Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.mft
File:                     NXwbu7IW2REwR2H6ezE3hHDKtpw.mft (raw, json)
Hash identifier:          ZDBOeGr/s9hag6g/s5eZU/j+fnoI59jt/C96Yxrjzy8=
Subject key identifier:   6A:46:88:61:AD:C0:FC:46:EF:0A:F8:DA:69:BA:42:55:4C:2A:98:B2
Authority key identifier: 35:7C:1B:BB:B2:16:D9:11:30:47:61:FA:7B:31:37:84:70:CA:B6:9C
Certificate issuer:       /CN=357c1bbbb216d911304761fa7b31378470cab69c
Certificate serial:       01962F073C12B0B244C72921B296ABD49793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NXwbu7IW2REwR2H6ezE3hHDKtpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:05 +0000
Files and hashes:         1: E9pk0ZllttDZKXJOg-IRuSUOGuI.roa (hash: iZIfCGoic6nKxXYncNFRzeFxubwStFv6Tsp9EcrF68g=)
                          2: NXwbu7IW2REwR2H6ezE3hHDKtpw.crl (hash: SXMJ6IxDTzJmVRU6GbBDvaC8mwmt+IU5mSrftpw1jX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:3c:12:b0:b2:44:c7:29:21:b2:96:ab:d4:97:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=357c1bbbb216d911304761fa7b31378470cab69c
        Validity
            Not Before: Apr 13 12:02:05 2025 GMT
            Not After : Apr 14 12:02:05 2025 GMT
        Subject: CN=6a468861adc0fc46ef0af8da69ba42554c2a98b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:68:61:59:82:7a:e1:5e:cb:d2:11:d7:2f:
                    c2:b4:59:85:11:20:69:a2:8f:d0:9a:83:9a:c5:07:
                    1a:10:26:e4:ea:6a:52:dd:ca:ab:ae:76:a9:f2:50:
                    79:fa:94:10:5e:a2:70:89:f7:da:85:3e:c1:7f:15:
                    29:5d:e6:3a:5a:3a:b6:4f:47:a1:c0:b3:ca:8e:d3:
                    4a:d6:08:51:c7:81:35:2a:e9:d1:ba:25:8b:8d:e4:
                    fd:76:e6:f4:31:62:31:aa:3d:8e:86:09:0d:bb:02:
                    f6:3c:d9:49:cd:c9:75:8c:cd:54:a5:27:19:d0:87:
                    58:f6:6b:d1:a3:31:dd:32:40:cd:92:74:d2:97:4d:
                    b7:16:c3:1a:72:23:61:11:45:ae:55:43:50:c4:81:
                    41:41:a2:b1:ec:b9:37:d6:96:02:db:d2:fd:4d:47:
                    03:e5:1a:d1:8b:58:17:59:c4:12:dc:54:61:d9:20:
                    76:34:84:16:c0:88:5e:91:f8:81:bd:e7:8f:bc:ca:
                    ec:cf:73:10:ff:bd:01:a4:28:a9:24:a3:5f:51:a6:
                    4e:b4:34:d0:c3:ba:f1:03:48:31:22:f5:0a:ad:28:
                    a4:34:eb:f8:e7:07:66:09:cb:1f:77:6d:3d:66:92:
                    a3:1e:f4:7f:20:86:66:4c:13:a0:7f:c3:a5:5f:8e:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:46:88:61:AD:C0:FC:46:EF:0A:F8:DA:69:BA:42:55:4C:2A:98:B2
            X509v3 Authority Key Identifier:
                keyid:35:7C:1B:BB:B2:16:D9:11:30:47:61:FA:7B:31:37:84:70:CA:B6:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXwbu7IW2REwR2H6ezE3hHDKtpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72cba3-6051-4218-88c2-50861eeb5d5d/1/NXwbu7IW2REwR2H6ezE3hHDKtpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:3a:80:79:18:b7:ee:fc:07:63:e4:f3:21:62:eb:ca:d7:
         92:b3:bb:bf:98:f6:c2:e8:6d:bc:56:9c:5f:51:33:80:13:22:
         a8:d8:7c:35:6e:dc:10:e9:39:5c:7e:0d:41:27:20:66:67:01:
         28:11:bd:c4:24:35:73:e6:ce:88:13:2d:09:a5:75:e1:8b:50:
         f2:40:0e:98:1b:56:df:97:80:ed:4b:1e:67:47:52:56:d9:98:
         9b:7b:79:25:b3:1f:f7:45:5d:c0:d4:9f:75:21:f5:65:0c:b7:
         22:5d:62:f7:83:7a:dd:b0:5d:78:f5:16:4f:87:5e:71:b4:fb:
         1e:ac:61:e4:80:8e:b2:32:43:89:71:4a:40:01:05:cf:f2:f8:
         47:2f:ea:17:6c:42:d2:e9:a1:e8:36:33:42:a6:6d:d1:f4:36:
         25:54:1a:ef:f5:e8:3d:70:b6:60:71:64:60:38:97:c8:0f:e6:
         96:23:98:39:bf:8c:54:ab:3c:ad:42:c3:5f:4b:3c:27:b3:cd:
         ae:06:82:b3:00:19:66:a3:18:79:d6:a3:7f:09:ea:80:32:80:
         01:1f:b8:4f:fa:61:c3:14:76:0b:b7:10:04:da:e7:3a:40:68:
         94:92:bc:a5:11:72:f2:d4:6e:bf:47:3d:ce:92:f0:88:23:28:
         6d:3d:93:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----