Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
File:                     NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft (raw, json)
Hash identifier:          LLTKwLeW+FcmVVrTUD7b39sdAa4LNyqZhpDEJlp1uOo=
Subject key identifier:   9F:57:F8:E0:A0:EA:23:2E:66:86:94:53:36:23:DB:12:36:9E:53:C4
Authority key identifier: 37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC
Certificate issuer:       /CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
Certificate serial:       01962E61B9C36E6A9A7EDE59765201ADD5CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:18 +0000
Files and hashes:         1: NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl (hash: bwhrRBSI3c/dK2AzChvKpj7eRJxE+XqWUDi64b/TuX0=)
                          2: P1xjhgcrB_82E1dr812SN7zD2jw.roa (hash: 1Ps5EidA8vmNxrrB6k3QxJd8xmqPpWh99eg7n4cVK7o=)
                          3: q3oH4WqBy89nlHf_ohkPgGYaYoc.roa (hash: /Ya4Ak12mdvsioIt2KLsqtGYRCnDo04vhdOQ06CJDUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b9:c3:6e:6a:9a:7e:de:59:76:52:01:ad:d5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372ac6ef92b81d705787a4ef89fd4673805c7abc
        Validity
            Not Before: Apr 13 09:01:18 2025 GMT
            Not After : Apr 14 09:01:18 2025 GMT
        Subject: CN=9f57f8e0a0ea232e668694533623db12369e53c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:be:ca:3c:fe:8d:75:ad:18:f0:87:f9:9b:
                    f7:ef:ec:f5:07:19:4c:0a:41:c8:43:89:cd:00:5f:
                    c7:28:52:0f:83:9d:6e:2e:06:07:25:62:3b:93:cc:
                    30:77:61:c9:f0:c0:b3:4b:dd:d3:46:67:3f:e4:d1:
                    91:eb:a0:38:73:4f:57:1a:7f:49:5b:86:17:99:25:
                    ad:0d:39:c1:9d:e7:06:93:d7:70:72:35:13:31:18:
                    4d:b0:a9:12:e7:d9:f3:57:1f:ab:ec:83:0d:79:6b:
                    e5:19:07:1b:13:1e:e4:e1:d6:d3:a6:d1:41:50:1c:
                    8e:f6:85:fc:9e:f6:ac:9f:a6:3c:e0:6d:98:f9:fb:
                    e9:99:be:22:63:aa:ec:7e:d1:e5:9d:21:d1:bd:8b:
                    94:40:05:02:76:0f:fc:00:f6:b7:d4:db:78:69:10:
                    05:84:20:59:eb:3b:c1:71:16:5c:a9:12:04:f5:7a:
                    69:11:1a:32:b0:0a:ba:bc:1d:4f:40:8c:ba:98:28:
                    e2:0d:03:99:e9:6a:97:8e:2b:3b:1d:de:5c:a3:ab:
                    32:b4:a0:0c:bc:10:b6:5a:7b:bd:5d:4c:06:16:cb:
                    05:ba:fe:55:73:f2:03:e3:78:2e:fe:f0:69:1c:3f:
                    72:84:b6:26:c2:3d:5d:54:05:1c:af:c3:e1:23:b3:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:57:F8:E0:A0:EA:23:2E:66:86:94:53:36:23:DB:12:36:9E:53:C4
            X509v3 Authority Key Identifier:
                keyid:37:2A:C6:EF:92:B8:1D:70:57:87:A4:EF:89:FD:46:73:80:5C:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyrG75K4HXBXh6Tvif1Gc4Bcerw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b1a67d-5fb3-4855-8d19-09a28e0d7178/1/NyrG75K4HXBXh6Tvif1Gc4Bcerw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b0:43:63:e9:84:fb:70:2c:20:88:55:8c:0b:06:9b:b1:4b:
         e3:13:19:1f:66:40:9a:f1:e5:1d:2e:ac:51:e5:3b:4a:c2:eb:
         f0:7d:4c:2b:6f:64:a2:3e:d6:b7:3b:a0:4a:9d:b9:84:1c:fd:
         d1:ec:80:c3:c7:2f:42:66:f8:14:0c:c7:a9:98:f3:ef:e5:c4:
         81:29:2c:4f:02:62:a6:dd:c5:e4:29:5b:fd:1b:a5:d2:23:79:
         7f:57:10:56:82:7b:6c:de:15:eb:da:4e:1c:67:29:e6:78:b6:
         60:0f:9c:e6:73:39:55:21:b5:17:61:ad:27:52:4b:2a:46:2e:
         48:d9:22:9f:72:78:09:b2:6c:73:43:1d:7b:31:02:2f:74:71:
         cf:d4:26:f2:8e:fb:1a:99:7e:8b:2b:54:26:80:bb:2c:4d:15:
         a6:0d:5d:50:b5:1c:53:65:a0:76:7c:c1:97:53:32:26:fc:21:
         e8:04:16:ec:b2:50:56:a2:a2:a8:52:3f:47:2d:f0:dd:a9:54:
         57:79:10:81:c0:aa:54:4f:e1:a9:d5:9a:7b:a1:7b:b2:81:fa:
         f3:12:23:dc:cb:f4:b0:a5:da:72:d6:7f:6c:43:9f:ab:de:8f:
         2d:5b:7c:ea:a4:e0:2c:b3:d0:12:c3:b7:38:6c:d7:08:57:be:
         7c:99:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----