Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
File:                     Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft (raw, json)
Hash identifier:          OlKl9AkGpi+bjW7fNysvkHHNroeKrX5WeKuNt36jyk0=
Subject key identifier:   C3:58:B5:3C:B7:21:D6:8C:A1:F1:B3:5D:AC:A1:77:4A:AE:E7:52:9D
Authority key identifier: 36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1
Certificate issuer:       /CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
Certificate serial:       01962F3DA0E0FD67320EB606F4961440B851
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft
Manifest number:          0493
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: GPRnxVZYbgXJj70_iEKvlXgPN24.roa (hash: 4zWTgka5oRO1IFS4EYqUZybX548raJeNOyBzsRKEzd0=)
                          2: Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl (hash: 8gQhr73OtMLrUoscAZdwz8Ax0A3UChQBiQFaYNjYFco=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a0:e0:fd:67:32:0e:b6:06:f4:96:14:40:b8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fd6e9e7acb3758325bb3e4245918f324ffeda1
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=c358b53cb721d68ca1f1b35daca1774aaee7529d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6c:67:34:e0:14:fd:d0:08:3d:56:57:35:93:
                    90:b7:2f:3a:ea:87:c9:da:4c:ab:4f:bc:26:16:79:
                    eb:c3:ee:ef:cc:f0:c3:c0:96:f3:be:19:82:a4:4e:
                    76:5d:c2:ea:7c:df:5d:8e:f8:7e:e6:d2:38:10:58:
                    a1:f1:36:08:bf:3e:6a:9d:7e:63:ee:f9:db:a1:ec:
                    ee:90:2b:bd:40:b5:bf:72:48:bd:46:7e:35:b3:40:
                    5b:09:bc:70:0a:05:05:c9:e4:d0:14:9e:1a:1c:f2:
                    77:9b:e1:59:7b:d3:4f:77:aa:de:2a:2a:af:ce:4d:
                    d3:b6:61:e6:e0:b5:47:a0:93:55:be:ae:32:73:1c:
                    0f:8d:24:b8:48:a5:b1:cd:b5:1d:36:22:5d:61:3e:
                    35:13:b0:04:9a:5b:11:63:d8:ca:5f:0d:15:90:c9:
                    ef:89:e7:1f:9a:78:5a:1a:2d:e0:89:2a:fd:e2:a6:
                    41:5c:c1:0d:21:4a:c1:dd:51:f6:d1:59:85:1f:b4:
                    cc:fd:81:ec:ff:0a:bf:b4:76:e5:3c:27:04:12:68:
                    d8:52:4d:ba:2b:d6:f4:81:dc:40:97:30:3c:df:9f:
                    57:b4:02:49:67:4b:ac:33:e5:54:16:85:2f:a0:35:
                    d0:73:81:a8:4a:02:5b:dc:c8:d0:b2:99:b6:f6:6d:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:58:B5:3C:B7:21:D6:8C:A1:F1:B3:5D:AC:A1:77:4A:AE:E7:52:9D
            X509v3 Authority Key Identifier:
                keyid:36:FD:6E:9E:7A:CB:37:58:32:5B:B3:E4:24:59:18:F3:24:FF:ED:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv1unnrLN1gyW7PkJFkY8yT_7aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e29852-7e5c-452a-9e73-0c10dc507173/1/Nv1unnrLN1gyW7PkJFkY8yT_7aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b6:59:df:7b:35:9b:5d:2a:b3:d2:14:ae:a5:be:28:e0:7f:
         29:af:51:5b:a3:df:71:c7:08:26:3e:50:86:92:df:7f:05:f2:
         03:d1:8e:85:9d:24:29:21:74:56:aa:89:d9:7b:74:2b:fb:1e:
         7d:34:ee:42:cc:18:9a:ef:5f:82:93:95:70:4b:cf:f5:f2:a6:
         98:ae:f9:01:85:54:70:d3:bd:ee:ee:4e:48:58:73:95:34:dd:
         12:17:ba:9b:2d:8e:5b:5b:f8:a0:dc:08:20:8f:a2:5f:9d:d7:
         c0:38:cb:b1:bf:2a:62:13:c9:c1:83:1f:25:ce:9f:71:7b:bc:
         5e:22:9e:9f:dd:79:cb:80:fb:e3:ae:ab:8c:8f:ce:5d:10:1a:
         7e:2a:b8:c2:97:ed:0c:63:a0:0a:a4:cb:86:ae:6e:47:48:77:
         95:c3:f6:80:7c:37:34:10:c2:f5:23:35:91:af:ea:06:4d:15:
         e6:43:5a:aa:3a:6e:a3:54:5b:19:c4:fc:8a:5f:13:6a:17:7a:
         cc:c4:ed:14:67:03:ed:51:24:35:fa:16:f3:e6:8f:1e:82:6c:
         a3:66:ae:ae:07:32:70:65:66:3c:90:3b:d1:c1:cd:d9:73:11:
         85:ba:73:41:61:f4:2a:3d:be:23:68:06:e9:b5:6b:b6:16:92:
         f6:ca:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----