Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
File:                     NpxxPFGYfh_6VIInf18cjLci9Es.mft (raw, json)
Hash identifier:          rZlvVGQRGsFaR9Pvb9hfScpGKrHIl0cCUpp6RrICwO4=
Subject key identifier:   31:3D:C1:48:EF:01:E5:5D:BF:03:EE:59:78:94:52:BA:7B:24:F9:77
Authority key identifier: 36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B
Certificate issuer:       /CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
Certificate serial:       01962E98922308F3DF50E07F8B35B262A5DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft
Manifest number:          08ED
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: 6dTT-rARhT9SKaU0Q5LyIvW6cuU.roa (hash: AGsDOWQR4BMJI4oi03KYaFPz/MqqxHtOCzcXxJU+zUU=)
                          2: 9fxVVEARajC-2ASXFi0_DFGSBc8.roa (hash: hXfrG37neyCRh8L2PA4JPhumP6PxcdmlSO8PbLD9FY4=)
                          3: FW_JqLhHC7LyHZmaeSFALgStml0.roa (hash: pWsELGWJQyn59BiBQF9FnS772zDDCwVPNTG6tAAe2Fg=)
                          4: NpxxPFGYfh_6VIInf18cjLci9Es.crl (hash: GLsP0pDgK1A/tCMyzFGEj+T9pPXE18720sxny036E/0=)
                          5: rwCQmNOuZE_kryjC8QIDqyzBek8.roa (hash: OHzMcdBam5j/wfHUyz5DszdE5+OjpxcpG78RADThpWo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:92:23:08:f3:df:50:e0:7f:8b:35:b2:62:a5:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369c713c51987e1ffa5482277f5f1c8cb722f44b
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=313dc148ef01e55dbf03ee59789452ba7b24f977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a4:f7:d7:58:c7:66:b9:ee:e7:dc:97:94:7a:
                    a8:92:3e:63:3f:99:49:04:87:ae:ac:31:ef:1d:27:
                    14:6d:19:5b:2c:95:ae:91:c0:80:05:b2:0f:5e:e4:
                    0a:be:14:fc:2e:0e:5f:69:f4:a4:2b:c4:62:c7:d4:
                    94:88:61:38:53:21:bd:5b:6d:da:9e:2e:af:b4:be:
                    09:8c:e3:6c:84:40:c8:e2:24:d4:4d:b1:e9:29:72:
                    95:df:6d:5a:ac:c1:4e:b6:6a:2a:28:e2:c8:2d:5a:
                    1d:95:02:47:f9:e9:ea:27:88:22:5e:4c:3a:9a:27:
                    b6:a4:b5:6c:49:c0:3b:96:23:e5:5a:9c:84:19:9a:
                    18:05:be:76:a2:2d:20:8d:d8:5f:ea:a8:9c:46:65:
                    a7:1e:aa:15:a2:69:18:c4:dd:92:45:77:e2:6c:14:
                    67:91:aa:c5:38:a5:4b:d3:f2:21:c8:08:b9:3b:c5:
                    67:40:25:90:98:8a:0a:e5:cc:f2:01:68:0d:3e:3c:
                    f6:a0:c6:6a:92:f6:95:2a:a9:5e:17:5a:6a:26:38:
                    dc:29:6c:d7:8e:fb:56:1b:c1:ac:c6:14:6a:c1:1a:
                    64:86:3c:12:5f:3c:c2:eb:3d:f8:06:46:6f:bb:ec:
                    63:82:82:15:5f:7a:4b:02:b0:f2:f7:e6:e8:0e:83:
                    92:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3D:C1:48:EF:01:E5:5D:BF:03:EE:59:78:94:52:BA:7B:24:F9:77
            X509v3 Authority Key Identifier:
                keyid:36:9C:71:3C:51:98:7E:1F:FA:54:82:27:7F:5F:1C:8C:B7:22:F4:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpxxPFGYfh_6VIInf18cjLci9Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/802e9e-f982-449d-8b70-76c05cf5f2e6/1/NpxxPFGYfh_6VIInf18cjLci9Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:bf:41:c3:84:94:9b:91:23:d3:65:c0:20:68:b1:26:ed:e3:
         ed:a0:37:ea:eb:55:45:de:c2:35:28:a0:09:da:2c:06:fd:2b:
         97:4f:a5:a7:9d:f5:9a:f5:77:75:78:57:96:4a:5f:6d:78:8e:
         cd:96:81:b3:3d:91:bf:96:69:1d:aa:9d:2b:19:51:13:83:78:
         d6:c3:7a:0b:ec:ff:08:b2:8a:90:88:3d:31:fe:82:37:ff:aa:
         53:e3:8e:53:af:0f:57:3b:7e:de:0f:5e:da:05:38:a7:4f:c0:
         be:9d:5d:22:4b:9d:94:91:c1:3a:da:a4:5e:bb:bd:7b:0c:36:
         9f:b9:42:f3:01:35:35:d1:b6:ee:00:24:b7:49:6a:af:5d:3b:
         a7:5f:40:33:03:4e:f3:c6:92:08:a0:6f:33:67:80:8b:9c:3d:
         9d:f7:11:da:e1:26:75:29:cc:5a:21:9e:45:0b:65:3b:0d:a6:
         60:d5:7a:42:5b:02:ff:c9:ea:0e:31:54:24:3f:2c:2f:e5:b8:
         77:c4:1f:f1:64:b5:29:1d:dc:c2:cc:09:90:33:3d:bb:7b:71:
         6c:98:92:fb:1f:b7:de:d5:36:04:e9:fc:e7:97:98:fe:92:ba:
         eb:16:52:28:10:15:9e:2b:e2:2d:24:40:5d:00:84:ee:ea:fc:
         cb:ee:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----