Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
File:                     NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json)
Hash identifier:          qojNKb1uyqJlRix9ynCB089k9k5EUziowvmQQCkLKOE=
Subject key identifier:   DB:4C:5E:9B:F5:17:A0:09:8E:93:98:01:9E:76:16:93:51:FA:BA:C2
Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE
Certificate issuer:       /CN=363497200400b0f1aae7a87fca36f077e0ed62ce
Certificate serial:       01962F3DA868A0675AA985688A5E694A3CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft
Manifest number:          0E5F
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=)
                          2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: BDyUkiAPE5we9T4+qlfFXx6HsFJuQGopWLax8Y4czOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a8:68:a0:67:5a:a9:85:68:8a:5e:69:4a:3c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=db4c5e9bf517a0098e9398019e76169351fabac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4a:26:1d:bb:94:e9:d2:68:30:16:da:39:6c:
                    a0:b8:c7:26:d6:c7:e3:12:32:02:43:f7:14:ac:07:
                    89:d3:f9:3f:31:b4:7f:e9:96:43:de:d0:09:16:11:
                    8b:7a:2e:7d:7c:4e:f8:23:42:03:ed:9a:b4:05:f8:
                    0d:89:da:13:34:6d:6c:cf:e6:34:9a:a5:d3:21:ca:
                    ac:07:a4:9d:8c:f7:c1:fc:fd:fd:6a:2a:3e:a0:e6:
                    5d:a2:8d:4d:7e:0a:b1:70:d4:3d:36:ee:d9:95:70:
                    25:5c:e0:3b:31:b9:2a:23:bc:e6:d2:a5:87:59:61:
                    0a:b4:e1:60:f9:b3:ab:11:57:28:08:61:12:0c:ae:
                    b2:43:f8:83:9f:a9:ff:cf:07:da:c8:db:d6:f2:a5:
                    c7:d5:39:ea:4c:5d:4c:29:a8:b0:8b:0d:52:0a:2e:
                    3b:9f:a0:ec:d2:9f:cf:82:5f:dd:af:cb:82:e0:75:
                    0c:55:96:73:b8:38:fc:9f:da:10:91:61:77:13:c7:
                    42:f1:f7:2d:12:fb:f2:c2:56:8e:68:29:3e:d9:b4:
                    a3:86:9a:77:d3:bc:49:36:45:59:1a:49:44:3b:0a:
                    3e:76:76:bb:42:46:12:86:31:dc:7b:81:0d:41:3d:
                    05:ec:b9:ba:c5:64:42:9e:27:80:81:fe:b0:49:3c:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4C:5E:9B:F5:17:A0:09:8E:93:98:01:9E:76:16:93:51:FA:BA:C2
            X509v3 Authority Key Identifier:
                keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:73:2f:d0:2d:4c:4b:33:cf:a3:9c:eb:da:3d:47:94:e5:f2:
         1f:05:44:af:28:c8:cb:65:6c:34:85:08:8f:06:eb:fa:37:04:
         a0:a4:f5:59:bc:cd:36:11:7e:83:56:06:d1:7e:0e:4b:7e:3d:
         11:50:cd:8f:b0:c1:b0:e7:42:4a:54:0d:4f:31:e5:ff:4d:00:
         75:59:14:cc:19:bb:b9:46:2d:65:40:11:1c:24:7e:d5:9e:bc:
         38:09:a4:8d:09:c1:08:e5:f4:92:c2:e0:b5:83:a9:dd:05:a9:
         b8:4c:e3:86:13:45:95:d8:b5:e7:91:9c:9a:1a:ea:58:26:17:
         0a:46:11:81:25:81:ff:da:28:74:b5:c3:95:39:fc:db:59:d6:
         42:77:af:d2:2e:15:d0:c5:0c:b5:87:93:f9:51:a7:b5:2e:b4:
         c2:9d:6b:e0:d2:29:04:c7:9c:b1:7b:52:87:29:1f:87:5a:3a:
         4d:ea:9b:84:34:da:31:80:07:bf:8d:2e:10:13:03:98:9f:6b:
         ff:bb:ad:6b:c9:a4:3b:00:b5:bf:88:50:89:f3:f5:22:f4:bf:
         2c:29:ba:c6:38:d9:77:95:15:46:57:6b:82:76:d3:b5:2e:b1:
         87:fd:ca:bc:8b:8c:73:ca:fa:8f:a0:93:1a:8a:b0:9b:90:42:
         34:3b:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----