Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
File:                     NldL5q52zVI7M3h8-9tpJkJj0HQ.mft (raw, json)
Hash identifier:          gKAs+FnAyhqvQFZ0Kz+QVpGKSQI99/sHmeZQ0mY/mFY=
Subject key identifier:   C1:6C:20:CB:9A:DF:AB:4A:33:90:D0:C6:00:EB:02:47:26:DF:6E:70
Authority key identifier: 36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74
Certificate issuer:       /CN=36574be6ae76cd523b33787cfbdb69264263d074
Certificate serial:       01962F07189779009891C1EF5E26F160E05B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 12:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:56 +0000
Files and hashes:         1: 1-gyxFvtsdFvYTZX0Y9fbT2PSGFM.roa (hash: EABdk5cioKlboVX+5roxKxOS78qf+VdGIdGNtobQ0pE=)
                          2: KArVYyPO9fBEhTTRJ1tDthlJCOw.roa (hash: a0gp1BPnbKmQpx9TqJhgPqer5KuegL1mEbSjNdCn0ek=)
                          3: NldL5q52zVI7M3h8-9tpJkJj0HQ.crl (hash: tFa7XZdvklGJCGWIZ+yYu8MaawtrTfNbKH/RcNIylqs=)
                          4: SErRHgSbJegvTKQp5_vKPuL-I0M.roa (hash: 5izdqURGD+Gcq0q1le3LSPtQmkAtZ+szcc8AfWWlrxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:18:97:79:00:98:91:c1:ef:5e:26:f1:60:e0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36574be6ae76cd523b33787cfbdb69264263d074
        Validity
            Not Before: Apr 13 12:01:56 2025 GMT
            Not After : Apr 14 12:01:56 2025 GMT
        Subject: CN=c16c20cb9adfab4a3390d0c600eb024726df6e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:75:f9:ac:21:6a:f2:ff:09:56:c7:dc:8f:
                    8a:e1:04:fc:e0:f3:6c:02:be:e0:c1:bd:64:b6:af:
                    b7:0f:75:e6:fe:57:ee:18:15:94:02:3a:12:2c:85:
                    b7:ed:7a:f4:ac:5d:4b:13:4d:70:74:3b:16:bf:f6:
                    45:12:4e:1f:87:33:34:53:99:19:5e:17:05:7b:00:
                    f4:95:91:8b:fa:51:a5:d8:35:74:70:47:3d:4a:60:
                    67:0a:3c:95:e0:64:bc:ad:49:90:54:94:27:47:1a:
                    73:46:76:ea:aa:23:71:8a:d4:37:78:97:25:7b:9a:
                    17:8e:8d:f6:d0:eb:e2:2f:1f:3a:c6:f1:09:ec:8b:
                    3a:3b:52:d2:bb:2d:2c:1e:26:51:99:09:30:93:62:
                    96:6c:83:41:f7:8b:6d:cc:28:74:5a:f1:96:35:54:
                    1e:0d:be:58:e1:82:7d:2f:7e:7e:ed:f5:e7:e5:d1:
                    a2:ec:a8:6f:45:6b:30:34:b7:f7:b4:f8:50:28:a9:
                    f9:73:7f:c4:90:2e:0d:26:ce:1f:a2:e0:fc:24:d9:
                    9d:3b:cb:5c:48:16:fa:c5:e0:6a:70:02:b6:f7:cf:
                    dc:86:10:a8:f9:86:e4:6e:4f:d6:13:5e:5d:c2:bf:
                    40:c6:d4:34:14:ab:af:d6:f7:0d:ef:85:45:e0:af:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6C:20:CB:9A:DF:AB:4A:33:90:D0:C6:00:EB:02:47:26:DF:6E:70
            X509v3 Authority Key Identifier:
                keyid:36:57:4B:E6:AE:76:CD:52:3B:33:78:7C:FB:DB:69:26:42:63:D0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NldL5q52zVI7M3h8-9tpJkJj0HQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7e1d94-1854-473d-8753-18ded80b4b5d/1/NldL5q52zVI7M3h8-9tpJkJj0HQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:74:a9:b6:c1:f3:f1:6b:41:81:1a:74:e4:03:70:aa:75:d1:
         7a:bf:d6:81:8e:13:58:21:44:40:90:5c:6c:2a:cf:ef:d8:e6:
         9d:7c:d8:d2:be:db:05:6d:a9:bb:af:65:64:8b:53:1e:80:b7:
         c2:a1:72:89:59:da:1e:eb:da:17:a5:57:49:c1:d4:45:0b:a0:
         03:51:34:47:22:fe:05:c4:79:f0:78:a4:d4:1e:f0:14:f4:c6:
         cf:d6:78:95:4a:03:28:6f:7e:f9:18:c4:03:fb:2e:e9:dd:40:
         cd:83:a8:aa:af:c6:63:da:ce:4d:28:07:c6:53:f5:b0:5e:44:
         24:08:93:ae:c2:62:3d:63:93:57:8c:eb:d2:00:b6:b9:21:70:
         bf:1e:39:b9:dc:77:a0:c1:0d:5c:fa:de:c6:25:8b:10:b5:81:
         4a:21:ba:54:ab:7c:0d:f2:f7:21:8a:d9:7c:1d:e7:95:b1:68:
         37:c5:39:c0:3b:57:87:31:1e:b9:17:fb:c6:48:70:8f:a5:30:
         25:d6:77:0a:d4:d0:3d:1d:0a:e0:7a:c9:ae:62:cf:5e:f0:57:
         e4:c9:05:d9:d6:66:90:47:8a:16:40:fa:32:b1:78:36:7b:e3:
         a4:76:4a:ba:ce:b0:c8:6f:6c:a3:c2:21:bf:1f:56:47:0a:a8:
         86:b5:de:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----