Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.mft
File:                     NeSwM5oLyzU5SwvNHgMQl8WrPZ4.mft (raw, json)
Hash identifier:          rPH/zRkLW1LGKM3lqiwbMsrl0RGU7+kb3ju+aBnYFUo=
Subject key identifier:   B2:A3:49:4A:97:0B:6E:99:FC:AC:DA:25:92:74:5C:37:0D:B0:EB:ED
Authority key identifier: 35:E4:B0:33:9A:0B:CB:35:39:4B:0B:CD:1E:03:10:97:C5:AB:3D:9E
Certificate issuer:       /CN=35e4b0339a0bcb35394b0bcd1e031097c5ab3d9e
Certificate serial:       01962DF3D20D41D9783A78A934D312E76E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.mft
Manifest number:          08FE
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: NeSwM5oLyzU5SwvNHgMQl8WrPZ4.crl (hash: GjkSXgliofQHV0CSNELDAsogUD89u/m1Yqtp2h8Spoo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d2:0d:41:d9:78:3a:78:a9:34:d3:12:e7:6e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e4b0339a0bcb35394b0bcd1e031097c5ab3d9e
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=b2a3494a970b6e99fcacda2592745c370db0ebed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:17:24:34:96:e4:7b:1b:99:be:6c:78:57:0a:
                    50:3d:35:3a:41:11:35:f7:5b:bd:81:aa:d5:dd:1c:
                    3b:26:39:c4:e8:17:2f:01:84:70:66:26:12:6f:8f:
                    8a:14:a3:24:f7:59:7a:e6:75:1d:3e:57:35:c1:f0:
                    07:e1:84:fb:2f:e8:e6:fb:38:67:71:c8:aa:49:da:
                    1d:8f:ff:ca:5f:63:e5:da:30:c3:54:77:e4:4c:21:
                    66:96:67:61:91:e1:35:1c:7e:51:0e:1b:63:5c:6b:
                    30:b2:36:1e:97:54:1a:23:54:be:63:97:2b:11:a0:
                    59:57:46:18:33:c0:15:86:de:ab:1d:eb:40:ff:f8:
                    5c:70:d2:3a:81:ea:c0:14:60:8f:a1:e5:cf:48:8f:
                    bc:aa:95:f8:36:61:1a:f3:29:35:3e:19:23:77:83:
                    97:0e:6c:50:a3:35:bd:1b:a9:a3:ff:1e:15:00:c3:
                    78:b3:56:c2:2b:16:2f:91:bb:39:3f:43:3b:62:09:
                    0f:93:95:2d:3d:f0:9e:42:f0:9d:48:4e:0d:3c:0d:
                    ca:fa:f2:b7:f8:57:07:58:82:61:4a:4e:9b:16:ef:
                    42:16:61:7b:2c:80:0a:5e:8d:54:23:97:53:68:93:
                    a9:34:00:4c:83:70:b5:ab:d1:40:3f:2a:b9:2e:a0:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A3:49:4A:97:0B:6E:99:FC:AC:DA:25:92:74:5C:37:0D:B0:EB:ED
            X509v3 Authority Key Identifier:
                keyid:35:E4:B0:33:9A:0B:CB:35:39:4B:0B:CD:1E:03:10:97:C5:AB:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:65:1e:e2:a5:fa:45:13:c3:f6:64:c0:f7:07:54:0b:b7:1a:
         b3:30:29:c8:7f:09:4c:37:7f:8e:e9:28:b4:f5:54:57:a2:46:
         cb:db:d9:32:e4:c1:a6:9c:2e:4b:95:ee:70:68:32:5b:0f:1d:
         43:17:59:0b:17:e9:cf:ce:4e:3c:6d:c5:4d:95:5c:e2:2f:cd:
         24:bb:d7:7e:d6:e5:2e:1b:b7:4d:10:67:a9:23:25:aa:3f:e3:
         6b:f6:cf:77:da:eb:78:be:47:92:db:61:1a:18:a2:db:f3:f8:
         a3:ce:c7:65:29:e2:46:86:3a:3e:ec:c5:27:48:59:d9:02:c6:
         7a:2b:47:b9:a7:86:7c:52:98:17:07:f2:71:3d:1f:9d:1b:e8:
         ac:6b:1a:00:5c:d9:d8:38:84:61:54:0f:22:c7:be:39:3e:ab:
         61:70:87:2f:12:86:a5:65:a9:47:b5:d3:cf:1e:4d:f5:b4:37:
         c8:eb:40:39:21:b7:b3:ab:dd:bc:72:eb:d9:f4:dd:08:3f:0a:
         2f:7c:af:e8:1a:cc:8d:f8:5d:3e:c5:eb:9e:03:a9:af:85:ef:
         97:02:6b:aa:35:87:c3:42:d7:9d:9a:b2:8c:9f:16:5c:52:06:
         18:22:c9:7f:f5:e6:c1:c7:f8:dd:3c:0e:5c:f4:57:35:27:20:
         c1:1a:82:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----