Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          n4fK7xYVOkLUGZ2+EOpgM2ze2gEW9HQP3FuCrE8RMrs=
Subject key identifier:   62:E4:6A:A2:8E:BB:EC:67:36:D2:97:20:FA:BD:8C:A9:3F:45:34:10
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       01962DF39915C97B1F5F3FE6B46F4B4E366D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          0B8E
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: xS7EQ1EJIG8ZIEzNgjrHIdGnuh8PvepKabFgzNk2W0I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:99:15:c9:7b:1f:5f:3f:e6:b4:6f:4b:4e:36:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=62e46aa28ebbec6736d29720fabd8ca93f453410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:6c:d4:79:87:7e:48:d1:e5:b8:99:06:b1:
                    ba:ba:47:ad:9c:43:f7:a9:be:68:2f:30:b0:13:9b:
                    18:3d:e5:74:f2:ee:7c:58:1c:ca:9b:ae:04:71:9f:
                    a1:ba:ba:cc:33:6f:e7:ce:96:93:3c:68:29:44:fe:
                    d9:ca:db:a6:9a:ad:0d:ef:3d:41:b3:ea:a1:18:5f:
                    71:a1:20:8f:2b:fd:aa:f7:cd:f3:75:6f:83:1e:1c:
                    e4:fc:83:be:28:f8:38:cd:90:7b:42:d8:6f:bf:7c:
                    8c:d1:2b:08:2f:d3:eb:24:eb:28:aa:c1:2d:94:1e:
                    2d:01:c1:58:62:4d:23:70:2a:7a:90:c1:22:25:cc:
                    bb:06:f9:ec:1f:e3:10:2e:4e:01:0a:af:e8:5b:3f:
                    51:38:80:be:a5:14:8a:69:6b:a4:ab:d8:c4:70:2b:
                    8e:f4:a5:56:6f:fd:66:a4:4d:b4:1a:4a:83:99:e7:
                    bd:b1:a5:51:4d:13:2a:66:80:84:89:5b:96:f8:09:
                    ed:63:d5:8f:b0:1c:13:a5:fc:61:1a:1b:24:b5:2d:
                    41:b9:d3:7b:5b:f7:9a:2a:ed:17:d1:84:a3:30:c6:
                    e7:0c:5e:6c:01:c3:00:e7:d5:cc:58:7d:a9:5d:c5:
                    79:b3:26:cc:15:7a:58:7a:2b:68:df:de:46:dc:01:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E4:6A:A2:8E:BB:EC:67:36:D2:97:20:FA:BD:8C:A9:3F:45:34:10
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e8:cd:76:65:de:50:7a:51:b4:ab:ca:55:e7:c8:6b:aa:90:
         ed:98:79:05:bf:82:da:cf:4f:fa:79:f5:94:6b:f4:e9:a3:f4:
         bc:03:8f:c6:d5:d8:9e:ee:7a:09:86:d1:0c:8e:1d:1f:87:15:
         c3:85:62:69:7a:e1:dd:23:ca:0e:b7:05:b7:4f:54:8e:92:d4:
         83:fb:d5:8e:c2:0a:5f:63:a7:a6:0b:15:1c:86:46:a5:6e:b3:
         f4:f1:18:9a:b4:3a:df:e8:ba:d7:e6:72:51:34:f1:e6:73:bd:
         a7:46:fb:2c:62:f2:9d:d6:4e:27:bf:bb:32:20:3c:c2:89:f8:
         1c:ef:f3:21:44:40:4d:fb:a8:9a:70:eb:93:03:7a:59:93:ba:
         3d:e4:07:d3:69:2c:9d:2b:24:f9:45:9b:19:d5:c3:2d:ae:dc:
         b3:d5:28:94:d0:65:e1:3e:a9:6c:47:cd:53:66:e6:a6:07:36:
         71:65:b8:b1:0f:7c:e7:e1:69:34:1b:af:ff:a8:15:eb:72:8b:
         24:7b:52:e5:90:8f:26:ad:c6:18:dd:48:c3:33:04:8f:4c:77:
         60:c7:d7:28:b6:b8:56:9c:06:13:30:e5:77:f3:7e:01:6f:42:
         3a:1d:fb:8c:d9:4d:a2:14:01:a9:8e:b4:8d:4b:35:25:37:21:
         f9:c0:ce:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----