Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File:                     N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier:          e1FY7SnA2dsLeWDovVEdvOjBJ801yRegR4xaU42Kgqg=
Subject key identifier:   80:FB:F2:B6:5E:7F:D9:E5:15:00:70:31:DD:F1:D4:51:11:7E:9D:4B
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer:       /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial:       01962F7423CC325752452342CD61591B8A80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number:          01B2
Signing time:             Sun 13 Apr 2025 14:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:02 +0000
Files and hashes:         1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: G8KwbltRO7ww6M2u57NspgpIvWc2jQcTIqxfNLerO+w=)
                          2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:23:cc:32:57:52:45:23:42:cd:61:59:1b:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
        Validity
            Not Before: Apr 13 14:01:02 2025 GMT
            Not After : Apr 14 14:01:02 2025 GMT
        Subject: CN=80fbf2b65e7fd9e515007031ddf1d451117e9d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:a4:30:7f:62:f9:18:76:3d:40:cd:0a:51:
                    6c:ee:18:01:c2:41:18:2b:94:55:e0:78:74:4a:bc:
                    fb:29:67:39:c9:01:d9:0d:0a:1b:5d:d0:52:1a:16:
                    e1:03:78:8c:96:dc:54:a0:d9:85:dd:3f:73:5a:5d:
                    17:27:4b:20:75:9b:a0:ca:bb:be:d5:0a:41:99:ba:
                    ec:9e:42:58:4d:b0:4a:31:85:11:b2:3a:8b:35:e1:
                    6c:59:68:ea:cd:56:e4:75:f9:a3:31:57:25:b1:14:
                    3f:c0:82:40:54:6f:98:4b:78:c5:e2:47:34:71:a9:
                    66:95:d2:5d:ac:c7:5d:6d:68:b6:f9:f8:8d:a6:d4:
                    0e:b8:78:88:cd:4c:6e:bd:26:7c:d3:71:ad:bb:39:
                    89:b0:9a:7c:f3:37:43:11:1d:75:dc:c7:75:76:9b:
                    95:21:16:67:c1:49:dc:bc:a3:93:0d:a1:68:99:1f:
                    16:ab:a4:1a:59:f6:af:50:29:a8:6a:87:1e:b0:30:
                    59:e2:4c:bc:c9:19:1d:31:8a:54:2e:84:9e:c6:49:
                    1f:ac:06:f0:fc:f1:f7:50:d1:2b:74:9b:0c:b8:3d:
                    26:f4:0f:5d:db:92:a2:2f:f3:a4:3b:03:90:72:83:
                    3a:12:36:3a:9d:77:2f:0b:e6:ec:f5:27:95:64:c3:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FB:F2:B6:5E:7F:D9:E5:15:00:70:31:DD:F1:D4:51:11:7E:9D:4B
            X509v3 Authority Key Identifier:
                keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:d4:59:f6:49:96:8b:98:d5:46:e2:6c:63:6f:2b:66:9f:
         81:2f:50:2a:2d:cd:9f:97:95:6e:90:fb:76:15:23:aa:d7:b4:
         b6:3b:a7:1c:87:d1:14:33:b6:06:64:9e:1d:60:ee:5d:23:62:
         89:e8:88:42:4d:93:81:f8:87:bb:a8:0b:46:c7:d6:c1:39:75:
         7a:41:03:4f:02:4f:cd:52:49:55:b3:39:6e:86:10:e6:de:82:
         e0:7b:62:d5:75:22:be:ac:f0:b0:fb:09:cf:b8:55:67:ca:b7:
         41:86:08:10:87:ad:70:c7:84:e2:17:a3:c5:01:4d:67:57:39:
         0d:d2:32:2d:93:a9:1e:e0:11:cf:40:cb:fd:94:b3:54:0b:ff:
         59:90:c0:01:18:c5:1e:e8:0c:fa:14:f5:13:15:b8:48:06:41:
         41:c1:ba:41:40:13:f5:7a:53:c9:e4:cf:02:14:5e:b0:33:42:
         13:56:01:9d:f7:ca:36:14:ed:72:e2:4a:ae:53:27:31:0a:8b:
         76:f0:2f:8c:07:0c:1d:36:f2:60:34:12:fe:39:1e:1e:cb:29:
         88:6a:4c:4c:eb:22:84:b9:4a:23:10:8e:68:15:6d:39:0e:0d:
         30:74:38:1b:02:ae:f8:57:50:c9:e1:97:bb:94:1a:c6:75:da:
         c3:35:55:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----