Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
File:                     NxYpWi0WQ853rHom4CJke8R5Awc.mft (raw, json)
Hash identifier:          d0B5LyU+knNU+HTz3yHXjORAIax4N4OfIM2YUGFz4uY=
Subject key identifier:   D8:73:F0:14:7E:74:4A:39:A6:1E:B1:87:69:A3:F4:02:2F:BC:04:9E
Authority key identifier: 37:16:29:5A:2D:16:43:CE:77:AC:7A:26:E0:22:64:7B:C4:79:03:07
Certificate issuer:       /CN=3716295a2d1643ce77ac7a26e022647bc4790307
Certificate serial:       01962E9933EFE87A5DF7D7ADCB0269844059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
Manifest number:          0864
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: NxYpWi0WQ853rHom4CJke8R5Awc.crl (hash: 3LLqwhyPKhBiBNqLC1D4wvqZ15ouS7gZvAaefbOiblc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:33:ef:e8:7a:5d:f7:d7:ad:cb:02:69:84:40:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3716295a2d1643ce77ac7a26e022647bc4790307
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=d873f0147e744a39a61eb18769a3f4022fbc049e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:5e:05:97:6d:d3:8b:10:93:e2:6b:9e:e2:
                    3f:0e:44:2b:76:6a:66:db:4c:a1:36:1a:96:7f:80:
                    b5:29:49:84:1f:dc:4a:ae:4d:6b:af:12:ff:d9:c7:
                    ec:83:52:cd:ca:b9:4d:17:71:a3:ab:05:04:4c:56:
                    2c:94:a0:7c:40:5f:83:aa:75:f6:8e:5f:24:ac:54:
                    03:2d:bd:a5:99:14:83:c8:1c:22:0f:b9:78:be:0f:
                    48:d9:79:f6:75:89:6f:6b:8b:8d:ae:f5:bc:e1:ae:
                    23:0e:d2:0c:d0:f7:bd:dd:78:df:58:c4:db:0d:4d:
                    ca:b8:8c:c8:f3:54:5a:7b:70:c9:97:c6:c9:f9:29:
                    8a:bb:ae:5b:11:da:1b:87:a5:88:4d:e0:71:62:43:
                    c6:5a:10:c3:56:e2:8d:7d:1e:6a:d3:9f:2c:ec:a0:
                    58:a8:94:8b:8f:d1:2c:43:7a:eb:a5:6b:e3:b1:2e:
                    5e:b7:58:18:63:68:3b:df:b0:96:8b:c0:3f:4a:97:
                    20:ac:52:4b:68:6a:d5:e7:a9:c6:f7:e7:15:80:e7:
                    e6:4c:e5:33:f6:a5:42:8b:dd:ae:7d:9c:83:8b:d1:
                    b7:6e:c7:d9:75:76:46:ad:1f:be:0c:70:4d:c4:8d:
                    75:19:f4:21:e2:1a:aa:06:34:05:6a:aa:39:3f:ea:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:73:F0:14:7E:74:4A:39:A6:1E:B1:87:69:A3:F4:02:2F:BC:04:9E
            X509v3 Authority Key Identifier:
                keyid:37:16:29:5A:2D:16:43:CE:77:AC:7A:26:E0:22:64:7B:C4:79:03:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:75:09:c5:18:a7:96:d9:f5:dd:7e:cc:30:af:48:86:d5:2b:
         34:c8:ad:e6:d5:7f:8b:9a:19:d6:71:7e:f3:cd:a9:2f:20:86:
         9e:32:f3:53:66:6a:1e:0e:2e:be:9e:d8:a2:56:37:e0:5f:6d:
         aa:02:22:69:40:95:65:70:c7:94:c2:af:07:6a:42:69:8e:bc:
         e3:d7:4c:7c:ce:71:30:e2:b1:05:6f:60:46:09:1b:42:dc:5a:
         16:5a:97:78:4f:5c:25:24:17:37:38:29:0a:ff:e1:8d:17:af:
         ab:f6:e3:07:54:90:e0:c6:da:6f:e1:23:db:43:26:9f:66:ba:
         2b:7d:53:e0:42:f8:1f:2f:a9:6d:8e:3a:63:49:92:f8:5d:1e:
         79:b1:bd:c5:77:90:5c:7f:68:a0:36:b8:d4:4e:28:45:25:a8:
         2b:1f:70:41:ff:5e:6d:4f:8a:45:c5:f9:3b:37:b6:0f:14:06:
         28:0f:32:4d:70:e7:3a:92:fe:7c:56:6b:88:16:3c:bf:38:06:
         f5:e0:8d:03:fb:b6:66:0b:13:4a:27:41:2f:90:5a:5b:4c:e0:
         0c:fe:f8:55:d4:f1:f9:11:dc:b4:be:43:e6:69:61:36:d4:39:
         57:f5:b5:9e:15:c4:25:22:83:b8:e4:3f:a4:c1:07:01:7d:93:
         fc:c1:74:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----