Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
File:                     NyU16sFYwCZyeiXh6-Rtilyc-78.mft (raw, json)
Hash identifier:          L6fMjq//AVrXm19RxrEHJU15LahZ4tS3rI22PZ0Mf8s=
Subject key identifier:   6C:68:02:91:28:A6:B6:E3:92:8A:9F:5C:35:80:B2:D6:08:99:99:C9
Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF
Certificate issuer:       /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
Certificate serial:       01962E98C48179185073790D1CCFFB3A3871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: Ex_2ickmNwSl468A43nBNWlR1U4.roa (hash: 2F6N+mLC+ZFSEAJYbcx9IRB+VD26lz+G1r697PEXjx4=)
                          2: NyU16sFYwCZyeiXh6-Rtilyc-78.crl (hash: EVmQyTjScCjOn8YGX5pz5UK7BzyUKvKp7fAS323/e+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c4:81:79:18:50:73:79:0d:1c:cf:fb:3a:38:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=6c68029128a6b6e3928a9f5c3580b2d6089999c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:c4:ea:fa:ab:11:ec:d1:71:c9:40:1d:00:
                    75:37:e4:2e:98:92:9f:2c:96:e6:3a:54:34:b3:60:
                    3a:a4:7f:27:97:cf:14:28:80:40:19:b5:7f:97:3a:
                    7f:dd:ca:15:24:6f:40:0f:fd:6d:8c:55:f2:cd:ce:
                    2b:12:17:ad:2e:69:30:2f:92:65:44:40:ea:9c:ac:
                    2a:c3:68:95:9a:28:c7:a7:97:f3:9e:10:a3:c7:f6:
                    03:64:15:66:d1:de:7f:b6:8a:7f:c5:8b:cd:08:74:
                    46:92:fb:c5:d7:f3:2c:66:30:d8:04:3c:9f:90:1d:
                    df:da:fe:10:2c:94:cd:59:a2:36:df:18:e4:6e:1b:
                    08:9d:9c:7e:e3:3a:37:b2:1c:ab:a8:f3:33:e6:f8:
                    be:5f:5f:cd:d1:31:84:a4:cb:fd:d8:25:aa:d3:22:
                    c7:04:18:76:e0:bc:df:ad:37:d5:1b:d6:2c:37:6f:
                    b9:59:77:65:29:db:a0:9d:05:e7:15:e8:9e:c6:4d:
                    66:45:19:ab:9f:9a:78:4d:38:13:40:25:49:89:bf:
                    01:54:ec:12:1c:23:a3:a1:1f:90:32:76:55:d9:de:
                    77:02:5e:7d:c7:33:46:f1:62:c1:54:17:b4:ce:a9:
                    af:bc:27:39:6e:70:64:71:4e:d0:52:a1:25:3b:40:
                    4f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:02:91:28:A6:B6:E3:92:8A:9F:5C:35:80:B2:D6:08:99:99:C9
            X509v3 Authority Key Identifier:
                keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a1:0e:a6:ce:de:c0:07:34:66:cc:22:de:2d:d2:e8:5c:18:
         2a:2f:24:dc:d6:9e:20:8d:b2:0d:10:91:af:82:23:03:b2:92:
         7d:f9:b7:2b:5e:58:b0:02:d8:fc:9f:6f:b5:7a:29:86:2c:17:
         e4:44:45:66:de:b8:69:d9:c8:14:91:d6:d7:b8:00:79:9f:9d:
         d0:db:9f:08:8f:cb:c3:b4:d7:cb:ea:5f:d6:02:cc:f8:1a:55:
         d4:fc:10:50:f2:fb:f4:20:02:3c:0f:fb:ac:c8:76:c4:13:45:
         3a:e4:36:a5:1a:28:07:fa:53:7a:38:a4:75:72:17:91:79:d6:
         ae:c8:ce:56:4f:6d:04:14:b9:2a:78:b6:f7:bb:75:7f:f1:1c:
         14:b5:26:8e:ec:7d:b9:e1:7b:6b:5d:07:47:35:d3:a9:ca:e2:
         e4:da:7c:4f:62:b6:cb:e0:8c:13:c5:00:8a:8e:bd:87:2f:96:
         39:94:d7:16:4f:f6:d2:f3:c9:c0:f7:e1:e6:5c:35:8d:8f:c9:
         53:a5:87:e1:d6:43:62:87:fa:82:9c:f5:d6:3f:e8:a7:10:dc:
         4e:ad:b8:51:44:5c:7a:65:51:3e:3c:fb:f9:1e:14:7a:55:8a:
         af:ef:91:5b:53:44:a3:26:24:46:5f:e9:b4:45:77:09:36:ca:
         28:f6:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----