Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
File:                     NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json)
Hash identifier:          Lo/beC7wVt1bPuzC3XNdmRmQPemvdH+wWNW/C9oru0g=
Subject key identifier:   79:38:AD:63:52:D3:CC:F4:26:F5:4D:58:29:84:FB:0F:5D:3B:B5:50
Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Certificate issuer:       /CN=363548ed4628966248204c2fe69065f0d7b527a3
Certificate serial:       01962F06FA0E5A00AA22E215C25F048D8ACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: OgF9kjDmri5F2u3mpWWOFKLG7kXfmenowshdyMhnOVo=)
                          2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fa:0e:5a:00:aa:22:e2:15:c2:5f:04:8d:8a:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=7938ad6352d3ccf426f54d582984fb0f5d3bb550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:c6:42:96:0b:94:1c:dd:18:83:1c:f6:c0:
                    16:86:a3:cc:a4:7b:5a:e8:95:d9:0d:e1:e3:b2:cf:
                    84:c7:d4:74:d8:3d:82:82:2d:1e:a6:ec:51:bb:58:
                    48:88:23:f2:05:20:b2:f2:63:79:9a:c7:9a:59:f3:
                    67:bf:3c:ed:ee:19:aa:b6:bf:2d:35:13:d5:7f:d1:
                    70:f2:60:68:7f:86:d8:5a:42:de:1a:79:ca:b0:cd:
                    96:91:a0:6b:bc:70:8e:a1:47:ac:74:18:4d:78:51:
                    b7:1b:12:ed:9d:3d:ec:0c:8d:99:89:0f:a2:e4:51:
                    9e:e7:e2:36:48:e5:b8:4d:dd:37:47:15:03:56:50:
                    0a:99:6c:81:b6:e3:29:c1:2b:89:e9:31:02:a9:53:
                    17:f0:1e:17:00:81:db:ab:cd:a6:b0:39:9c:af:bf:
                    29:74:78:67:c6:90:ce:37:c6:0b:88:ae:4f:cc:df:
                    45:3c:7a:b3:45:d8:97:32:52:f9:fa:db:4a:65:0d:
                    44:68:bf:e5:10:6f:5d:41:fb:0d:98:cf:b7:0a:11:
                    26:ed:dc:97:38:4c:ad:14:d8:62:41:f8:a6:86:3f:
                    9f:c5:63:e0:fa:20:65:b7:73:8e:79:06:60:5b:c9:
                    cf:3d:97:2c:97:23:27:1e:15:0b:87:2a:07:a7:49:
                    aa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:38:AD:63:52:D3:CC:F4:26:F5:4D:58:29:84:FB:0F:5D:3B:B5:50
            X509v3 Authority Key Identifier:
                keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:33:66:ab:5f:59:fc:ba:ca:38:bc:54:60:c8:f8:75:30:52:
         a6:55:01:c5:15:57:f7:df:0d:af:10:e0:e9:e1:ab:50:7a:ad:
         19:72:19:10:c4:d9:60:a7:81:be:aa:6f:43:67:35:1e:1e:1c:
         a1:b9:1b:d5:d5:f4:46:d1:bb:ac:71:77:d3:63:0d:ab:38:32:
         ae:c8:bc:62:67:07:e7:19:24:77:1b:bf:9d:fd:7a:34:81:b1:
         1e:96:3e:a1:7d:24:55:b0:43:f0:4e:a6:7b:54:1b:2b:f4:f3:
         11:5e:c2:51:84:ca:54:e7:92:4b:03:fc:99:ea:7f:15:bd:e5:
         ae:19:ea:cc:e3:88:63:52:fb:97:fa:ab:5f:49:9f:84:74:aa:
         7c:32:f2:21:43:52:18:d6:cc:78:76:79:d5:7c:d2:41:4b:a4:
         e4:e5:6c:9f:1a:94:1f:f9:8c:84:a6:f4:c2:9b:12:0f:59:7b:
         e2:e2:d4:04:93:6e:69:68:c8:61:10:3a:b8:b6:48:1a:b5:f3:
         d6:b7:51:e1:b4:03:0b:32:de:b0:ba:bc:4b:c2:a3:ea:2a:e4:
         aa:1b:e8:50:39:2c:96:3f:b4:37:f7:38:0f:49:9b:20:fd:4e:
         f7:4a:c0:01:eb:15:cb:0d:0f:af:84:c8:b9:2c:b9:80:97:f6:
         80:24:45:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----