Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
File:                     Nu5z8S3iK2NAaNLOi3pvriKRhio.mft (raw, json)
Hash identifier:          /UyNf0VQ/5OJLdCI6J+40mc0bwe1GC2My1htVZOpfw0=
Subject key identifier:   D5:BF:70:E5:21:82:FF:77:B5:C7:BA:A1:5A:E3:2E:8C:6F:01:CF:25
Authority key identifier: 36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A
Certificate issuer:       /CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
Certificate serial:       01962F3DABB7D6FE7FF4CA7B1D8033DF669F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft
Manifest number:          0114
Signing time:             Sun 13 Apr 2025 13:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:32 +0000
Files and hashes:         1: JzGs8inn7txEGMEMBRCVzNZdRVg.roa (hash: gvrw7Emqkgw3IJnnGKeYcShf4Bw5yVCq/dWSjUTjfvI=)
                          2: Nu5z8S3iK2NAaNLOi3pvriKRhio.crl (hash: wXt312aLbL8dWnl07WebQDyqmN30yTgf2TqERhRIe2I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ab:b7:d6:fe:7f:f4:ca:7b:1d:80:33:df:66:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ee73f12de22b634068d2ce8b7a6fae2291862a
        Validity
            Not Before: Apr 13 13:01:32 2025 GMT
            Not After : Apr 14 13:01:32 2025 GMT
        Subject: CN=d5bf70e52182ff77b5c7baa15ae32e8c6f01cf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:da:c9:e2:cf:c7:8f:03:ab:c0:e1:55:a4:
                    2a:ac:c4:45:af:2c:38:32:8f:79:bf:8a:8b:a3:43:
                    83:30:ea:29:7c:62:93:0d:c0:dc:c9:76:b7:94:a4:
                    1e:db:ea:a4:b5:df:87:47:d2:03:92:a4:17:41:62:
                    a8:36:ef:e8:91:f7:9b:bf:91:a3:b1:60:69:4a:c1:
                    60:3f:7e:e4:85:bb:a7:75:ca:a4:da:04:0f:47:c4:
                    3e:3b:1e:2b:aa:f1:dd:9a:12:00:bd:b3:e6:ba:71:
                    c2:7f:0b:0b:21:69:b4:93:d1:6e:98:44:2b:bf:ea:
                    b2:2e:18:21:23:b7:c8:4f:ec:bb:7e:47:6c:2b:56:
                    80:9f:04:8d:ed:0b:e9:18:5f:d0:1a:96:6a:6f:51:
                    55:79:ae:83:98:b3:c7:c2:82:b9:77:47:8a:72:21:
                    9c:c0:0c:f7:1c:84:80:ee:3f:72:8a:0f:50:12:21:
                    48:47:8c:13:77:57:24:ea:42:b6:c0:7a:50:48:63:
                    bc:41:d0:3f:a0:8d:63:f4:29:94:74:8b:4b:9c:a5:
                    30:d8:ba:76:b2:a8:a8:f3:76:01:f4:70:b2:0f:aa:
                    7f:7d:43:d3:44:46:ad:40:95:18:f1:66:e6:e8:9d:
                    3c:77:fa:f0:35:51:ec:aa:11:9d:94:19:c3:de:f9:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:BF:70:E5:21:82:FF:77:B5:C7:BA:A1:5A:E3:2E:8C:6F:01:CF:25
            X509v3 Authority Key Identifier:
                keyid:36:EE:73:F1:2D:E2:2B:63:40:68:D2:CE:8B:7A:6F:AE:22:91:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nu5z8S3iK2NAaNLOi3pvriKRhio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/04a223-e1c0-4e12-91fd-d198f010b15a/1/Nu5z8S3iK2NAaNLOi3pvriKRhio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0d:4a:b3:a9:09:73:3f:d2:da:55:5f:0e:f0:f3:05:3c:72:
         37:e0:af:fa:43:ae:bc:10:5c:ad:96:ea:21:c0:b0:74:93:07:
         a9:e3:16:4c:19:8e:af:22:86:55:72:9f:de:f3:04:0c:3e:65:
         da:45:d1:4b:e3:8f:48:3a:28:63:8c:c3:f9:1b:65:da:4d:21:
         36:12:6f:da:f3:c3:75:ac:80:bd:cc:66:06:aa:2d:b1:07:c9:
         3c:9f:bb:c6:fe:a1:c8:e0:66:5b:69:bb:4d:0b:b9:f5:84:04:
         f1:c9:e4:35:55:60:f4:29:28:30:20:0c:4a:cf:8e:76:16:e7:
         da:be:4d:f5:1a:0e:25:b3:d0:a4:e4:70:83:7f:a1:df:54:53:
         b0:30:c7:a9:cc:ae:34:9e:2d:aa:48:b0:bd:43:82:c0:64:d4:
         89:0f:22:9f:44:dc:b1:06:cb:70:2e:40:c7:94:fa:2f:ed:83:
         4a:82:4b:75:90:48:d0:9d:2e:f5:f2:ea:b9:b5:f3:cd:9a:a6:
         dd:68:22:ae:69:17:7b:f0:01:4e:80:4d:da:01:de:34:80:b1:
         e4:0f:3c:ac:50:f4:c0:9a:90:9c:23:3b:7c:55:66:69:c2:fc:
         2b:fb:8a:3f:cd:53:dc:a5:35:49:01:95:82:27:67:aa:f4:7a:
         03:75:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----