Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
File:                     myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json)
Hash identifier:          Tb6+OwNSEH9ka7judGU5ZQKSPoVGYKNKjiZejA3CWO0=
Subject key identifier:   52:8D:7F:63:07:0D:21:2D:02:CE:DE:1E:00:7D:E4:CF:A4:5C:C3:9A
Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91
Certificate issuer:       /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
Certificate serial:       01962F7440B0A68A945B36C23B9250C22B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: NN299CMGcNrQCWLhS0OXaJqVLGQ.roa (hash: 93xwbIS/LqBoxP2s7kvpuTwTAH+EjaA0+8jXoFMAE+Y=)
                          2: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: lCUcX0QT1j+fjR4UQn3cExpIZon3+QSpkY77Zbx5Ak4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:40:b0:a6:8a:94:5b:36:c2:3b:92:50:c2:2b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=528d7f63070d212d02cede1e007de4cfa45cc39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:c3:3f:37:35:ec:48:55:c2:08:b6:61:95:
                    f3:cb:a5:dd:1b:0d:84:89:e0:bf:1b:8d:37:1f:fc:
                    8b:fa:ff:77:98:ed:04:cf:5a:e0:c6:6d:48:42:7d:
                    8e:69:82:34:7c:eb:f1:45:d0:82:41:c5:57:5a:35:
                    23:d9:6e:a4:ab:4f:13:30:5e:2a:94:7c:e8:3d:17:
                    6c:5b:ce:da:75:e0:c0:86:3d:75:fb:76:d7:21:c0:
                    7a:fe:4b:ba:2b:64:33:75:36:c6:ca:79:98:5d:9d:
                    fd:2c:13:00:cd:53:8c:60:38:6f:de:3f:18:cd:26:
                    f4:7b:cf:8d:db:31:b9:84:82:22:13:0b:2a:75:7f:
                    a0:9f:97:45:02:a3:8e:33:ab:7c:86:fa:d8:ed:c4:
                    f8:4e:89:01:25:cc:db:83:1a:9a:5a:15:5c:fc:27:
                    b9:63:db:3e:e5:19:97:f0:97:7f:cf:bb:9f:d3:6a:
                    b8:59:88:a9:7a:44:46:1f:e9:f0:c5:da:98:12:6e:
                    20:ce:cc:8d:87:b3:3d:d9:86:ab:e3:72:24:1f:d6:
                    1a:8f:4d:62:a9:a4:f5:05:e8:55:a4:ba:79:8e:e3:
                    1c:96:66:26:b2:86:0c:0b:59:e0:a0:aa:cf:ab:66:
                    ef:6b:de:6a:52:f7:ed:ce:e8:8d:79:b4:a2:b1:a5:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8D:7F:63:07:0D:21:2D:02:CE:DE:1E:00:7D:E4:CF:A4:5C:C3:9A
            X509v3 Authority Key Identifier:
                keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:53:5d:7f:f6:55:af:fb:bc:fb:6e:dc:c6:7b:53:6f:c6:12:
         a8:3d:46:1f:09:de:81:39:78:c2:7e:3c:bb:34:7c:97:e4:0d:
         8b:f8:06:e3:99:b0:37:96:50:0a:0d:9a:52:1d:43:34:81:93:
         cb:81:34:9a:c9:79:f9:81:28:ad:b8:0e:48:45:b8:7f:ad:03:
         62:6e:47:5f:1e:23:6c:bf:10:e9:2a:84:40:47:1b:32:af:b1:
         d8:4f:17:f3:0d:72:6d:96:af:6a:46:40:09:96:fb:3d:89:76:
         96:0d:90:36:79:8a:5b:e4:d3:12:7d:1f:1b:f3:f2:2c:83:91:
         c2:6e:2b:f8:5c:3c:7a:6e:d6:a9:b4:c0:da:4a:e9:36:38:cc:
         01:6a:27:d3:a3:8c:1d:7f:39:c1:db:29:f3:62:5f:e8:cd:d3:
         9a:2a:89:df:1b:96:fc:51:96:ab:94:a6:a5:2f:84:ed:56:03:
         7e:c4:ea:4b:b2:e7:1b:74:10:64:06:31:c5:8a:96:74:f0:d4:
         5e:45:73:92:66:69:ad:4e:91:e3:7a:9c:f5:36:4f:dc:d9:3b:
         81:10:84:37:a1:00:23:60:46:4e:c0:6d:65:20:9b:f1:77:50:
         72:db:e7:24:59:3e:43:7e:d8:88:53:b0:2b:10:43:01:a7:77:
         d2:e2:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----