Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
File:                     N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft (raw, json)
Hash identifier:          wZwVXVSJSu0gNjSgneFwn6o7ZQwwyvG04xFZuBOWOjA=
Subject key identifier:   72:B3:4C:02:BB:69:3F:35:3E:C0:EC:BF:7A:2F:4A:8D:19:9B:3D:14
Authority key identifier: 37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03
Certificate issuer:       /CN=375c742259ff900857d13689d8d48db20edf4603
Certificate serial:       01962F741AEEF5C17EE39E3615A8B9934CEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft
Manifest number:          1228
Signing time:             Sun 13 Apr 2025 14:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:00 +0000
Files and hashes:         1: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl (hash: sokhelpe0+iQHtJPtBPnf1GoLMJjHntOONu+uZ04LBQ=)
                          2: g_21VS9VjPQrGz2Td7dDraqxWmA.roa (hash: iyA8oXAsAeuHezc22yRIhc2flepygJS+6M+Uvfpnntg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1a:ee:f5:c1:7e:e3:9e:36:15:a8:b9:93:4c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375c742259ff900857d13689d8d48db20edf4603
        Validity
            Not Before: Apr 13 14:01:00 2025 GMT
            Not After : Apr 14 14:01:00 2025 GMT
        Subject: CN=72b34c02bb693f353ec0ecbf7a2f4a8d199b3d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6d:43:3d:35:4c:ad:b1:4b:70:ee:ae:91:83:
                    c0:db:ea:2c:59:c7:7c:e6:f2:2b:ba:04:15:1e:a2:
                    b3:fc:d0:ed:c4:5f:19:76:0d:27:64:94:0e:6f:81:
                    4b:92:36:83:65:b7:f3:2e:3c:fc:39:0c:ea:9f:48:
                    96:9b:90:a6:66:5e:df:be:d4:58:d7:59:b0:a6:c5:
                    2b:ae:cb:f5:31:f4:0a:c1:91:c4:da:1b:d8:1b:a1:
                    6b:7d:c3:29:ca:9c:96:83:f3:c8:db:3a:f1:b2:72:
                    7c:a0:21:a8:f6:c8:02:50:04:54:be:1b:33:50:f1:
                    f9:d0:7a:0f:80:bd:f3:40:52:21:7d:0e:31:85:0d:
                    87:cc:5e:c3:ef:c5:6f:93:e9:aa:3c:aa:03:0f:7d:
                    35:51:d4:07:f0:da:d3:3e:ed:d2:a0:d7:94:fd:32:
                    97:10:ed:c4:b7:ca:ba:cb:c5:92:df:82:37:5c:8e:
                    40:89:18:07:36:81:90:a0:c0:b6:33:70:12:96:ab:
                    b7:92:be:f4:11:fe:54:d8:af:ce:95:70:54:dd:e3:
                    e3:9d:55:fd:6e:06:78:36:ae:af:9a:23:3c:3c:bd:
                    a4:bf:b1:c5:d3:b4:cb:be:c5:cf:59:1b:c7:76:1d:
                    0b:0d:6a:59:8d:a5:74:72:f9:2b:68:08:2f:13:89:
                    fd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B3:4C:02:BB:69:3F:35:3E:C0:EC:BF:7A:2F:4A:8D:19:9B:3D:14
            X509v3 Authority Key Identifier:
                keyid:37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e3:c1:82:f9:5a:d9:d5:5e:81:10:1d:b3:be:b3:f9:47:b8:
         8b:3c:38:10:8f:8c:cc:09:ba:44:2e:4c:b8:aa:bb:56:1a:67:
         24:95:40:30:07:b1:14:93:f6:7e:cb:53:7a:8c:2c:85:0a:49:
         22:08:14:80:01:d3:17:43:96:e2:07:cb:eb:94:9d:49:8f:16:
         38:f0:28:51:47:ea:ca:01:7e:cc:f0:f9:64:8e:e1:52:ce:ec:
         f5:62:72:06:d5:6d:7d:6f:e7:8f:3b:f1:cf:4e:22:a3:12:d8:
         19:af:05:f5:63:9c:fb:e7:c6:ea:6e:6d:e1:4e:7f:f9:0e:28:
         8a:1c:66:52:b2:ff:30:76:93:3b:43:08:c6:71:2c:5b:04:9e:
         c7:df:c7:e7:56:2b:18:4d:05:64:b8:d1:81:63:7d:93:19:45:
         16:c3:78:7e:b7:a2:fa:83:0b:18:6d:b7:e3:65:e1:e8:64:00:
         46:3f:ff:7b:79:87:bc:7a:c5:04:c5:a4:71:df:62:e4:53:e1:
         68:60:46:4c:70:00:5a:54:3f:34:a5:85:3c:5e:5d:09:87:70:
         9d:00:78:aa:8e:57:cf:c3:3d:86:64:66:b0:9a:66:b6:a9:11:
         6a:3b:41:35:be:80:5b:e5:bc:0a:23:77:34:a2:3c:83:c6:0d:
         35:d5:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----