Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
File:                     N0mXVDn-T_qTECYqy91fcjzuIiM.mft (raw, json)
Hash identifier:          c3p0TfAQfDDT/WQihfAiaW7maUYw8/nmOkHSTitZo60=
Subject key identifier:   93:A9:31:9E:05:FA:1A:5C:96:50:20:01:FF:6A:7C:69:57:98:F9:7A
Authority key identifier: 37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23
Certificate issuer:       /CN=3749975439fe4ffa9310262acbdd5f723cee2223
Certificate serial:       01962ECFD3FE9E4C79AEE55DD283DC6FBFF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft
Manifest number:          14DF
Signing time:             Sun 13 Apr 2025 11:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:34 +0000
Files and hashes:         1: N0mXVDn-T_qTECYqy91fcjzuIiM.crl (hash: ZD9KtDO39gOcMiOn47JgaggJUuTwn/3VkW+Anykx5GU=)
                          2: kzwjfq1uCpgiTAUnk5qhqKOqoaU.roa (hash: MJDFWuspOJe8rc6Woxt8ScoRrsfkLnrA6WpK9920n7A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d3:fe:9e:4c:79:ae:e5:5d:d2:83:dc:6f:bf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3749975439fe4ffa9310262acbdd5f723cee2223
        Validity
            Not Before: Apr 13 11:01:34 2025 GMT
            Not After : Apr 14 11:01:34 2025 GMT
        Subject: CN=93a9319e05fa1a5c96502001ff6a7c695798f97a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3b:5f:5d:a9:59:79:d6:d4:10:b3:c5:b4:74:
                    37:4d:f7:0c:76:73:3c:1c:08:37:5d:0f:0d:0e:1e:
                    e2:9c:91:8e:fe:e0:db:87:5b:04:05:4a:bc:92:ff:
                    67:4a:d8:69:12:ae:da:16:c5:c4:2b:ec:2d:c2:29:
                    56:37:e2:8e:e6:8e:4e:11:11:2e:9b:36:1d:ae:e2:
                    69:74:0c:97:02:0b:3b:5a:3d:e1:3e:e4:d2:b8:05:
                    a2:a3:c7:ad:65:1a:32:d5:d6:b5:ba:4d:e8:8a:dd:
                    3e:01:e7:84:e3:bf:df:66:9c:84:e9:9f:50:e4:80:
                    27:52:94:79:2a:9f:d1:06:71:e9:04:24:75:0e:ba:
                    ea:39:b7:49:ef:ad:fe:b1:a0:99:3b:3e:ff:88:b2:
                    0f:6f:b2:84:50:47:45:b2:2a:f2:cc:ad:66:cc:68:
                    7b:24:7e:4a:ec:c5:d2:c7:68:71:3b:ad:d5:c3:17:
                    2f:67:e2:cd:25:03:ca:7e:d1:bf:d2:24:ea:8d:6e:
                    44:d6:49:a1:ea:1e:8e:b4:72:dc:36:03:d1:d5:d5:
                    0f:96:7b:74:09:f0:bf:46:28:a2:fb:ba:57:7d:30:
                    08:05:78:b5:6f:ce:61:27:2c:7c:95:b8:b3:d8:61:
                    ab:7a:b4:39:0a:64:c5:7e:12:b6:78:b7:80:43:59:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A9:31:9E:05:FA:1A:5C:96:50:20:01:FF:6A:7C:69:57:98:F9:7A
            X509v3 Authority Key Identifier:
                keyid:37:49:97:54:39:FE:4F:FA:93:10:26:2A:CB:DD:5F:72:3C:EE:22:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0mXVDn-T_qTECYqy91fcjzuIiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fc4e0-eb5f-42d3-98e1-be00a65103ad/1/N0mXVDn-T_qTECYqy91fcjzuIiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c3:5d:5c:34:bf:af:f1:21:b8:0a:e7:c6:9f:a4:e9:26:21:
         c9:58:09:b6:03:7b:ad:ea:47:80:ff:47:e9:88:58:13:0b:e5:
         89:a9:cf:5b:6a:b9:a9:f3:5e:93:71:b1:73:88:0a:3e:d6:28:
         8f:c1:b5:7d:2e:1a:f7:b8:8d:fa:f8:c2:5c:83:6c:0b:32:08:
         7c:15:64:74:10:31:74:41:c8:62:1a:b0:4d:16:02:05:f7:ea:
         4e:ed:7d:39:c5:eb:49:44:6c:e2:c4:f5:c9:4d:2f:0a:2f:66:
         14:50:f8:5c:a7:bc:1d:c2:ff:2d:1f:12:1a:16:07:14:07:7e:
         c5:88:e9:64:76:8a:fa:7b:b7:4d:df:25:d3:6e:f6:c4:b3:ae:
         43:83:15:e6:06:6b:18:88:ed:bf:4c:45:f3:38:16:33:da:8f:
         03:a3:a8:f5:57:d0:00:0f:09:22:0d:68:ee:02:3e:92:da:f1:
         3f:af:72:c3:60:58:d6:d9:13:99:a0:ba:ee:a1:da:73:c4:3f:
         c3:aa:3c:0a:8c:35:5b:e8:1a:31:a4:79:ab:5b:09:75:b8:87:
         ed:0d:60:4c:d4:09:55:c0:f9:2b:9f:18:01:9d:03:6b:c6:5d:
         38:bc:0e:ce:15:53:24:fb:cd:78:10:f9:da:9c:9d:1d:da:d1:
         49:8c:4f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----