Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File:                     n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier:          npBBCwTS1Xm2uS0ZG/AR6FZX/3OtvVjbEbFLa7WG/Nk=
Subject key identifier:   7C:48:6E:06:B7:EA:16:E0:86:09:8E:EA:64:A3:65:27:C9:84:1A:3C
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer:       /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial:       01962F74DD1FD9D6C26BE091641A1CEFEC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number:          08F8
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: H0oVrGF3+jEorZNa2zZW8aP91HeNG6g/8or2DHal4rw=)
                          2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dd:1f:d9:d6:c2:6b:e0:91:64:1a:1c:ef:ec:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=7c486e06b7ea16e086098eea64a36527c9841a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:2c:64:39:fa:3c:71:49:9e:44:5d:5a:c8:
                    be:a8:11:fc:5a:da:2e:d9:8e:b3:e8:08:40:b6:8c:
                    47:9c:b9:91:ba:cd:3c:d0:b7:15:d4:1b:49:0e:98:
                    18:7d:dd:fe:61:d5:a5:37:90:ff:c3:cb:70:fa:41:
                    f8:86:95:63:02:19:2f:5c:a0:70:2c:b1:e4:9b:96:
                    f3:8a:87:76:e3:cc:5d:b8:d6:7d:6e:81:f5:e2:57:
                    0b:35:1a:f0:81:43:26:53:42:f4:1c:74:f8:b2:58:
                    6e:76:3d:a5:55:46:16:41:06:b9:a0:b3:9c:a0:5a:
                    37:02:47:42:4a:73:92:93:f7:15:e8:c2:1f:8f:64:
                    a0:d6:e3:b1:c9:ab:0e:f7:2e:91:e2:5c:56:59:2b:
                    c2:09:50:ff:6b:7c:61:d1:f3:89:d9:e1:11:d6:c0:
                    1f:c8:ec:58:5f:c9:fc:a7:0b:f0:48:c5:c2:60:8f:
                    f4:f6:f2:41:ff:5d:de:19:b7:96:55:d7:75:9f:46:
                    fe:a7:d5:ce:7b:0b:7e:13:34:e3:91:d5:6a:f0:d4:
                    40:12:ac:4c:ed:c4:1d:2c:dc:d4:44:fb:aa:3f:8a:
                    32:fe:14:76:24:c9:0f:25:ee:fb:eb:77:a0:02:45:
                    5a:10:72:c3:79:2f:42:ca:ea:27:1b:1c:f9:cf:97:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:48:6E:06:B7:EA:16:E0:86:09:8E:EA:64:A3:65:27:C9:84:1A:3C
            X509v3 Authority Key Identifier:
                keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:01:59:5c:75:29:0c:68:70:92:ae:68:6e:c0:aa:c2:7f:c7:
         5d:1d:4f:5e:b7:e5:8e:6d:07:66:8f:f0:87:e7:09:13:f7:13:
         10:45:6d:57:22:6f:9b:2a:65:2f:01:b6:0a:f7:f4:11:c3:9a:
         65:7d:67:e6:4f:27:cc:a4:88:a4:3a:f6:74:59:5f:57:3f:91:
         32:59:34:0e:01:ba:54:5e:e6:81:47:08:0c:25:e1:1a:2c:b1:
         a0:1c:18:34:21:0e:16:07:85:f4:ae:16:8c:0e:85:5a:6c:ce:
         31:54:29:e8:8c:71:d1:c9:b8:85:18:d3:fa:07:af:df:a0:17:
         5f:46:88:96:e6:1f:ed:21:8c:86:f2:1d:42:da:f4:3d:af:02:
         cc:56:f9:b7:07:8a:24:6c:cb:67:12:5b:e1:7b:09:68:8a:f3:
         e1:50:7b:3e:96:31:0b:ba:92:6f:c4:3b:08:ed:90:3b:b0:38:
         e3:64:a9:79:c7:be:fe:50:f4:e4:a7:44:d3:46:02:ec:e6:7b:
         63:2d:28:7d:8f:7e:e2:20:f7:0d:34:1d:5e:b3:1a:f7:0b:ec:
         23:e2:e3:9c:e2:7a:1d:c0:98:ad:5e:ef:0b:d9:ff:53:2f:4f:
         74:0b:8d:75:e7:1b:43:c7:dd:d2:1f:82:c2:c8:14:cb:c5:9e:
         cf:71:77:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----