Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
File:                     NpHSlQFF3OrADAyk61NtkoZ7ONM.mft (raw, json)
Hash identifier:          AwCm3khXgxQpOm7L+wC2xovlMeNOgsYil0yAqLjji/Q=
Subject key identifier:   02:B7:88:5E:AA:0C:44:CD:C6:2C:FB:92:F2:C2:85:08:61:4E:95:B0
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Certificate issuer:       /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial:       01962F743773544519D401F3E799679B1598
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
Manifest number:          0B38
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: AYNfqVlSCZxSkottsPIfKriDdHo.roa (hash: DR+WljYSnHEBz/1Nc0C8V29PSzaZP+WZg97TUOW5Zds=)
                          2: I7WvLIen2Qt15jt5djzF4qVwAeA.roa (hash: TDT2LdFRYTW16jzLI/jmwBH74PERZ5uRk6SAxtSvBQc=)
                          3: KX4BdF1jeIPrlBaQXcm4-FxDbVI.roa (hash: Tzk0TQLXuHX7Z8zB6m4PRwPBrghVQJ9zPu5wXgONfUs=)
                          4: Ma-ZL87NKbXOh3PKteMYs4_0CwA.roa (hash: 8ACKMnvKrVu9alfiMw6lXVKm3qwxGI4mZvc+z4si/8c=)
                          5: NpHSlQFF3OrADAyk61NtkoZ7ONM.crl (hash: mRI0M0sLEWU0+/yNnb+7z5iYJOSoWzCWAGncCe0ICYE=)
                          6: ZdlemGQCA8jrtuYIR9ZFtWke_wc.roa (hash: yL1F1JtC6s6D+a5TG0GVaaYEiJsHRH7GC/1uOa8xe0w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:37:73:54:45:19:d4:01:f3:e7:99:67:9b:15:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=02b7885eaa0c44cdc62cfb92f2c28508614e95b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:bb:5a:9e:0b:5f:62:97:84:c4:bb:98:94:
                    9e:9c:be:f2:46:6f:5a:51:9e:17:22:c3:84:54:d7:
                    4c:3c:a5:cf:29:4c:98:63:56:c1:3c:6d:48:61:df:
                    2d:b2:c0:78:28:be:2b:5a:1a:06:b7:dd:04:58:60:
                    6c:07:a4:43:5a:ff:cb:bb:61:46:9c:9d:0a:79:a6:
                    1c:c9:5c:22:c1:87:cd:98:4d:cc:2c:55:27:a4:2f:
                    39:0c:f6:7c:58:74:cd:86:83:81:59:45:bc:85:b4:
                    04:31:b2:0c:4b:bf:90:de:55:01:80:36:b8:1a:30:
                    34:01:c4:1e:b5:3e:2d:19:be:6c:28:bc:ee:f9:54:
                    83:b9:54:a0:5f:06:fd:8c:b5:b9:73:ee:be:00:ec:
                    66:79:47:13:38:f6:03:42:52:63:0c:2c:1c:0e:84:
                    5f:dd:f0:8f:2e:26:77:ca:4f:8d:87:fe:a9:17:9e:
                    76:3d:fc:da:9a:8d:db:60:88:5d:d7:76:63:a1:04:
                    5c:1f:67:77:9f:ff:1f:e7:3f:ad:61:08:82:9d:0c:
                    c0:6b:ed:8d:b6:a8:0d:1d:27:8c:c3:16:06:e5:ae:
                    c1:96:77:23:ee:8a:ea:b0:3c:09:13:bd:02:1a:36:
                    e9:ca:80:58:68:71:54:73:80:53:a5:74:1f:e5:88:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B7:88:5E:AA:0C:44:CD:C6:2C:FB:92:F2:C2:85:08:61:4E:95:B0
            X509v3 Authority Key Identifier:
                keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b1:1d:56:f3:c5:b9:bb:85:27:8c:90:d9:fa:63:c0:71:60:
         41:79:d0:e7:54:b4:ee:13:2a:3c:83:4e:a7:dd:4d:c7:9f:93:
         7c:a7:ce:22:0a:0b:c6:56:8b:f7:c1:39:a9:77:66:35:ff:f0:
         2a:24:8f:bb:2e:4f:5d:8d:25:7a:91:db:d2:79:d6:99:01:2f:
         34:18:d3:71:90:0c:0e:16:56:72:3b:84:c5:a4:79:53:e0:11:
         2c:51:1a:1f:e3:e9:1d:f8:33:28:3c:fb:24:dd:56:f3:0e:7c:
         92:91:f7:d6:bb:51:dc:e8:90:02:77:7b:6a:d8:70:43:93:a1:
         e9:94:e7:78:8c:b3:0e:63:83:46:78:69:02:6e:e4:82:40:34:
         66:b9:63:c4:98:fe:fa:6b:94:1f:9e:10:d6:ad:e0:63:d0:43:
         76:33:38:a0:d1:59:5d:57:4b:1f:6a:33:22:72:b6:e6:82:e0:
         f9:46:21:83:b7:48:ab:bd:79:93:ca:ac:b0:4e:0b:a6:94:83:
         00:71:8a:5b:11:bd:40:85:ef:ee:81:df:07:e8:dc:ed:aa:8e:
         70:95:45:f0:3d:ce:f2:9d:0b:8a:d2:32:11:e1:ae:8d:05:45:
         85:e0:5e:17:72:69:e9:65:81:7d:5d:7e:ae:17:44:23:95:b7:
         42:8a:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----