Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
File:                     N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft (raw, json)
Hash identifier:          UqjE2XNRBW4D0cA2iusAUwm+1bxBwHy2uvvhMDALI84=
Subject key identifier:   94:3F:38:90:E4:30:76:F7:45:FE:07:2F:60:9E:35:D9:B0:DD:68:42
Authority key identifier: 37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE
Certificate issuer:       /CN=37698b4f37d8081c3505ada0baa85221934341be
Certificate serial:       01962E99909478E0737FDB978A411D8A0AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft
Manifest number:          0D46
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl (hash: wo/FkiwxbRSrSw7FBePn+6MUrbKLSlhY+HCTjiUMTDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:90:94:78:e0:73:7f:db:97:8a:41:1d:8a:0a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37698b4f37d8081c3505ada0baa85221934341be
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=943f3890e43076f745fe072f609e35d9b0dd6842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:1d:0f:42:46:0c:bf:85:e0:ce:3f:2c:7d:
                    46:f0:4e:f4:6f:1b:05:ef:78:48:53:78:eb:9e:d5:
                    ec:91:26:5a:7e:49:46:1d:2f:69:9d:7b:4f:a6:e4:
                    2e:c6:b6:63:6f:d5:c2:56:8b:03:27:ca:3e:82:17:
                    84:c8:fa:dc:09:9b:db:5a:ab:17:0e:6a:ba:06:be:
                    59:0c:83:1e:c3:5b:de:aa:79:e3:16:72:84:f6:7a:
                    68:f8:49:c3:85:44:5c:81:66:ea:a9:5f:52:4d:6e:
                    ac:3f:f5:a1:f6:f7:f8:dd:ee:ba:d4:fa:96:33:9d:
                    c1:42:8c:ee:84:86:6b:5f:90:82:4e:4c:e0:1f:be:
                    5e:a7:14:5a:8c:3e:de:cf:04:88:8c:93:04:a7:a1:
                    c7:1e:87:9c:0e:70:b9:60:14:ed:c5:cc:53:dd:8d:
                    b6:49:ce:02:37:5d:d6:9d:b8:1f:ef:47:f0:c8:62:
                    16:7a:80:d4:72:02:08:d0:58:08:b8:8e:2f:9b:65:
                    84:81:81:60:ab:2a:6b:27:5b:14:a7:7c:43:00:0e:
                    71:46:e5:19:98:85:29:8d:b6:eb:a4:3d:b8:ea:3e:
                    6b:6f:7f:5f:94:7e:72:34:3b:3d:e5:13:ed:6a:83:
                    fc:ff:41:fa:fb:54:fa:6b:f9:a1:6f:26:58:17:2d:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3F:38:90:E4:30:76:F7:45:FE:07:2F:60:9E:35:D9:B0:DD:68:42
            X509v3 Authority Key Identifier:
                keyid:37:69:8B:4F:37:D8:08:1C:35:05:AD:A0:BA:A8:52:21:93:43:41:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2mLTzfYCBw1Ba2guqhSIZNDQb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/10bf3d-4eb5-4a13-83b7-2bb81d99d5f1/1/N2mLTzfYCBw1Ba2guqhSIZNDQb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:12:a6:5b:d2:2d:a3:da:77:b2:4b:1f:7a:a4:98:a7:32:b5:
         e0:c0:5a:b8:10:ce:59:7e:be:1f:7e:90:2d:8c:99:39:54:c1:
         59:76:eb:52:8e:54:46:7e:e7:37:4b:ba:ba:c3:29:b6:80:02:
         4d:9b:aa:25:a8:09:35:cd:3c:a3:fa:43:5d:b8:89:dd:72:f1:
         e9:00:47:c7:d9:95:52:81:70:9c:f7:88:6a:e7:e4:79:5b:b1:
         3c:d3:aa:a1:73:ac:21:fe:72:b7:f7:6d:40:bf:17:71:40:65:
         85:68:df:0c:05:78:0b:70:93:06:60:25:78:77:a5:cc:e3:65:
         71:a2:3c:17:d7:be:c5:51:4b:45:b1:9b:70:22:f2:d5:61:c7:
         99:fe:bf:c8:95:aa:63:a7:72:2a:76:7f:58:ed:ed:85:58:f6:
         f5:71:eb:b2:cf:36:1f:d2:25:22:0c:7a:17:5e:da:73:47:a3:
         f2:f7:95:e4:ca:2c:4e:ea:81:bb:2f:07:e9:e2:4e:64:5f:1e:
         89:a4:d3:49:4c:c8:d8:6e:5b:1f:6b:6b:6b:29:2e:c4:c5:79:
         62:bd:03:f5:6e:cb:08:04:d9:07:60:aa:61:aa:6f:64:42:9b:
         b2:6f:8e:0a:03:1a:2f:f1:6e:61:08:aa:7c:93:85:50:ca:ed:
         e6:e4:04:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----