Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File:                     N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier:          4U4UZ8xVLCB0qHhtGiezm/qGU/fC/RrGP/IYLDgsOKg=
Subject key identifier:   F3:8B:27:4D:2B:29:D3:EF:4A:0C:D5:37:65:51:29:F2:6B:9F:62:E8
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer:       /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial:       01962F06A7ECD89F03556C66AFBC18F865DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: DH9htlq0hiwldp4q07DNTkVZOf8.roa (hash: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=)
                          2: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: WHLVT7mHXnujtbAdxG8t2xL4kyH8iaheC+ZENEgzQTs=)
                          3: jeU3xqGrcmxdIS4lfaliQojmUd4.roa (hash: WoVvfzkH0PYO9V3NP53Pv15mZRXcsOzFbw+RGpI6V54=)
                          4: mbXBHvnDkr71szR1uqXUf3o_CNU.roa (hash: gBt+bTGYlOGXiT5DEgI8/fzoH444V5sSGRbb6v+iHAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a7:ec:d8:9f:03:55:6c:66:af:bc:18:f8:65:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=f38b274d2b29d3ef4a0cd537655129f26b9f62e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:b1:c8:0f:0a:ba:bf:e2:cb:48:22:97:25:
                    ff:9c:8f:aa:13:52:69:ff:36:6e:d5:cc:c7:a1:1f:
                    38:e4:b5:d7:5b:e7:e2:a2:41:b4:75:08:74:83:55:
                    34:67:2f:82:98:4a:54:82:18:db:95:4b:d1:9b:f7:
                    54:a5:67:db:78:ca:42:5d:5e:58:87:58:f2:45:c8:
                    e1:c5:10:83:6c:4e:22:33:19:ac:f1:ba:d1:07:3e:
                    65:16:07:7a:c3:83:85:d4:8f:0a:e7:59:4a:3c:a0:
                    44:ce:f3:23:20:3b:db:30:31:d7:4a:dc:24:26:19:
                    95:54:de:3c:03:86:b7:3d:f0:fc:9a:91:17:4b:08:
                    8e:b3:52:52:e4:66:21:20:51:9b:08:6b:1e:a8:8f:
                    18:7b:3a:4a:5c:9d:43:82:98:c8:8b:1f:d6:f7:06:
                    47:ba:5a:78:d5:39:64:59:69:20:ff:c9:e7:74:3d:
                    d8:22:b6:3a:35:0f:77:b8:20:e2:01:85:3f:fd:4a:
                    be:3c:61:ad:a0:f1:5b:fc:19:48:2c:4d:f2:27:38:
                    5e:ff:c1:c7:16:ac:46:a3:bd:f1:93:b7:65:3c:f9:
                    9e:54:4a:db:e9:5f:e3:e0:70:7e:11:bf:3e:0e:3c:
                    a8:80:ec:e2:33:59:d1:c8:4d:44:cf:6d:e4:fc:87:
                    10:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8B:27:4D:2B:29:D3:EF:4A:0C:D5:37:65:51:29:F2:6B:9F:62:E8
            X509v3 Authority Key Identifier:
                keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:ee:35:b3:92:42:20:1d:24:65:a3:6f:19:3d:46:cf:88:
         b8:c3:17:17:06:03:89:6e:2f:81:8b:6b:1b:b9:8b:29:61:97:
         55:ba:0a:f4:9a:99:4b:27:57:75:d6:0b:fd:0e:ce:a9:8c:d9:
         5f:5e:db:a3:9b:d8:f2:e2:d7:2b:db:9e:0d:23:f8:68:7e:72:
         f0:37:96:8b:50:95:c1:05:19:f3:ba:27:36:6f:52:e8:54:7a:
         c2:7d:82:7f:6a:b6:47:0c:ce:b7:55:63:b6:f3:e6:11:8d:17:
         8e:35:21:f2:97:35:c7:33:6c:ff:01:8d:75:f8:b2:6d:a9:db:
         50:a4:89:42:0a:2f:3a:b1:fb:42:a4:f0:4a:e5:36:30:25:9f:
         c3:1b:29:60:d5:33:4c:11:a0:0a:0c:b3:a6:23:74:ed:36:bc:
         ae:1b:f8:01:6e:63:e1:5a:9a:86:39:da:59:a1:8e:94:48:37:
         63:3e:36:fb:1b:c7:82:75:6b:ba:ff:90:80:5a:f8:af:68:78:
         58:6f:a3:b1:99:90:6a:d3:a3:e2:6f:8f:27:67:66:c2:f8:64:
         13:e6:04:b0:17:a3:9f:ef:26:72:b0:37:68:80:fa:36:b1:3c:
         bc:5d:4c:49:08:ea:d6:3a:d1:00:0e:91:d8:11:b9:40:dc:ef:
         cc:92:f3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----