Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File:                     Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier:          +OS4W673XGEJ+e6uImZFqJSjwjxIiCWtevbS9cCjXTM=
Subject key identifier:   1C:4F:59:F2:7D:F1:24:19:EC:64:31:F7:54:A5:16:1D:E4:A5:62:32
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer:       /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial:       01962DF3BC71EAECBEAB8C9B7DB0BA36F8FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number:          0978
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: HDu5KpogIrhYj/TtlApmjWFFuRFncFyJY1jrbJnxafc=)
                          2: SN4WN6j4-rBWWV-Y2IngI0okDFk.roa (hash: /CIKiQgS+ZyX8NEUirY7oJW+SA7En87kVbxutLDyvcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bc:71:ea:ec:be:ab:8c:9b:7d:b0:ba:36:f8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=1c4f59f27df12419ec6431f754a5161de4a56232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:ad:74:f0:88:71:b7:88:47:fa:5a:cc:e8:
                    66:18:70:dc:c6:b6:b2:e6:72:93:d8:6e:ce:9e:e6:
                    72:a3:d4:83:9e:9f:56:c8:8f:ec:51:5b:02:e0:ae:
                    dc:18:a6:e9:a2:92:bb:b4:37:93:1f:cc:be:8d:41:
                    de:8f:fb:f9:39:d6:2a:28:3f:9e:e1:d1:57:d2:92:
                    ab:85:5e:ee:07:af:b7:93:ae:f6:29:a4:ca:a3:90:
                    9f:0f:fb:dc:74:ba:eb:02:ac:a5:24:f9:e1:5e:1f:
                    38:3b:fa:03:8d:3d:20:cd:b2:6f:e5:55:af:37:ea:
                    17:20:d5:bf:6a:2a:a3:c3:58:d2:52:fa:57:c2:9f:
                    d6:73:6e:53:9f:44:2a:5b:05:06:48:c9:ff:fa:08:
                    c6:11:26:93:96:69:a3:15:fd:4a:e1:d8:de:4c:41:
                    64:55:de:54:9f:3d:7e:57:b7:d6:14:29:2d:44:61:
                    a5:1b:92:4f:fb:42:09:ac:40:19:d5:05:77:1a:af:
                    23:b2:b5:b9:72:2a:a3:01:f5:6b:4f:50:54:0b:a9:
                    b8:4c:e1:f7:ee:d1:7a:37:9a:9c:29:33:94:20:d1:
                    e3:c6:fc:b3:63:ca:0f:3c:d3:e8:cd:50:d3:88:da:
                    58:0f:bb:ca:20:0e:bd:23:f1:f7:a2:53:60:76:f6:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:4F:59:F2:7D:F1:24:19:EC:64:31:F7:54:A5:16:1D:E4:A5:62:32
            X509v3 Authority Key Identifier:
                keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:c9:98:01:7c:36:6a:c8:a0:94:6a:6c:ee:17:50:ca:51:f6:
         bb:b6:ce:1a:5e:79:d4:fa:f9:66:74:98:3a:80:4a:76:ac:fe:
         3a:27:c7:9a:87:fe:df:1b:2e:e7:57:27:2a:21:98:81:78:30:
         c9:40:b3:ed:4d:9b:bf:6a:71:c0:ab:cd:e1:c0:d6:35:34:f0:
         a5:26:52:5b:68:fd:6d:29:14:5e:1f:4b:d0:f3:81:5a:1e:46:
         a1:5e:aa:ce:d7:c3:bf:ca:d2:d9:ba:f3:03:27:2f:ef:7b:d7:
         1f:6f:da:1c:79:58:00:cb:a8:1b:81:9f:ac:40:65:a9:a8:77:
         79:6e:3f:67:94:f6:9d:40:22:0c:53:a6:d9:6b:2a:a7:fc:50:
         c2:a9:5f:ed:a5:03:39:67:e2:36:1e:71:3b:25:06:66:35:ed:
         2c:85:ac:83:87:b6:7e:14:30:5e:50:7d:73:80:a6:dc:c9:d2:
         10:bf:c9:92:2a:6a:dc:f7:6d:9b:4d:33:03:a0:19:5a:12:27:
         6a:ec:cc:50:24:29:6b:21:d9:08:b6:da:8d:71:6b:aa:67:1d:
         e8:c6:22:15:6f:af:ce:30:25:f8:d8:75:61:29:32:be:38:f6:
         5f:64:91:b7:07:6b:1b:fa:b0:05:57:cb:eb:bd:57:de:53:6c:
         fe:5a:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----