Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File:                     N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier:          Wgtdgvn5lx7jr2oDM1Rx7Q2srtxCnG7sej9EL5wKS74=
Subject key identifier:   12:2F:81:C1:73:92:DE:36:75:01:77:0E:83:0E:80:C9:DE:0A:5B:F0
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer:       /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial:       01962F3DBFEFEEC7CA87494F1A115CDCFBA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number:          0982
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: iVAXXK1IrL/wJs5l6zriENshiGSwj+PKyAtvS28kVjM=)
                          2: zElW9nBSEefX0nViIsarFQPCkZs.roa (hash: CmIv1btIhlBvo+yXBuSYJkAIeImv5p3pKaVYvxzuwhU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bf:ef:ee:c7:ca:87:49:4f:1a:11:5c:dc:fb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=122f81c17392de367501770e830e80c9de0a5bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:e9:90:2e:11:89:fb:6a:c5:2f:d4:69:ea:
                    e8:32:0a:ed:22:50:e3:97:1d:26:32:52:cd:ad:e8:
                    33:d5:54:25:09:1b:4e:72:72:ac:c6:3e:56:3e:e7:
                    f3:8a:5f:b8:c8:30:03:59:98:1b:3c:32:8c:09:cc:
                    04:f5:de:33:f7:f8:e5:a7:f4:4b:27:74:5a:26:57:
                    aa:e9:3d:cd:9d:3f:a7:4b:2c:6e:6c:ed:ad:f9:7d:
                    7a:0c:fa:44:bf:e2:5c:50:74:4b:18:13:81:e2:2a:
                    11:7b:4e:ce:07:d4:d9:b3:79:25:fb:44:4a:f9:02:
                    1c:ba:ec:5b:f2:57:4f:2c:f4:79:ec:cd:43:48:8a:
                    46:cc:7a:5c:51:87:d7:ea:d6:74:8a:c7:0a:fa:9b:
                    d1:19:e3:2e:93:5f:9d:54:9f:96:89:09:f3:92:44:
                    68:48:97:f7:73:0c:e1:53:87:ab:41:e3:b3:8a:e7:
                    5f:2f:7e:b0:8d:24:4a:3e:df:37:2a:7a:d4:75:36:
                    de:03:43:fe:15:a1:30:f3:4a:fd:72:a9:12:24:2b:
                    42:34:74:e2:99:84:fb:d0:77:c3:68:de:e8:5a:9d:
                    35:fd:88:98:6a:aa:a0:1d:05:fb:67:7b:ba:fb:c0:
                    08:7b:7f:e9:97:90:ed:f2:15:a2:dd:b3:6e:5d:38:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:81:C1:73:92:DE:36:75:01:77:0E:83:0E:80:C9:DE:0A:5B:F0
            X509v3 Authority Key Identifier:
                keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:99:06:62:15:ff:a2:ea:da:5a:fa:69:25:65:68:5f:16:30:
         58:ea:25:87:95:8f:8b:dc:c8:15:9f:6d:03:92:f6:5e:24:6f:
         9f:cc:c6:6e:2d:0c:90:38:6e:73:3a:5c:ec:9d:dd:66:3f:26:
         73:a4:4a:93:0b:b7:41:1a:40:c0:0a:1b:50:eb:04:83:99:61:
         fe:e6:51:aa:3e:f5:78:f0:94:86:dc:40:67:3a:ac:6b:95:1b:
         88:55:b0:64:99:ef:2a:43:f1:13:8f:4b:6c:e7:eb:96:7f:de:
         88:ea:fe:d9:99:98:62:2c:ca:d5:d2:a1:8f:8d:84:e2:c7:2b:
         3e:aa:8a:2c:4a:16:07:ad:f0:bc:ea:12:ca:99:ec:78:f1:0a:
         7a:a2:72:67:c1:ab:38:86:a5:ee:6d:b5:49:5e:18:db:9b:5e:
         21:d0:d6:4c:30:c8:86:d4:c9:95:d0:53:2b:cd:a6:b7:06:e2:
         82:b1:ea:84:39:59:db:91:ed:2f:8c:80:f4:69:56:35:79:1f:
         72:b7:a9:66:4f:cb:02:48:15:92:a9:dc:1b:29:d3:1b:9a:bd:
         1c:5f:51:cc:79:4d:61:25:e2:f9:75:6d:27:f4:bf:d2:22:77:
         6a:05:b5:e4:45:23:76:60:4e:f2:2c:56:97:15:4c:c0:f9:0b:
         11:f0:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----