Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File:                     N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier:          eyqaFMzDm2JAtKkP0b8JoUe5Cr+NIMTZkBMQ3ykGOm8=
Subject key identifier:   ED:BC:60:2E:84:BD:16:9C:90:66:77:FD:2E:5E:1C:11:E1:07:DD:59
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer:       /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial:       01962E987E59F183081EA05929730DE900D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number:          049C
Signing time:             Sun 13 Apr 2025 10:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:07 +0000
Files and hashes:         1: EVhtzzYjK-7A1-FFXkSZygpmCzs.roa (hash: donTZTGqv/27HvndsP4MHOdeXIlkLJEwHJlrZ1dm4VI=)
                          2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: UiAwcQ2v7OadHBur4EfZX9+xO3hxABpPbw+aTOk87uE=)
                          3: itumN46ws5yfi4Y6DkixncaSsdo.roa (hash: +UEPpvO2cOgFkSfUyIRgCuAJltUTHP8VJlXNHfaW3AA=)
                          4: s1AjbUJ8flHhzJzb6iz5z8RYum4.roa (hash: 5eBSOeVacCWcPo2DJzprnuXzxSgaZd2/89V1SjPZZHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:7e:59:f1:83:08:1e:a0:59:29:73:0d:e9:00:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
        Validity
            Not Before: Apr 13 10:01:07 2025 GMT
            Not After : Apr 14 10:01:07 2025 GMT
        Subject: CN=edbc602e84bd169c906677fd2e5e1c11e107dd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a6:c6:a3:14:1c:35:34:23:f3:e3:92:2f:7e:
                    e6:b9:4d:7a:a6:ea:ea:e2:73:32:46:50:1d:e8:e8:
                    90:0c:d2:49:ef:51:34:0f:0f:30:35:63:24:3f:50:
                    86:0b:30:24:53:ca:92:da:36:8f:25:de:5b:b7:9e:
                    1d:bf:5a:00:ce:fd:b2:71:99:64:86:e9:99:53:0a:
                    fc:2d:21:a8:56:8a:58:ce:24:cf:ef:a9:c9:10:0b:
                    1d:91:96:4c:7b:a7:7d:9c:c5:fe:d9:e4:e8:d0:e2:
                    e1:99:8a:d2:76:ae:89:cc:20:67:0a:0a:bd:55:ea:
                    33:46:28:51:f1:c6:35:9c:56:ed:8e:ec:b1:df:02:
                    5c:53:5d:ab:fd:8d:6d:fb:12:99:b3:da:93:cf:92:
                    7e:d6:fc:ea:cf:3f:b6:1e:d2:28:a9:89:15:4b:2c:
                    fb:b2:7f:a5:1b:c8:d2:4a:c5:ad:05:e3:f0:4e:b4:
                    6c:ba:26:ba:f0:bb:72:ad:68:9a:94:3e:f1:f5:93:
                    29:a0:32:ab:e1:b8:76:4a:7e:5d:f4:61:7f:c9:f4:
                    4c:b5:a3:57:ac:8e:8e:2c:61:69:a7:37:11:c2:01:
                    c0:a9:1e:17:2d:2e:03:82:cc:34:64:43:21:48:93:
                    27:ee:f7:ec:3f:4a:2a:a9:eb:0c:ad:97:37:11:12:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BC:60:2E:84:BD:16:9C:90:66:77:FD:2E:5E:1C:11:E1:07:DD:59
            X509v3 Authority Key Identifier:
                keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3a:f3:bd:d8:c2:7a:c7:81:77:aa:b0:f9:33:79:4b:ea:c3:
         30:ea:79:da:87:a1:6c:81:76:ca:0e:db:4d:86:df:ef:aa:48:
         5b:37:7e:88:88:fc:37:f9:17:72:b9:d3:5a:97:ab:c5:98:03:
         3d:34:42:44:c4:60:cc:5f:9b:e3:dd:3d:07:05:64:2b:75:b6:
         6f:52:3c:a8:5b:89:2a:d7:ae:79:b6:e4:5a:2e:0c:93:44:dc:
         f8:9c:ac:35:75:86:5f:45:1e:24:2e:d7:54:20:43:04:fb:fe:
         57:78:23:01:48:50:22:22:3c:8a:2f:84:2e:e0:15:ff:c5:74:
         7e:cf:45:16:96:a1:4d:f1:99:9f:0e:9f:b4:58:c7:2b:cd:ca:
         7e:fa:e5:00:50:49:29:91:4a:11:b9:aa:d6:7b:ad:89:96:4b:
         eb:98:33:84:89:8f:92:28:05:c2:dd:2c:b9:a0:23:49:cc:97:
         cf:3f:1c:6e:aa:b4:7a:e6:58:de:e6:25:83:3a:1a:d5:d6:3c:
         91:7f:2e:38:b5:1e:12:b6:77:08:5b:d0:12:53:86:94:b4:8f:
         02:77:7c:ee:31:a8:6e:7d:11:35:77:0e:6e:ab:6e:fa:aa:a7:
         c1:61:2d:d1:1f:8b:76:bc:53:e5:95:ec:75:d1:74:78:67:d5:
         52:19:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----