Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
File:                     N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft (raw, json)
Hash identifier:          lKrKmX8nPVR/3Gd2vz1+5NqFnhZoqux8zvsfcKL/SKI=
Subject key identifier:   50:D9:3F:3F:3C:65:D6:45:89:8D:32:4E:9B:40:CF:79:AD:67:7F:49
Authority key identifier: 37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
Certificate issuer:       /CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Certificate serial:       01962FAB9287254158FD19DD79E4167DCFE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
Manifest number:          059D
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: M2-x0b6h_vGkWR8MeQS23lu97CU.roa (hash: 3mmEcfVqYQ+5prex0V/rqUj30uad1M5q1mUqvz+8XW8=)
                          2: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl (hash: ZnjuI+UyB3wfSmyA+uyG/FXSbvITE0xDcyuRO/t6Ldo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:92:87:25:41:58:fd:19:dd:79:e4:16:7d:cf:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=50d93f3f3c65d645898d324e9b40cf79ad677f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:42:50:8c:8f:0c:ba:89:e9:15:e7:b9:26:
                    8e:0e:85:2e:8a:6d:06:28:49:af:2d:19:39:db:72:
                    a2:12:4f:7b:34:8c:97:9d:6f:6f:a2:03:86:32:c7:
                    cc:04:fc:c4:23:c2:02:7f:12:f0:27:7b:46:64:ae:
                    2d:b2:2b:1a:ec:64:e5:51:20:fc:de:d0:ba:a8:3d:
                    30:09:38:fd:8b:66:f6:6a:b8:c4:90:c5:04:ec:06:
                    e7:73:82:93:5e:99:24:54:01:45:ef:cd:b1:22:f1:
                    d8:3c:1b:c3:e5:4b:8a:b7:da:9c:f6:af:3c:6e:3e:
                    80:1b:81:35:7e:2b:bb:e2:df:cc:93:74:7d:31:62:
                    9f:dd:7d:20:f8:fe:3f:d0:8a:df:6c:28:ed:f8:ce:
                    84:17:02:b7:a9:b3:0b:96:61:c0:34:48:f4:a8:a0:
                    b0:0f:5e:39:3b:b9:a3:c7:8a:b7:65:26:a7:45:96:
                    d8:2e:d4:fe:ee:bd:f1:76:c9:8a:18:b4:72:d4:19:
                    c9:44:01:71:f5:ff:e9:03:82:f3:ec:c6:76:65:58:
                    f2:a6:fa:c8:12:e3:b6:74:05:04:f6:79:31:72:05:
                    ed:ca:42:8e:34:5f:b2:ff:31:ed:48:36:3c:10:6b:
                    b8:b4:a5:6c:3e:0d:42:a3:83:a9:ff:a1:cc:66:f1:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D9:3F:3F:3C:65:D6:45:89:8D:32:4E:9B:40:CF:79:AD:67:7F:49
            X509v3 Authority Key Identifier:
                keyid:37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:1f:a7:f8:4b:bb:04:5b:bd:c7:52:13:3d:9c:1a:ca:85:e1:
         b8:5b:d1:e6:d4:85:35:b4:cf:8a:64:cf:b4:1c:fc:40:5f:2c:
         7e:ed:be:a9:6f:74:bd:ec:d4:7c:d2:95:64:7b:1d:f5:70:58:
         dd:cd:fa:2a:58:33:1d:fa:fd:82:8f:be:f0:83:a4:1c:79:da:
         ae:bc:64:3e:f1:6c:af:0a:68:a7:13:6d:23:fe:49:45:f0:9d:
         1f:26:b3:f6:d2:f4:d6:db:0b:2f:ec:e1:3f:3d:bf:31:65:04:
         19:9c:aa:b7:68:b6:c2:de:66:07:3b:94:cb:b7:4b:47:eb:59:
         81:49:8b:77:ef:ca:fb:19:b5:54:d1:b0:b9:80:8e:92:13:64:
         f5:3b:69:6e:1a:d1:c7:c9:4c:9b:f0:1e:a3:14:f9:f3:07:65:
         93:8e:c3:21:3e:7d:b9:0c:66:94:84:5f:dc:51:1b:d0:0d:22:
         56:aa:40:25:3d:62:89:a7:2d:6b:af:61:19:dc:6e:2c:45:11:
         29:2e:c8:e0:e6:78:21:a7:ac:0b:92:9c:70:d0:e6:c8:de:39:
         5b:1f:96:3e:81:f0:f1:39:a2:c4:6f:11:c7:f0:ab:94:48:72:
         46:c0:27:0a:ec:de:f9:dc:57:4f:2b:26:ac:29:e8:fa:e7:ef:
         08:1a:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----