Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
File:                     1-nRo3MrkPCOfhTDoI146LU_NPnM.mft (raw, json)
Hash identifier:          +MUHNYa3RMrYii8kIpsEEcNfXFMLx83janVRsYNxav8=
Subject key identifier:   27:E1:99:23:D7:9E:DF:4E:78:A4:D2:C1:72:3C:12:02:8F:44:C1:D4
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Certificate issuer:       /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial:       01962F0723313A60F9F0483C3CFB647900A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
Manifest number:          0685
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: 1-nRo3MrkPCOfhTDoI146LU_NPnM.crl (hash: 3KGuERjZITi+yIBtIv+GsfcNSH7xgDeqL6By3kYOjjE=)
                          2: uCvD8eRBUAPr7t4AKxbWS0eik-M.roa (hash: S3XQTQGpmea5gdNAFZSLFW2D1IWdCXJx15hLcxcR7CY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:23:31:3a:60:f9:f0:48:3c:3c:fb:64:79:00:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=27e19923d79edf4e78a4d2c1723c12028f44c1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:00:41:8a:62:11:f1:99:ed:a2:69:3d:de:0c:
                    e5:a1:4f:88:28:49:57:79:9d:3d:56:ed:f4:e6:17:
                    0d:ec:d2:77:0d:b8:09:6f:e2:0e:97:8a:e6:84:5e:
                    cd:e6:19:61:5e:e5:1e:e4:01:db:f8:01:2b:0f:62:
                    6f:6f:c5:36:d4:88:c6:21:f5:f8:a9:a4:fc:cb:3e:
                    6f:30:4c:3f:23:5f:69:bb:20:8e:62:ab:d3:5a:ee:
                    42:3f:dd:7c:91:59:fa:df:90:0e:57:58:e3:67:f8:
                    bc:73:c7:ec:bb:e5:cd:11:02:ed:6d:97:67:0a:aa:
                    c3:22:0e:3a:34:12:4d:61:6e:92:6a:1b:e4:18:dc:
                    59:9e:14:b4:37:aa:76:5a:b0:9d:c8:65:50:16:4a:
                    5b:4e:6f:1e:67:88:da:24:d3:e9:bf:bd:07:bb:a0:
                    cb:5a:98:be:4c:2c:04:91:2e:75:58:59:94:52:cb:
                    2a:b9:16:cc:8b:b5:20:de:8f:b2:30:d1:1c:ad:bd:
                    62:c3:c5:53:30:e1:3d:b4:67:4f:f0:41:a4:21:94:
                    7c:4b:de:46:9a:93:cf:56:d0:06:8c:9f:96:3d:da:
                    cd:55:02:e9:f1:39:cd:b1:05:fa:67:4c:27:dd:45:
                    0f:8e:d2:d4:43:ad:14:30:08:54:60:4c:3f:91:99:
                    c7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E1:99:23:D7:9E:DF:4E:78:A4:D2:C1:72:3C:12:02:8F:44:C1:D4
            X509v3 Authority Key Identifier:
                keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:09:4b:36:27:21:ff:89:22:22:4e:aa:92:aa:5d:12:90:21:
         41:a9:9a:91:63:26:72:83:0c:56:d1:10:fc:cf:bc:65:34:c5:
         69:28:81:b9:8e:29:a7:29:a9:90:35:92:0e:02:77:17:ef:46:
         38:3e:5d:7e:12:0f:35:14:21:10:ac:f7:54:f8:60:19:95:e1:
         ca:67:26:f4:ac:50:26:be:62:0a:7f:b3:c4:b4:e1:f4:2f:d9:
         89:02:ec:57:0a:d3:ab:bf:7f:ab:a4:c7:5b:d6:0c:fb:66:1b:
         08:c1:4f:f4:a3:85:dc:ec:c9:3f:ed:fc:d1:54:cb:50:19:aa:
         7b:8a:af:8f:c6:a8:0a:18:29:9f:50:65:53:9a:0a:46:d9:ee:
         7c:9a:e4:e9:c3:57:95:74:4d:c2:44:47:49:d8:32:ec:f7:84:
         59:d5:37:fe:ac:64:c3:b5:e4:25:cb:1b:fc:e8:38:56:95:b5:
         df:c3:83:f2:11:dd:78:fa:62:4d:5a:63:74:75:02:82:28:73:
         bd:48:9f:e4:50:df:73:c0:78:8b:9f:4a:a9:11:b4:12:f4:25:
         37:34:23:ae:c5:9c:97:37:d6:cd:ae:aa:11:cb:51:96:35:74:
         d5:08:5d:cf:fc:51:85:a5:92:cd:03:1b:60:be:fd:cc:4d:e6:
         29:62:f8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----