            X509v3 Authority Key Identifier:
                keyid:9F:37:81:82:51:A0:81:D1:CC:7F:30:15:32:0E:B6:35:26:70:9B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzeBglGggdHMfzAVMg62NSZwm5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6b5b7b-f93c-4f37-8a64-6b2f526047a9/1/nzeBglGggdHMfzAVMg62NSZwm5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c7:38:a4:de:70:13:ed:91:00:08:7a:df:dd:f3:68:33:aa:
         1d:03:e1:61:d1:59:b5:93:28:d3:51:eb:09:5c:f8:4a:ed:ca:
         fa:12:4f:b1:8e:8a:12:50:e9:b3:5b:33:cc:f8:b8:06:e9:bc:
         1e:dc:de:d4:2c:4e:66:47:eb:69:2d:d6:e9:c9:a8:16:b8:75:
         9f:ea:44:33:a7:06:86:ce:4d:d9:22:a6:82:6e:5c:a4:84:82:
         05:f3:10:48:97:7c:2f:78:8f:d3:67:24:e2:b7:9f:5d:3b:6f:
         94:31:35:f0:2c:9b:e4:8f:9d:83:1d:f1:c3:8c:d2:90:9b:7f:
         76:ba:11:87:94:a1:e4:ed:9e:07:da:b1:ef:d2:35:6c:05:8f:
         ca:e2:03:72:6e:1e:c8:e9:84:ae:f3:a0:fe:7c:08:fb:1f:c1:
         42:f3:ba:74:4b:35:1a:97:f4:33:96:4a:3d:bb:75:43:3f:4a:
         46:53:6b:da:a9:b5:63:51:a7:0a:19:7a:2d:f5:18:ce:0e:bf:
         8f:75:3f:05:7e:24:dd:4f:00:01:13:60:ba:77:13:5c:6f:85:
         e6:09:99:f4:9f:b4:98:b9:3e:85:68:54:c7:cf:52:d4:da:5a:
         37:7f:9e:dc:b7:f9:d0:94:b4:b6:03:e4:d3:ef:ba:69:d8:99:
         74:59:51:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----