Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File:                     NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier:          7IJ4oWlEN4p8unvwWGqIhmsyTBUsXaDFhz9Y7AxFRD8=
Subject key identifier:   69:F1:91:EF:FD:DD:F4:24:28:74:15:5E:98:D6:6C:01:DC:D0:21:26
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer:       /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial:       01962FAB6953BEC1939FF1CE4CBF761D4384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number:          0524
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=)
                          2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: rk36kSW+x9GUHSxKqMocbXzWOOJRJ26NuXmaFOO2SDo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:69:53:be:c1:93:9f:f1:ce:4c:bf:76:1d:43:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=69f191effdddf4242874155e98d66c01dcd02126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:a1:c6:53:6b:65:73:5e:dc:aa:f4:5e:47:
                    ce:75:31:eb:f3:dc:99:9f:fa:ba:3b:1f:b4:6b:69:
                    63:ed:97:c8:3f:93:65:59:bf:6d:07:0c:4c:ea:36:
                    bc:48:72:b6:a4:ad:93:d1:9e:ad:cc:df:5c:c9:f3:
                    96:33:7a:e1:35:21:b5:11:ba:b5:99:12:0d:89:d3:
                    3c:8c:74:c0:02:54:39:b9:29:e6:39:e4:f7:1e:9b:
                    d1:8c:5e:f8:a6:8a:0a:98:88:26:f5:9c:a3:73:87:
                    df:5a:37:78:63:02:06:b0:df:69:3b:4b:19:c9:af:
                    42:3f:64:14:9f:3f:1a:25:07:a3:a2:d3:62:7c:5d:
                    2a:d4:17:50:3d:4f:3e:1b:71:f6:f4:5b:dd:b2:24:
                    c7:de:7e:c4:ac:62:8a:da:48:5b:dd:de:92:6c:58:
                    05:06:c6:83:66:3d:61:41:c4:f7:f1:a4:c1:46:a4:
                    72:9c:f7:bc:f7:6b:5e:39:e4:4f:d1:e0:8a:46:03:
                    63:4a:94:4e:1c:3e:eb:7b:81:f2:cd:97:ad:da:13:
                    b4:53:05:48:d8:00:b6:00:9d:f2:f4:48:ba:d8:9c:
                    31:a7:43:ab:64:7c:da:13:cf:01:9a:1f:34:04:32:
                    f1:d9:9b:bd:78:0f:4d:5e:93:61:40:97:48:59:de:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F1:91:EF:FD:DD:F4:24:28:74:15:5E:98:D6:6C:01:DC:D0:21:26
            X509v3 Authority Key Identifier:
                keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:8f:aa:be:9c:f8:c2:d9:4a:b8:b2:9f:2c:17:42:40:c9:
         6e:b1:54:1d:14:06:63:3b:4d:01:60:c6:48:e8:bd:22:61:d5:
         9e:77:e1:d0:4f:99:74:f6:00:70:b6:e1:d1:6e:b6:06:c3:b9:
         78:a8:af:38:f2:0a:aa:54:5c:e7:9b:9e:01:ae:31:58:a5:4b:
         1e:9a:f2:b3:2e:2b:49:d3:f7:b1:b6:d5:37:20:13:62:62:1e:
         fd:af:8e:bb:19:5f:7a:02:a5:d8:f5:44:4c:f6:36:c8:f0:28:
         2a:08:bd:1c:17:41:87:53:67:4e:c0:23:4d:78:8a:fe:0b:5c:
         35:04:92:cd:a3:22:fb:f7:55:6f:e9:0e:84:e5:f4:21:48:3c:
         bf:a9:a5:b5:b2:62:0c:b2:3b:3e:20:c9:cf:d6:56:3b:03:60:
         ab:8b:7e:67:2f:c3:f1:32:45:19:dd:65:7c:7a:ec:6f:ed:a4:
         05:21:84:04:4b:d0:c4:8b:b6:ea:ed:29:04:fb:f7:d3:dc:ee:
         28:2e:42:fd:4e:e7:db:e1:6f:7c:59:8b:b0:74:1c:f9:f4:6f:
         b7:48:47:11:88:99:d6:78:82:05:c9:7c:62:e1:bf:82:c2:a9:
         f6:cb:37:9e:59:3a:9a:8c:76:cd:8e:7e:f7:76:83:6e:f4:02:
         bd:e7:a5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----