Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File:                     N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier:          X5k2/WAbinrOnnAOmc1oBOJrwIrgROzl2YB0qUARcXo=
Subject key identifier:   5C:10:30:3A:2E:FE:49:E5:70:E3:BB:1A:92:12:24:6D:8A:CC:F0:4A
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer:       /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial:       01962F07388C1B7C14A3454BD6AB2DBA7D2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:04 +0000
Files and hashes:         1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: RiP56HtF20CaHGRCdESWIl/b3F5peI432IZ5wz29FTk=)
                          2: ZRv7bLa28b8tf6OWanURzCF5xRg.roa (hash: oK8tGS8JdWtsRZmm08fTUJdRLOafRX6MArGF8Pv/FL0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:38:8c:1b:7c:14:a3:45:4b:d6:ab:2d:ba:7d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
        Validity
            Not Before: Apr 13 12:02:04 2025 GMT
            Not After : Apr 14 12:02:04 2025 GMT
        Subject: CN=5c10303a2efe49e570e3bb1a9212246d8accf04a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:08:03:83:ad:72:f2:df:56:6b:7d:95:ee:
                    9a:33:e0:71:99:0f:5c:f1:3c:2e:4b:ae:11:dd:85:
                    6e:78:fc:4a:5b:58:b4:b1:0d:ac:80:37:9f:da:35:
                    cb:e4:b7:dd:19:91:2b:67:78:bd:ca:db:5b:9c:64:
                    2c:bf:94:d8:8b:94:c9:d5:17:98:3e:44:91:b5:20:
                    3c:78:34:85:a7:e0:4e:0f:b1:af:26:4e:b4:7d:63:
                    60:01:6b:4c:29:32:00:e6:80:93:26:c2:11:10:bc:
                    2f:9d:6a:74:bb:63:6f:09:2f:5d:04:8e:52:f0:94:
                    11:bb:a9:b6:3b:d3:62:e0:ed:2e:fa:52:4d:7f:fe:
                    d9:77:b6:b5:4a:80:fb:89:8d:af:0e:57:7b:2d:cc:
                    9e:3b:f0:11:ac:a1:94:90:7d:85:07:79:01:bf:fb:
                    eb:e3:96:68:a3:a7:48:f2:72:52:f0:76:c2:49:a5:
                    85:c4:22:0f:67:ff:87:fe:61:3f:8f:2d:b0:4a:bc:
                    6c:06:f2:56:a1:35:98:f1:05:e8:1c:9f:fe:1d:d7:
                    cd:af:f0:fa:b9:1b:5a:e9:76:02:42:2b:0f:8d:a9:
                    64:37:42:e1:ab:dc:41:2a:54:53:a9:fc:89:fd:bd:
                    8a:8a:38:5a:0f:bc:d7:6d:dc:c9:96:eb:f9:c0:8e:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:10:30:3A:2E:FE:49:E5:70:E3:BB:1A:92:12:24:6D:8A:CC:F0:4A
            X509v3 Authority Key Identifier:
                keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:04:70:d9:fe:00:ef:8b:40:2a:88:a9:ff:62:f7:04:7d:33:
         4a:06:91:e1:e0:ac:41:17:1c:30:40:84:f3:46:bb:fc:c1:04:
         cd:34:3b:93:30:64:dd:00:90:41:34:2b:85:7c:73:59:75:8a:
         59:d8:90:4e:11:fc:15:85:fa:c3:27:93:0d:be:e8:89:ee:ce:
         40:05:08:53:47:40:29:03:01:b3:e2:71:5c:ef:fe:0e:ec:aa:
         11:33:0b:e6:14:05:4f:44:57:84:45:87:f6:4b:4c:66:e9:5e:
         ae:d4:0e:95:ab:01:7d:51:6d:4b:47:3f:8e:86:b1:75:28:60:
         bf:fa:5c:fd:b0:fc:94:e4:d9:58:3e:fb:b9:4a:0f:30:85:70:
         de:1c:6d:15:3a:60:3f:11:11:01:5c:ce:79:8b:b0:41:92:8e:
         e2:cf:0d:66:10:d2:67:3f:45:d6:33:1a:25:d2:a0:55:65:3d:
         ef:70:1f:96:71:1d:ba:a0:ee:83:b8:20:04:76:57:95:57:e2:
         12:ec:25:c3:28:bc:60:d7:0c:6f:5c:80:1b:c1:0b:ed:cb:0f:
         32:41:27:67:81:36:4c:9f:58:8b:62:71:48:bd:88:9a:e8:ee:
         a5:9b:77:e3:94:1f:4d:28:91:a2:4e:13:c9:58:4d:f3:6c:a8:
         7b:7d:da:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----