Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
File:                     N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json)
Hash identifier:          TyYfFnppKEWoaKjmKvhCc7ucaZ00NJTsNbGzuN50YFI=
Subject key identifier:   52:C5:07:07:83:3C:38:BD:A8:A7:AA:C2:42:CB:D7:B2:C8:DF:B2:06
Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59
Certificate issuer:       /CN=37431f1be9fdc2419098479cde457bbf79571759
Certificate serial:       01962F747C2C4C06D0F8383ADDD7906CE01D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft
Manifest number:          0772
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: A3ey_cAeMANwFWddA6tWalsb_HU.roa (hash: 1QzvBN6h57NIWttaQKkwiJVejIWg/N7/NzIPvbKh3sU=)
                          2: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: yx+11rAsVSRvRNG16JVco8iUIBrxBVqKrSmIV0Bygas=)
                          3: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7c:2c:4c:06:d0:f8:38:3a:dd:d7:90:6c:e0:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=52c50707833c38bda8a7aac242cbd7b2c8dfb206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:73:f2:cc:57:3a:c4:da:06:d6:a7:cb:f0:
                    c8:07:d9:cf:42:4f:4f:24:9b:12:68:99:32:cc:fe:
                    97:be:a9:93:bb:f5:05:2a:63:1f:81:3a:7c:3b:51:
                    05:05:b6:51:91:67:69:c7:fd:a4:2a:58:45:d8:1f:
                    f1:43:a4:bd:80:34:66:ea:9a:ee:e1:11:83:fc:03:
                    41:0f:ff:48:8d:e1:d4:45:d7:a0:a9:48:e1:f4:0b:
                    1c:fc:46:3a:b8:9f:3e:16:cf:17:b7:d6:6c:4e:f6:
                    cf:69:bd:d9:9b:d9:2f:e6:a3:b9:94:a1:18:18:67:
                    5c:f4:9f:3a:40:54:19:08:c9:80:b3:b9:95:34:b3:
                    a2:02:f6:e0:a7:fa:c4:17:2e:43:8b:c8:27:91:25:
                    b6:79:9d:7e:7d:b6:04:25:ae:ca:b4:44:f9:84:e9:
                    01:22:1d:31:f8:b8:f2:2c:1b:89:00:50:0e:50:54:
                    33:da:f9:0c:ae:f9:db:2b:51:32:8f:ec:bf:42:01:
                    bb:30:a5:35:27:d2:aa:aa:a5:d1:c0:89:a7:b3:93:
                    d1:85:17:a3:f3:d8:a6:9e:14:76:6e:4b:76:ee:5c:
                    25:8f:b3:4e:ee:b3:de:bc:dc:bc:24:72:05:c1:8f:
                    a9:4c:aa:9e:6a:c6:b8:a1:f8:2e:97:84:a7:01:e5:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C5:07:07:83:3C:38:BD:A8:A7:AA:C2:42:CB:D7:B2:C8:DF:B2:06
            X509v3 Authority Key Identifier:
                keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:40:ef:51:6a:64:68:d8:13:6d:78:2d:db:89:49:fb:60:dc:
         08:bd:a8:c8:80:3e:19:0f:08:33:61:ae:b3:3f:02:b0:fa:48:
         0f:c5:e6:3f:48:2f:b5:d4:52:41:0d:53:44:00:bf:34:d1:81:
         4a:8c:0d:be:f3:8c:45:f1:1c:b4:2d:57:b9:d8:8b:a3:88:fe:
         e1:48:1a:7b:6c:79:40:61:b1:b7:0d:a8:cf:4b:36:31:3e:52:
         58:77:e9:e3:8b:05:96:61:78:96:9b:89:46:f5:20:25:2f:e1:
         c1:4e:d8:a0:10:68:04:c1:16:c3:99:b7:82:68:ed:2b:47:fe:
         61:0b:09:f4:a6:dd:61:3d:67:39:cd:ca:61:bc:11:45:b4:53:
         0e:75:8e:64:69:ae:4e:25:41:d0:b6:2b:cf:86:fe:8c:c0:32:
         8c:11:f9:93:47:c8:9f:66:f4:82:7f:e1:47:fb:02:ba:41:1b:
         d4:98:3f:95:6b:b8:b4:c4:13:91:af:f2:6a:8f:fc:8f:ef:94:
         b6:12:28:35:7f:05:fe:a9:52:ca:60:97:fc:51:94:5e:e7:9d:
         c6:ed:c9:bc:55:45:04:75:1a:98:ca:99:f2:7f:ca:e3:99:1b:
         d8:47:b1:ef:02:6b:4c:63:d7:2b:e7:85:f5:45:c1:a6:66:f8:
         7f:36:25:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----