Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File:                     1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier:          kIqdFKDR6MO/dUNfrXbsga58CJUgtG93GUfjk7wJeTw=
Subject key identifier:   14:BE:72:B4:6E:1C:AB:C4:D6:E9:F5:14:B8:23:18:9A:97:13:E5:87
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer:       /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial:       01962DF45B72FF169C693280F766F15C00D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 07:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:50 +0000
Files and hashes:         1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: 4QmqRBJVRhOH3193eI6asRDSEUVZ0Mf2/7xAA24WhW8=)
                          2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=)
                          3: dYsfx3N8F8Pa41InMzgd7Y-Nwv8.roa (hash: +2ick/BrqTQkAWkGD2npFbQdv9qSaL8sDhmWgVr+qIo=)
                          4: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=)
                          5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=)
                          6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:5b:72:ff:16:9c:69:32:80:f7:66:f1:5c:00:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
        Validity
            Not Before: Apr 13 07:01:50 2025 GMT
            Not After : Apr 14 07:01:50 2025 GMT
        Subject: CN=14be72b46e1cabc4d6e9f514b823189a9713e587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:00:27:67:ec:d1:7f:5b:4e:3b:c4:d5:9b:
                    99:15:4d:ae:66:f2:0b:94:ef:24:ae:c3:fc:e9:6b:
                    b7:f1:ef:d2:c1:c5:a5:55:fa:a1:ee:1c:c7:0d:f1:
                    ee:25:91:ad:1c:35:9a:f3:5b:da:f3:fe:c6:9b:c6:
                    8a:bf:5e:8d:07:b9:ae:71:0e:fc:0b:44:60:e1:61:
                    6b:bb:fd:1e:07:6d:b2:69:4b:ec:f3:4b:fd:a1:60:
                    96:7f:1d:2c:62:df:8d:7f:a8:8f:4a:bb:d3:53:e6:
                    06:f0:11:18:44:76:d3:9d:56:a1:ef:22:1e:4a:a5:
                    fc:df:31:68:59:cc:60:f7:23:57:e2:fe:20:a6:d8:
                    c9:ab:fe:05:be:11:8b:60:8c:30:9c:be:23:d4:45:
                    60:7a:dc:95:06:3e:ec:db:cb:1b:02:32:b9:48:65:
                    b3:67:94:97:8f:5d:98:87:7b:b6:c3:df:2c:b6:5a:
                    7c:1c:54:ab:61:de:84:4c:0f:97:08:f7:8c:d0:f4:
                    93:60:a5:8b:d1:c6:f1:f2:ae:b7:b8:e8:5b:67:00:
                    0d:a6:7d:64:22:18:ec:90:e9:53:04:50:39:28:28:
                    84:73:31:5d:87:0b:34:5a:e2:1b:2d:75:37:35:21:
                    d1:c0:45:72:75:cf:24:89:f8:ba:60:70:fe:b5:83:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BE:72:B4:6E:1C:AB:C4:D6:E9:F5:14:B8:23:18:9A:97:13:E5:87
            X509v3 Authority Key Identifier:
                keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:b7:c2:09:ff:98:73:ac:2d:12:63:c5:80:37:5f:d1:8c:59:
         49:1e:89:21:6e:bf:32:e0:1b:79:b4:a5:f3:9f:3d:c0:30:45:
         fe:82:c9:73:da:03:5c:9d:48:0d:f3:f0:ea:6f:f8:76:66:e5:
         5a:f6:f5:17:cf:fe:85:67:5c:87:d1:46:ee:31:17:b5:bb:8c:
         ed:48:8e:c1:bb:3d:fc:03:d8:ae:c6:73:9c:12:8a:ba:8c:a9:
         20:1f:a8:84:fb:8e:bb:d5:ed:7b:6d:af:09:82:4c:d3:b7:be:
         0f:17:55:58:a9:b0:13:ae:00:ca:16:1a:7d:37:34:57:66:8c:
         22:32:a9:e4:b0:b6:53:0d:62:04:a6:7e:91:13:1f:69:d0:88:
         65:86:f3:06:c9:7d:18:c0:1a:c1:86:0d:49:3c:3d:2a:17:f4:
         f0:81:51:a6:f7:19:7e:07:2f:b0:6a:a3:23:f4:6a:68:b4:f5:
         8c:d5:1b:ca:34:d6:76:67:4e:a5:cf:49:c9:b7:8c:b0:f9:ec:
         ed:f1:3d:8f:84:93:30:35:13:67:90:72:e2:02:83:2e:90:38:
         3c:7e:23:40:7f:84:1c:1f:61:71:42:ec:8f:ef:1f:d2:67:86:
         a9:d9:37:15:17:ea:bf:e8:e2:0d:de:85:8f:53:46:30:ba:cd:
         93:79:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----