Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File:                     N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier:          RdLfGjpe5Uosuxs2V+ZHISZXuOOHBMyYyG44juYgELE=
Subject key identifier:   57:24:52:24:5F:24:AC:3D:2B:5A:3A:75:19:A8:B4:FA:FA:38:1E:7A
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer:       /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial:       01962E61F7B0F5F391E8ABA393036B44054C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number:          0EE3
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: EjaA0UMxFELAIZAqqwEg5MDZI4eY5y27bTqMi8D5Klc=)
                          2: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (hash: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f7:b0:f5:f3:91:e8:ab:a3:93:03:6b:44:05:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=572452245f24ac3d2b5a3a7519a8b4fafa381e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:68:b3:1f:e2:ad:9d:50:02:9e:90:5b:38:
                    1e:f3:94:86:96:6f:21:d0:3b:34:c4:ce:41:66:14:
                    c5:eb:d9:24:f3:a4:68:35:20:cc:e3:3b:03:1c:4e:
                    52:b4:8a:ae:de:99:2b:26:6d:ed:29:d6:8f:7d:01:
                    42:52:13:b9:ce:6e:1d:1e:a9:c4:08:e0:34:18:20:
                    d2:ef:33:7d:59:05:f4:cd:e8:e7:d2:b3:ae:c3:48:
                    6d:71:f5:ca:65:c8:aa:28:c5:07:2d:77:6d:6b:1a:
                    8c:bc:20:6a:8e:98:a3:30:0e:4e:b3:1a:77:82:d7:
                    60:85:b5:9d:5b:b2:9d:bf:36:67:7a:14:5f:fa:45:
                    db:ca:f3:f1:1e:76:ed:e7:cb:f1:d6:e7:f5:01:51:
                    c0:ee:29:1a:23:f9:5d:cb:73:cd:2c:5c:b2:14:9e:
                    4f:cb:61:0b:24:0e:19:96:53:ae:09:c3:c0:fc:51:
                    5f:04:69:02:6c:8e:80:75:43:f4:7a:e6:af:ba:ef:
                    30:e3:c1:18:d0:b4:6a:ce:05:77:23:d9:e3:77:fe:
                    ee:5d:db:c0:a7:a3:1d:b7:90:00:f1:18:5b:d5:28:
                    51:89:dc:15:25:62:44:8d:c7:b7:c9:0c:ea:0b:3d:
                    6c:db:11:3f:18:69:62:cb:be:a7:98:df:7b:bb:75:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:24:52:24:5F:24:AC:3D:2B:5A:3A:75:19:A8:B4:FA:FA:38:1E:7A
            X509v3 Authority Key Identifier:
                keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:68:74:f1:73:e6:23:e6:16:e7:6a:d0:44:1d:6c:de:18:a2:
         3a:bf:e5:ca:e6:1e:b2:41:0f:52:45:a1:bb:02:f1:38:93:cb:
         6c:ac:d1:85:59:94:fd:34:9c:d5:97:87:7c:8b:6b:d0:1b:7d:
         e0:4f:6d:92:cb:fe:ff:17:1f:a7:2d:46:8c:bf:d4:62:e4:62:
         a5:27:eb:6e:93:92:01:06:c8:9f:d3:f6:53:31:71:ec:a0:49:
         8c:62:01:39:32:ae:cd:ff:d6:81:04:73:29:00:53:b6:eb:2d:
         a7:e0:42:7d:f4:2c:2e:aa:64:ab:f4:7a:04:7b:d2:9e:24:45:
         d8:17:7b:9c:5c:78:f8:e8:81:d3:78:cc:c6:61:66:f7:99:4c:
         b5:f9:02:d5:ce:4a:3e:66:7b:0c:d8:cf:09:9f:1a:82:80:d4:
         e3:0d:71:1e:dd:53:ab:99:03:68:66:82:0c:1d:98:43:0f:3b:
         14:7e:79:73:0f:24:86:00:0c:47:82:0b:8c:15:3b:70:85:69:
         fd:e6:73:b0:3a:66:b6:f6:ec:16:a6:5a:19:de:b7:3f:b0:a8:
         0c:0e:86:4c:18:8b:94:8f:ac:56:94:58:9e:c7:cf:71:63:4b:
         65:ab:7e:84:db:5b:66:e2:ab:2d:bd:06:4a:58:6f:00:4e:05:
         38:ae:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----