Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File:                     NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier:          pfQ86WzwHG+Ef2Qbjh3lhancxHvt4v9+UHRdHHgftYg=
Subject key identifier:   FE:3D:01:47:3C:92:B2:A0:34:89:C0:8A:F4:7E:E1:6E:73:6E:D2:A5
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer:       /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial:       01962F06B1F66D6B48E46CDA4FB4F835899F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
                          2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: FcMKzohP9zLnlzP09hbjhRvaOOLoS56UQFuXRLKctKs=)
                          3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b1:f6:6d:6b:48:e4:6c:da:4f:b4:f8:35:89:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=fe3d01473c92b2a03489c08af47ee16e736ed2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9a:2b:ea:09:bf:2b:aa:e6:3d:91:4c:90:55:
                    7a:07:bc:9e:dc:3b:57:99:f7:7d:36:9d:a8:b4:e4:
                    d3:17:9d:ec:f6:9f:68:07:c5:bc:2f:7f:51:86:b5:
                    59:35:d2:4d:b9:92:0d:4a:5a:1b:67:88:f5:15:f5:
                    52:b3:ad:55:eb:71:bc:73:80:8f:e0:3c:8f:80:c5:
                    ad:7b:62:66:80:02:0c:0e:f1:22:8e:eb:d1:ca:ad:
                    1b:73:97:8b:17:2c:d5:90:cf:9d:03:1b:9e:8e:9d:
                    30:2c:84:80:68:f8:f5:66:00:52:9b:9e:5a:62:29:
                    a1:93:74:f3:69:99:0e:ae:59:79:bb:13:03:67:27:
                    21:ee:91:2d:5c:17:16:c8:0b:13:a4:d6:14:90:63:
                    53:4e:6c:b6:f1:cd:84:ce:df:23:90:f3:63:28:07:
                    e1:8b:26:0f:e1:ba:54:5c:26:7f:b7:28:c9:c1:39:
                    90:35:99:a7:7f:3c:93:b0:7d:fa:af:ce:9f:11:45:
                    34:5c:fc:8e:5d:4a:55:27:9c:fc:43:a9:c3:f3:04:
                    e5:82:23:77:44:fe:ae:d1:85:94:36:ce:b1:d3:e6:
                    3b:b0:34:3d:c2:d2:12:78:3d:a9:c9:7b:8e:5d:39:
                    d9:70:3d:cc:6c:37:23:87:07:4d:f2:24:59:20:c7:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3D:01:47:3C:92:B2:A0:34:89:C0:8A:F4:7E:E1:6E:73:6E:D2:A5
            X509v3 Authority Key Identifier:
                keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:7f:36:31:89:9c:3f:a8:0f:17:1b:c7:5b:18:3c:24:18:6b:
         61:1e:26:76:f1:a4:d5:3e:f6:22:8b:e0:56:33:b0:c3:6d:33:
         5f:a5:57:4d:03:ea:c4:28:56:e7:b4:86:a2:ec:94:df:d5:08:
         bc:57:54:40:1c:a0:db:f9:43:0a:be:ac:5c:93:ab:e9:07:55:
         f2:94:38:8a:e8:53:4d:12:71:95:72:cd:a3:18:bf:d3:38:29:
         ab:48:2e:ef:ca:8e:7d:cd:4e:4a:23:0f:0d:f2:5e:69:07:62:
         6d:97:06:90:92:0b:c3:92:3a:e0:c9:e8:2c:52:0b:bd:d8:04:
         31:15:9d:12:7d:53:49:43:25:05:4e:e5:47:9b:27:67:8a:f6:
         58:2c:16:47:69:bb:9a:66:0f:a3:4d:e5:13:e0:92:2e:53:e0:
         d1:e8:5a:47:58:f9:ec:fa:87:d6:df:b5:ff:d4:eb:c3:90:0b:
         c7:05:dc:b7:25:11:c3:9f:c2:01:03:10:f8:fb:00:a2:69:45:
         9d:86:83:13:b1:d3:a3:28:c1:e9:ae:75:9e:1f:c0:c1:64:1b:
         e4:4c:5e:c0:98:52:21:13:a2:d3:b3:2a:de:37:80:1c:6b:a5:
         c4:12:10:a8:f8:2b:13:d8:f4:45:94:35:c7:ee:35:95:d6:d6:
         3e:b3:23:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----