Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File:                     dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier:          N4PiVJnFTncki/vfSx8fRIZ0vsG1qGhQvfgxEYmY9hg=
Subject key identifier:   C8:27:CC:07:A6:EA:A2:43:D0:67:4C:C0:49:69:99:7D:32:07:BD:DA
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer:       /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial:       01962ECF73E9DDD2B6B6C7868D665FD6C45A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: SoDkQFyplbGqOAYy1BX9FkO5Ny7DL9u0CZoO11iIBJo=)
                          2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:73:e9:dd:d2:b6:b6:c7:86:8d:66:5f:d6:c4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=c827cc07a6eaa243d0674cc04969997d3207bdda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:d6:1b:82:de:e2:6a:a1:7a:8c:06:54:ab:
                    c6:12:24:e3:74:98:7b:94:2d:60:74:70:8e:b1:01:
                    4e:6c:3a:4a:d2:b7:7b:3f:cc:fe:fc:51:4e:58:c5:
                    af:e7:5e:4a:14:5f:30:2b:43:aa:77:e5:88:e9:d6:
                    4a:64:1f:94:57:d9:f3:e1:1d:6d:5f:73:e1:43:2b:
                    cb:51:02:4d:c5:c0:f2:39:c8:54:88:05:3e:98:d4:
                    d6:38:c5:3b:64:d5:e9:b3:44:46:77:47:7b:d6:3a:
                    ca:d2:74:cd:8e:ce:d9:2e:6d:32:ef:a2:30:38:c7:
                    21:e3:66:73:01:bc:00:55:4c:7d:d7:75:58:f8:e1:
                    e1:ba:41:0e:4f:15:80:20:9c:bc:5a:41:89:c8:67:
                    c9:a2:ef:7d:18:dd:de:0f:d5:ad:98:8c:34:a6:5e:
                    ac:0b:ba:6f:4d:d3:a8:5b:df:2b:67:a4:9a:d4:9d:
                    fb:2f:0b:14:49:ed:ed:f7:e2:f4:19:99:26:f4:e4:
                    66:27:de:06:c3:12:cd:3c:47:7e:67:9c:29:c9:f0:
                    47:4c:1f:7b:8f:a0:ec:37:57:48:bd:44:9e:54:11:
                    ef:91:cd:4d:2e:0c:a0:2a:4e:f8:c3:45:b6:56:04:
                    4e:51:70:1d:c9:99:f0:ff:a6:c9:25:bb:f5:b2:ca:
                    cd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:27:CC:07:A6:EA:A2:43:D0:67:4C:C0:49:69:99:7D:32:07:BD:DA
            X509v3 Authority Key Identifier:
                keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:37:fd:99:12:e9:59:7f:ab:2c:2f:96:96:e8:65:7d:44:
         9d:da:50:01:2f:a6:da:03:45:26:13:fe:a7:79:fa:53:5f:f5:
         d7:4c:8d:76:07:ac:e3:96:ac:33:29:9d:79:06:8e:b0:d0:45:
         77:e8:8a:f8:76:30:39:ca:01:52:b4:cc:ba:dc:8a:f2:2a:fe:
         5d:c0:cc:c1:cc:70:0e:c1:4a:c0:0b:0e:4e:0f:62:20:4d:85:
         c6:1e:3f:df:45:5e:cf:55:7d:5c:42:91:32:7e:ae:44:af:8e:
         a4:14:a4:7d:ee:72:72:e4:74:10:aa:f7:0c:42:8b:86:d6:ec:
         f2:50:f0:e0:c1:66:ae:13:39:6c:13:f5:a2:46:be:bc:00:3f:
         56:62:13:a3:b8:04:b8:df:30:ea:df:77:09:65:34:66:37:2a:
         a0:9a:8e:bf:af:5f:bd:40:be:fc:09:e2:3c:d0:3f:a7:79:59:
         52:1c:43:37:38:9e:b7:52:49:11:92:a3:00:45:7f:84:87:3d:
         b5:9e:92:5f:18:ff:da:97:11:7e:d9:35:11:d5:ea:40:99:d3:
         d7:b5:87:6e:b4:97:bf:28:87:2f:e0:b7:73:83:80:e4:29:c7:
         a5:ab:00:7a:d1:95:de:73:1a:a1:dc:11:74:84:97:5f:a0:a4:
         68:ac:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----