Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
File:                     NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json)
Hash identifier:          qHsQxHsl4dS6plXPvoqP/kviDGhNyjyU1F1Vx78x36Y=
Subject key identifier:   BE:94:DC:BF:B6:78:5E:07:0D:CD:EF:9B:4A:C0:6A:2B:C2:5E:BA:36
Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0
Certificate issuer:       /CN=36368aac0f4a28c8a31760f06b578dae453146f0
Certificate serial:       01962E98E440340D357E85243D23CA022329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft
Manifest number:          14E5
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: ZJKaXHr+e9AfccRWJYU2pu8i2rrErbFVqcnsRgmkzBQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e4:40:34:0d:35:7e:85:24:3d:23:ca:02:23:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=be94dcbfb6785e070dcdef9b4ac06a2bc25eba36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b6:cb:db:76:48:0c:2d:27:0c:59:5d:a6:bd:
                    5b:b0:7f:fc:b7:4e:18:b2:96:ba:0f:9b:1c:63:b5:
                    55:bb:8c:c6:d7:ee:e6:ff:cf:78:de:79:b9:b8:83:
                    01:9b:9b:41:9d:b3:79:b5:6f:d2:dd:e5:1a:71:ac:
                    58:4b:93:f4:c1:bc:1f:4e:95:1e:3b:84:af:0c:b6:
                    8a:4b:1f:49:a2:7c:9c:5a:a7:59:8d:cd:a1:65:86:
                    9d:c5:e6:c8:d2:34:13:4d:b3:c3:79:87:80:9b:a4:
                    56:a0:3e:3f:d6:eb:86:1e:e1:bd:60:7c:e8:12:30:
                    42:53:cc:e2:7f:96:13:c7:f1:3d:b7:ff:64:5e:53:
                    b0:d0:2e:e4:05:45:36:a4:5c:de:f9:28:5f:c0:13:
                    4a:76:fc:70:16:1d:6f:21:78:82:51:9c:56:41:9a:
                    23:a6:cb:5e:89:81:ca:0c:ad:3b:20:21:5d:09:e7:
                    5b:9a:52:9c:98:bc:10:9d:d6:ac:7f:ca:97:59:d1:
                    b0:7f:f4:75:dd:b0:ae:a0:db:79:13:ac:98:ea:75:
                    99:fa:7d:99:6b:8d:ee:a4:18:1b:32:3d:3d:a4:1e:
                    f0:5b:08:f4:c9:62:83:e5:f4:51:22:2b:f9:8a:2b:
                    41:34:d8:d2:14:9e:23:ab:6c:d2:ee:16:3f:84:57:
                    30:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:94:DC:BF:B6:78:5E:07:0D:CD:EF:9B:4A:C0:6A:2B:C2:5E:BA:36
            X509v3 Authority Key Identifier:
                keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:62:2b:ae:e9:89:1e:a3:3f:2f:62:02:06:29:24:f8:8d:30:
         e9:73:17:db:01:e4:51:81:c0:2b:58:98:20:48:98:f7:9e:89:
         68:16:27:f4:19:9e:24:c1:c9:01:b0:5e:6e:a6:bb:f5:d6:6d:
         fc:1d:ce:50:e5:ac:16:57:1a:a1:9a:28:25:04:13:25:00:fd:
         97:b0:87:54:c6:d3:a6:17:15:74:d0:04:02:f1:46:8c:e3:a1:
         27:4b:17:bd:15:71:4e:f3:c6:b2:9c:2a:d8:37:35:53:e1:0a:
         0e:15:25:74:c1:00:a5:dd:8d:74:96:e2:86:b0:e2:35:2e:93:
         b8:36:67:54:25:15:ab:c9:4a:01:06:ad:a6:e6:6f:9f:66:f5:
         47:ea:ad:e5:be:f8:d2:2e:4a:bf:12:54:a4:b7:10:2e:aa:04:
         d5:1a:b7:3d:67:6e:ee:60:69:a1:d4:77:4e:ee:17:d8:4d:d3:
         40:50:c6:ae:75:5d:cb:ad:bd:22:5d:bb:fb:36:53:2d:a5:bf:
         f4:b5:9c:e3:a4:11:2f:ed:21:fd:6c:13:01:dc:b7:4c:3d:81:
         78:b1:69:13:9b:b8:36:54:80:17:39:04:23:59:70:10:3b:f2:
         46:6c:dd:81:45:2f:87:46:45:73:a3:cc:d2:f3:58:00:ca:f9:
         f8:dd:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----