Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File:                     N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier:          kMCpBX2UX0R901RifeSIJxsMB+w6Y6IEXUBcX81YdKM=
Subject key identifier:   25:65:77:9F:7F:E0:12:F8:89:A8:C6:2A:C2:3A:44:D3:D9:07:AD:FD
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer:       /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial:       01962E616FCDC15E689C62AB07FE6E0399FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number:          0B94
Signing time:             Sun 13 Apr 2025 09:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 09:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 09:00:59 +0000
Files and hashes:         1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: /on1NPoLEVQWcExd3tASMa35JOympOdYPolTt6l2lmk=)
                          2: cNzBuZews7ZdR62Aog1WuWIa_Vc.roa (hash: QJxazJXAbp+Y08ZTXOoocYGXg/oCHOcrCqlhmHqJgf8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:6f:cd:c1:5e:68:9c:62:ab:07:fe:6e:03:99:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
        Validity
            Not Before: Apr 13 09:00:59 2025 GMT
            Not After : Apr 14 09:00:59 2025 GMT
        Subject: CN=2565779f7fe012f889a8c62ac23a44d3d907adfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:dd:b4:b6:0a:1e:80:b4:11:86:52:0e:1f:fc:
                    71:ec:c5:9c:b3:e5:d2:3c:81:04:e1:6b:ed:70:c1:
                    61:bf:d8:92:6a:93:3b:07:34:a2:7b:8c:b2:61:9d:
                    58:98:ea:c0:15:bc:79:25:9d:ff:36:54:a5:e5:14:
                    b4:0b:b4:5c:74:bc:18:b4:35:17:04:cb:bd:f4:31:
                    4c:79:06:4f:f9:5c:ae:62:4a:54:95:ce:e7:13:8b:
                    61:3c:a1:df:af:c8:fc:ed:cf:6d:db:58:6c:9f:7c:
                    80:84:a8:cc:7b:73:38:5e:6f:6a:2d:a4:f2:58:28:
                    fd:22:23:46:63:0d:56:06:30:65:a0:c3:80:7d:86:
                    79:75:95:73:f5:d1:20:83:e6:60:8c:b1:ec:37:4d:
                    7d:76:28:d5:58:10:4f:2a:2b:01:8c:94:7c:db:88:
                    83:1d:19:d2:a3:8b:d2:b5:7c:86:82:28:a5:97:31:
                    ef:da:d3:4d:84:88:00:4c:1d:45:c3:0c:88:3b:64:
                    ad:6f:80:07:52:6f:df:70:11:82:a3:e0:29:73:57:
                    1d:eb:f4:7c:12:7b:34:8a:4a:02:36:b4:76:b2:29:
                    6c:dd:43:79:8d:fc:9d:14:47:8c:00:75:7a:c6:76:
                    51:43:0a:bd:56:17:16:41:af:58:52:3a:55:3c:f6:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:65:77:9F:7F:E0:12:F8:89:A8:C6:2A:C2:3A:44:D3:D9:07:AD:FD
            X509v3 Authority Key Identifier:
                keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6f:a6:13:3f:9e:e7:43:37:cf:2a:25:c7:f5:c6:84:86:88:
         ff:21:8e:c5:f4:0f:91:c5:ca:42:d9:55:c5:3e:5d:d5:d5:f3:
         66:44:71:93:f4:5e:a0:ff:1a:d2:06:7f:36:af:7e:2b:80:2b:
         28:cb:24:4c:05:35:37:f5:35:30:30:ee:a6:44:7c:ad:79:d2:
         d4:d6:c7:4c:a0:6d:96:36:b4:fb:93:e2:69:16:1a:dc:cb:d4:
         9c:d7:bf:3c:98:e6:b9:95:4d:59:2f:6b:e9:a5:33:6e:b0:7a:
         9f:fd:f0:e8:c5:0f:54:88:7c:b6:c7:18:dc:af:90:ea:19:d9:
         c9:5c:a9:76:bf:29:fa:a9:a4:f9:a7:62:88:45:f1:f5:a0:2d:
         25:d6:df:36:33:f5:f7:df:6c:4c:29:2e:d1:e0:64:dd:01:94:
         1e:20:a3:76:21:d4:cf:6e:95:cf:93:a2:f9:a1:c8:5f:b0:22:
         46:c3:d7:ae:a9:76:1c:c9:14:1f:fe:89:a1:a0:ca:d5:e0:f6:
         97:9b:0f:99:de:2c:18:3f:d0:45:d9:58:0f:ac:75:82:7a:7f:
         6a:61:52:60:83:c1:11:11:13:8e:a3:87:65:24:6c:c0:e8:ee:
         ea:3a:28:69:14:a1:a3:d7:15:00:f5:de:e2:99:2c:c5:34:74:
         8c:56:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----