Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          sI2fFs+Dq6yK1g1Jvw1J5KixOZ/37fq3TQmveEv5IJM=
Subject key identifier:   7D:F2:92:08:AB:1A:AD:31:2B:7F:42:F9:53:E6:BF:42:85:53:17:95
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       01962F072EB363952D25FD93C1DD145063B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          1594
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: 1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa (hash: yv0HSZPQLPjAOK0Qjg6MUOpe4+d1qLZAv2u1ddULbTs=)
                          2: 8zzToX2_MSbXjPU6GvHQQ_9Dvvk.roa (hash: wilJSEirQsqEx26ndpfgfkDVvj+zVkzSkCh5uXU9fHI=)
                          3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: sbFkuJs/9XswmxdI8tnH8PUMclV8hitrFFRO+QWuAdY=)
                          4: bHL_tTznnHPbHP4F0hJKIReYm6M.roa (hash: R72+H7qsqTY9GklcA/NGuJeZ8wkSyMWhn933bwOHpJE=)
                          5: i16ilfmrEmGll-8P1By27TRNxjs.roa (hash: b9oY0GhLijC6RRV6+0ZoYX7cAxCSwlkMlJ1wrgHM1qc=)
                          6: q8AP7H93ZbNKPWz_Zh0y6fK8m7g.roa (hash: Jd2YHA+NTHYb6+qWLH1KGDGjnXW6xUSmZVAZe2REuGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2e:b3:63:95:2d:25:fd:93:c1:dd:14:50:63:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=7df29208ab1aad312b7f42f953e6bf4285531795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:ea:dc:88:12:8f:2b:59:77:ca:d6:8c:ab:
                    00:26:40:aa:78:15:da:cd:50:30:3a:98:6d:8a:da:
                    2d:31:c6:77:5f:83:1a:dd:36:ad:33:fc:0d:4f:cf:
                    ab:c9:e7:f4:62:1b:b3:2f:c1:34:1e:61:d5:2e:5a:
                    17:aa:99:b5:75:8f:3d:ee:d2:4a:b0:1f:f9:c4:24:
                    28:d7:f3:8f:44:b3:7a:6f:6a:3f:40:f8:06:43:b1:
                    30:14:bd:43:1f:77:be:76:7b:ca:e9:b2:3b:dc:e5:
                    8b:10:e2:19:1e:1c:48:7d:66:28:fe:c6:c4:0b:ec:
                    b6:6c:67:80:14:d0:87:99:35:a6:c7:8a:0f:0f:59:
                    7c:eb:66:50:8a:4a:e7:b9:94:f7:6f:29:84:78:4e:
                    c8:d5:09:2e:51:98:71:c0:40:d5:f0:b9:a7:9c:43:
                    4f:b8:ce:8f:0e:57:ac:d3:93:66:cf:2a:40:09:d0:
                    81:1b:b2:ff:0f:92:3f:6a:8a:31:af:c8:11:b1:f1:
                    c6:fe:15:85:d3:59:d6:a1:6e:84:3d:ab:1c:98:26:
                    c7:44:80:c6:d1:52:80:ce:88:44:a0:fc:f9:05:b8:
                    80:11:8a:91:17:41:28:a3:da:86:8b:a6:ff:a8:f2:
                    76:64:26:b6:c8:3f:53:54:9a:a9:1c:2e:c0:56:77:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F2:92:08:AB:1A:AD:31:2B:7F:42:F9:53:E6:BF:42:85:53:17:95
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ec:7b:10:43:c0:70:e4:28:83:92:97:8f:6f:47:a0:5e:8d:
         a4:fc:8a:47:30:81:d1:21:69:83:29:c0:e1:43:80:a8:de:ee:
         d4:e7:46:1f:d2:37:4a:3d:e6:24:a2:25:e7:34:13:b0:7c:f2:
         19:ce:5d:08:70:a5:f5:f5:4a:46:1b:44:3b:66:61:86:0e:19:
         e2:25:86:6d:ba:83:2b:18:96:fa:7b:df:e6:6f:95:00:40:96:
         c4:64:65:01:59:15:b2:f8:58:1f:f6:d8:90:4a:44:bf:07:0f:
         5e:3d:fb:c4:8a:6a:6b:b7:0a:0c:01:7f:12:82:45:38:81:ff:
         1d:a1:44:8c:dc:fa:3c:35:a2:7e:0c:de:fa:2b:07:7c:98:57:
         57:97:e1:61:c2:fb:08:aa:4b:bd:8b:da:9c:75:1f:42:8e:98:
         df:8c:06:2a:40:7d:8f:21:93:7e:84:6f:b0:6b:88:fc:17:19:
         69:bb:07:84:b7:cd:1f:15:f6:c1:9a:13:b3:e8:a5:23:8d:db:
         29:16:72:dd:15:cc:d2:30:b6:ce:df:66:94:bf:43:eb:df:e2:
         9e:af:b2:cb:9b:74:12:a4:c9:65:5e:51:9c:7a:c9:c0:72:d9:
         28:7f:62:46:c3:75:4e:af:4b:e2:a7:8c:3a:fd:42:d7:ae:5f:
         d5:ca:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----