Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
File:                     ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft (raw, json)
Hash identifier:          2Vp5y8nmf4yzGpY9ruU6aTmkDsNnSBuGPa6e6NE/W9U=
Subject key identifier:   F5:92:C0:93:6E:FB:F3:C9:7C:6F:31:7A:D1:4C:E0:7A:B1:DC:E4:9E
Authority key identifier: 9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE
Certificate issuer:       /CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
Certificate serial:       01962E61D406C1F544F8981C4E1A045461E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft
Manifest number:          1130
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 96ceGnLozFWN_QTriAA9ffT0NZo.roa (hash: xYD9mhJQTnDUO7IrqsbDyJlQ0+k0aFVeTHj0N17MtSI=)
                          2: ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl (hash: +DUvEUz6MtlXM9YLygrL/uFWgYOv9Uv9bMNj2xmwbX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:06:c1:f5:44:f8:98:1c:4e:1a:04:54:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0a52fee2280d6f231bb6a26226e6535170f1fe
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=f592c0936efbf3c97c6f317ad14ce07ab1dce49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c5:ad:87:4a:01:97:1b:76:29:62:32:5c:49:
                    7b:2e:46:fe:06:e5:d9:ac:c4:81:11:3b:f2:3e:cd:
                    39:97:bb:ed:11:88:42:ec:ba:c0:21:64:4a:8e:29:
                    64:8f:a2:18:15:9f:cb:3f:75:f7:9b:a3:71:8c:76:
                    d3:0a:60:d2:bf:26:22:55:61:a1:d6:95:9d:4c:bb:
                    08:8d:cb:ec:b1:11:fb:18:4c:22:a4:14:0f:5b:db:
                    b9:cf:de:33:90:ea:c1:02:89:5a:2b:b4:84:05:db:
                    8c:98:b3:96:16:32:ce:20:68:06:fc:9e:6a:7f:f1:
                    dc:35:86:6a:4f:a3:10:1e:2e:66:43:b4:db:90:86:
                    e3:ea:7f:14:7c:9e:52:80:2b:d9:2b:a4:46:10:76:
                    64:78:21:08:ab:a4:81:4a:ac:b8:89:26:84:2f:4b:
                    86:ca:87:bb:8d:d8:7e:46:a5:e1:d0:0d:3c:d6:ab:
                    42:88:f3:74:17:7d:8b:a0:f5:9d:cb:9e:c1:b8:3d:
                    57:b0:29:02:b5:ed:eb:07:06:f0:13:d6:62:5e:0c:
                    e3:f8:7c:fa:a5:41:19:b5:f6:dc:b7:18:b2:24:f0:
                    49:dc:c9:f2:8f:b1:1a:14:fa:36:72:fe:ce:e4:e8:
                    4c:cc:0e:ba:c3:08:de:4d:80:fe:93:b0:be:6e:6a:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:92:C0:93:6E:FB:F3:C9:7C:6F:31:7A:D1:4C:E0:7A:B1:DC:E4:9E
            X509v3 Authority Key Identifier:
                keyid:9E:0A:52:FE:E2:28:0D:6F:23:1B:B6:A2:62:26:E6:53:51:70:F1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngpS_uIoDW8jG7aiYibmU1Fw8f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/47d21c-604b-47d8-a333-708b68c856cf/1/ngpS_uIoDW8jG7aiYibmU1Fw8f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5f:8c:e6:4b:52:78:91:72:ce:68:0a:49:3d:55:70:04:5d:
         90:70:d0:3e:c2:16:83:0f:7a:a9:01:6b:dc:9c:cd:72:b8:38:
         4a:5d:a2:93:36:58:be:11:2f:71:68:0b:1d:d5:2a:dc:f9:16:
         0a:8f:b3:47:3d:29:76:10:b0:e4:44:0c:6b:c5:e6:94:df:d4:
         41:0c:ed:fd:eb:a0:28:ec:a9:2f:a6:a5:e7:3b:53:ee:d8:56:
         f1:2a:62:9e:a7:61:61:ca:44:bb:7c:ad:9a:53:b0:5e:61:94:
         fd:eb:70:a1:9f:59:6e:71:47:bd:f4:49:d8:ea:58:4f:40:0d:
         e8:df:31:d4:1d:1c:b8:99:10:50:dc:3d:76:1f:48:d6:a2:ba:
         b3:10:79:fa:4e:95:c0:64:db:d2:93:b8:f4:f2:99:35:e4:54:
         8c:09:79:4d:02:1b:46:01:f6:7e:bd:bc:0b:e6:81:eb:8c:a1:
         a6:46:c4:67:48:0a:a7:94:fd:03:f5:53:a9:52:25:cb:ad:de:
         b7:0e:06:57:7b:98:23:24:ce:30:4d:3c:2d:c6:71:b1:2b:fa:
         63:e4:6f:2a:50:15:a8:09:52:08:a4:83:97:ec:1b:cf:e7:e2:
         01:08:b5:20:31:22:65:24:19:3d:64:53:33:8d:2b:ce:60:b0:
         8e:7e:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----