Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
File:                     N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json)
Hash identifier:          w8gpy7k0UHX2OyjjIfbZ2FxXYldG43u9nmoJhWA5y9M=
Subject key identifier:   3E:3D:16:3B:8E:23:BD:82:29:48:66:57:E6:13:ED:0F:8E:90:70:8A
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Certificate issuer:       /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial:       01962DF3EBDA0A148A97C1D68D32AD5ECD3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
Manifest number:          0E64
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: 9JbQT9vkb8qcaXWeFMcjorylOEvwCMY3WINYtg82Bbg=)
                          2: sVzqlUVXrHqVsVw4yhzSu1oYIjM.roa (hash: HaD8do3X9duYtx96VIyzNjLwjQlO2MrTlBSjfqbB5ec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:eb:da:0a:14:8a:97:c1:d6:8d:32:ad:5e:cd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=3e3d163b8e23bd8229486657e613ed0f8e90708a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:c8:71:88:8e:05:bf:9f:88:a2:d2:ad:87:
                    15:f9:fc:d0:5b:e1:b9:b3:46:9e:44:37:43:11:d5:
                    b7:96:92:79:bf:95:88:ae:a7:e5:4a:11:78:b3:7c:
                    fb:75:e7:73:85:56:21:69:41:e6:85:96:88:98:7c:
                    f7:99:75:99:ee:e8:fb:e3:48:f5:0a:f2:e5:8e:40:
                    b4:af:66:14:e0:79:5d:7b:ba:34:3f:ee:e0:c3:cc:
                    46:70:56:ce:38:ea:a0:9d:99:06:20:90:68:09:ab:
                    a3:6e:85:1f:50:6e:29:65:c6:2e:61:89:31:84:3e:
                    c9:0c:c3:6e:87:5b:50:a6:eb:6f:3f:ba:c9:7f:5b:
                    02:5d:89:50:eb:ab:b4:82:e7:bb:c2:1f:8b:e5:53:
                    f8:b1:1f:c2:fc:fa:de:3b:38:f8:6a:d3:da:d0:5f:
                    74:a8:b0:c3:0b:8f:4e:2a:5f:b5:2c:6b:82:22:32:
                    92:da:dd:02:19:6f:b8:01:c3:3e:1a:d9:01:08:92:
                    fb:3a:6d:e2:27:51:da:94:f9:82:43:60:1a:c1:d8:
                    6b:e5:a4:35:c2:a2:d7:e1:4b:96:01:a3:3d:53:4a:
                    2e:2c:d3:0b:10:cd:d1:e5:cb:c8:ff:ff:76:24:c0:
                    b1:97:99:a2:6f:8b:cb:dd:45:fd:63:be:cb:fc:ba:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3D:16:3B:8E:23:BD:82:29:48:66:57:E6:13:ED:0F:8E:90:70:8A
            X509v3 Authority Key Identifier:
                keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:04:ff:c9:a1:fb:7b:60:90:67:af:ea:77:a0:82:34:05:aa:
         d2:d8:e0:85:93:5e:f0:6f:93:71:16:0f:d5:53:0f:11:ad:be:
         67:32:14:e7:6c:46:e2:37:ac:2f:8f:6f:d6:dc:99:de:10:c5:
         1d:c1:00:1d:4e:12:db:e4:0e:32:db:c7:6e:1e:f3:c1:c8:40:
         b3:f3:89:80:fe:39:29:c1:35:a3:25:fa:5b:db:f6:79:dc:03:
         d3:c3:10:2e:74:14:6d:e6:c5:df:5a:e2:16:60:fc:dc:51:96:
         00:5a:71:26:95:a4:9c:da:7f:8e:19:e6:05:6f:d7:5d:dc:b8:
         e3:a9:42:c8:ff:8f:d3:52:ae:1c:52:dd:1e:71:1b:0a:51:93:
         dd:9b:3e:a6:7c:b3:ed:35:7a:df:97:c8:15:7e:c3:3d:d8:5c:
         dc:45:1c:ed:71:d7:03:05:ff:b6:d5:93:65:37:64:94:2e:69:
         2b:94:30:e7:a9:c3:b5:cc:53:19:59:1a:17:c7:8e:f3:a5:c5:
         93:b2:5b:c6:38:3c:d0:9c:a0:07:57:85:03:64:05:a4:1b:52:
         a6:bf:b9:ce:f1:3b:86:86:78:d3:9d:de:9b:59:81:85:c1:43:
         83:30:ee:21:3c:aa:0f:a4:44:aa:94:89:b2:1a:08:79:97:1e:
         25:27:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----