Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File:                     NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier:          e41JSGh5Z4qj2bBsxoi0qxg/uGRPk0COH70Y5qXpGSU=
Subject key identifier:   31:23:65:F8:21:D9:0A:A2:C3:6F:39:4C:9B:93:CF:8E:F7:59:44:3D
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer:       /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial:       01962E2AC0672F24C04B96947A52421D07B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: A1fIZWEtc42rtf9T6xF+JnVGFrQI43A2IKyxXcDFdGY=)
                          2: bEKsBvD9r6Xyt_P3Ap1ApX4DjcU.roa (hash: 24Br4dwLUP9p+zXB4KMnlxiNc2TbHeks2Jsk87QFi10=)
                          3: kSQ_R5Z-vsBcuOXx6WhdFdmllY0.roa (hash: OhKVJv+g1lqmaayTLliiukgCHTE/MZNzjIGSTC2Zdcw=)
                          4: naFGULOSYvt_ys0vvTSfwr2rqtk.roa (hash: b43Uckjczt2PCUz41jkHhIKmF+uwsILXTS5gZeF8UNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c0:67:2f:24:c0:4b:96:94:7a:52:42:1d:07:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=312365f821d90aa2c36f394c9b93cf8ef759443d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:69:55:10:d0:60:cc:93:8e:ea:ae:d6:cb:da:
                    61:21:f8:d6:19:22:42:29:bb:52:0b:ae:8f:2a:84:
                    b9:1d:ba:5a:52:30:02:55:61:44:29:1d:b9:b0:71:
                    a8:45:0a:4a:b7:58:7f:be:84:6b:38:44:bd:ee:82:
                    32:34:59:3c:4c:e7:15:71:d2:47:ef:25:2b:55:b9:
                    62:3e:8c:4e:2a:e3:62:08:4f:e0:6c:94:26:37:95:
                    e0:13:69:99:f8:02:ea:6c:42:fd:75:42:7a:2b:a7:
                    6d:f3:7f:0d:55:f7:93:ed:31:fe:36:77:d4:c5:1f:
                    e8:69:5f:43:55:bf:e4:80:eb:90:0f:0a:0c:ab:de:
                    0a:80:66:cf:71:6b:d4:d3:d6:d2:0f:75:b4:51:95:
                    d6:69:e3:27:ff:a1:05:36:34:7e:54:da:cf:d4:71:
                    b8:e3:cc:a9:f2:01:3a:4e:78:d2:85:4e:75:90:1e:
                    c2:09:bd:4e:6a:a5:44:a1:65:7e:cc:18:41:cc:f6:
                    ac:a5:b5:9c:66:2c:32:bb:fb:49:61:52:72:9a:4f:
                    fd:08:d1:13:bb:71:a2:cc:69:61:ba:02:15:e9:cb:
                    74:45:21:b5:68:fb:54:8f:c7:5a:d1:1d:eb:a9:77:
                    13:ce:20:0a:6e:de:66:8e:1e:d7:75:7b:20:41:eb:
                    a7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:23:65:F8:21:D9:0A:A2:C3:6F:39:4C:9B:93:CF:8E:F7:59:44:3D
            X509v3 Authority Key Identifier:
                keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:82:50:70:0e:e8:ea:df:96:af:a2:f4:09:2f:fe:62:28:f3:
         51:da:fb:d2:b5:3e:fa:53:9a:e5:1f:1a:70:28:a4:0e:67:de:
         12:4d:9f:a5:7a:c0:38:a0:ae:ac:81:0d:30:ab:73:e9:24:dc:
         25:96:59:53:c1:5d:14:dc:ca:d1:b7:26:3b:6d:09:84:d6:b4:
         4c:79:38:56:d4:5d:be:60:54:b0:4f:3c:09:03:96:db:80:42:
         05:1d:75:66:d9:1d:73:f9:24:a2:e2:97:0f:2b:73:c5:bd:b8:
         85:fd:4e:24:1a:2d:51:17:68:c6:46:8c:c3:20:97:d8:8f:1b:
         90:8c:be:74:de:05:0c:64:39:d9:dc:ea:27:7f:6f:ca:c3:99:
         95:20:12:7d:1b:70:4a:59:44:6a:6b:96:74:4d:0c:c7:73:89:
         31:51:e9:84:b1:ac:a5:67:f0:8a:64:74:71:16:6f:53:47:c7:
         2f:1e:66:e0:eb:f2:89:cb:84:6a:1a:49:1b:c2:09:c4:a3:14:
         4f:cb:27:c0:49:60:21:25:aa:24:15:f5:04:76:86:fc:02:f5:
         7e:0d:3b:85:db:64:b1:0d:78:92:9a:6e:ba:7e:bd:08:03:3d:
         4b:3c:42:44:cb:d4:a8:cd:c9:cb:14:e9:7a:a0:7f:c4:19:bd:
         18:cf:4b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----