Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
File:                     Nyr2V8CeFivm5kq-BNIcXnet4g4.mft (raw, json)
Hash identifier:          uWcK7KpGn9F0B+8XjPa/hLMVmWazO8iYJx+wkD5YszI=
Subject key identifier:   1B:7E:A7:B1:98:F7:2D:4D:FE:AA:2E:50:01:BE:9D:BD:F0:9E:05:34
Authority key identifier: 37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E
Certificate issuer:       /CN=372af657c09e162be6e64abe04d21c5e77ade20e
Certificate serial:       01962F071F52955013176693578144C01FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft
Manifest number:          07F0
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: Nyr2V8CeFivm5kq-BNIcXnet4g4.crl (hash: wjBRLW+AVRO9FH7+YFtq7NxNmRS2gf9mHlLp8eN4p9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1f:52:95:50:13:17:66:93:57:81:44:c0:1f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=372af657c09e162be6e64abe04d21c5e77ade20e
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=1b7ea7b198f72d4dfeaa2e5001be9dbdf09e0534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:cd:d8:61:22:69:1f:56:ea:2a:2e:be:a4:
                    6c:f2:d0:ff:27:8b:65:52:3d:a4:28:81:99:c6:64:
                    6c:78:f2:26:fe:17:7f:2a:4c:97:92:4d:ae:2b:9e:
                    e3:75:66:3d:25:5e:92:61:66:6d:59:5c:1b:ee:b2:
                    71:2f:7c:c2:16:10:d6:fb:b4:d0:e2:2a:56:15:85:
                    49:5d:24:a2:ef:a7:b7:a2:ea:a2:ce:4b:b7:9f:f9:
                    86:ea:84:7b:ec:1a:38:0b:c9:46:07:76:d2:8b:39:
                    71:c6:d2:3c:05:04:88:56:fd:e5:2d:3a:be:10:4e:
                    8c:36:62:fd:60:02:01:81:1c:41:7e:c7:a1:84:14:
                    be:66:77:60:99:de:7a:22:75:cd:63:81:28:40:e7:
                    5a:e8:00:ca:36:69:8f:19:87:9c:6d:2b:01:59:02:
                    96:7b:2d:09:c9:34:0d:87:28:b3:33:fd:db:c5:a5:
                    e5:23:41:d0:59:b8:9c:42:ad:37:87:d4:ac:47:03:
                    98:73:f9:47:b3:66:5d:3c:f7:3b:ea:d5:02:c0:41:
                    8f:26:82:02:5e:b8:d2:6e:e9:2b:47:69:0b:1a:88:
                    6b:03:ec:5b:72:27:4a:da:31:9f:15:05:e0:74:19:
                    e6:66:f6:ad:4a:f5:5a:18:4f:3b:f3:cf:00:85:b8:
                    bc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7E:A7:B1:98:F7:2D:4D:FE:AA:2E:50:01:BE:9D:BD:F0:9E:05:34
            X509v3 Authority Key Identifier:
                keyid:37:2A:F6:57:C0:9E:16:2B:E6:E6:4A:BE:04:D2:1C:5E:77:AD:E2:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyr2V8CeFivm5kq-BNIcXnet4g4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/200489-152f-4424-b863-1c6f777d4349/1/Nyr2V8CeFivm5kq-BNIcXnet4g4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:23:45:76:18:ce:39:31:f2:bc:6e:d1:68:f8:8d:80:cf:7d:
         fb:3f:63:15:10:17:89:91:11:8b:e5:92:6e:9d:df:ec:db:96:
         2d:7d:37:1c:ff:2c:60:7a:20:0c:ab:96:90:ad:f9:2f:55:46:
         6d:4a:58:8a:e2:e5:98:90:dc:b5:7a:bc:e8:8b:ee:db:d1:d8:
         51:ec:80:23:ca:1e:be:2e:50:97:da:fc:4f:56:eb:8b:15:9c:
         b1:1d:df:6a:58:1a:2d:60:d7:92:90:a6:39:04:29:ed:be:20:
         5d:5d:0d:5d:e0:57:08:2e:16:5c:83:3b:78:b9:f8:32:23:3e:
         4e:11:e6:ac:29:78:f6:ea:c0:b4:59:26:ee:5a:b8:49:2e:89:
         ef:70:cf:5a:9d:bc:d1:43:b7:63:6e:70:58:fc:3e:83:6f:67:
         df:00:90:d1:82:41:b0:4d:34:24:52:fb:55:45:53:73:44:fe:
         b1:f3:db:64:05:6d:75:4f:48:22:9e:ad:eb:98:bd:d1:be:34:
         40:0b:39:2d:01:4b:fd:95:d4:ed:f7:36:0f:d4:a1:5d:05:3a:
         e1:1a:d8:93:97:4d:a4:87:10:7a:56:5f:64:80:92:8d:7a:93:
         bb:0a:f6:fe:97:05:5b:97:9e:93:30:d8:64:12:46:a0:d9:51:
         15:b6:d7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----