Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File:                     n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier:          DF1fyy5KG4Zd6CnmZRjZk/8OHTrlR9FR3EIcAikPV4c=
Subject key identifier:   31:5C:FB:C1:73:BE:75:D5:45:78:27:9A:6F:24:F1:69:FF:B6:66:47
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer:       /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial:       01962DF3D88B4FA150376FB260253F4EBDF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number:          03D4
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: 6Zp9qhuJ7dxdBCAgd5__iELlPCk.roa (hash: cToJ6urjtRkBvRK35UPrzOd0uWCJVgb7/Yiw0ySoKxo=)
                          2: fHXFtYnbSLZ1gn7isNOv-X6g-Vc.roa (hash: oCDSfP23EAfcpuHp3yCgmbR/p7P3oSuSoD6KDdGkf7Q=)
                          3: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: Clp2TcrGzoYxHYJEDhGhYgq+WrnPp9xqIVCIHFkHDuo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d8:8b:4f:a1:50:37:6f:b2:60:25:3f:4e:bd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=315cfbc173be75d54578279a6f24f169ffb66647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:2b:0a:fe:31:6a:e2:e0:34:ca:e7:50:7e:
                    11:3f:4b:3a:bc:fb:3f:71:33:1e:f1:56:5d:4d:87:
                    0d:cb:39:25:d5:d8:f1:79:c0:9b:f5:13:24:ff:bb:
                    8c:8d:7c:c6:8e:bc:53:06:81:d5:ce:61:28:00:8c:
                    0f:af:92:b4:fa:7f:ab:28:bf:3b:b4:74:8f:a0:85:
                    a5:27:f6:ea:72:56:8d:8a:80:d7:cc:28:b1:47:be:
                    81:ae:c4:7d:39:93:dd:2f:72:89:14:e8:bb:f5:9b:
                    e6:2e:62:b9:7a:2c:3b:d1:c5:5f:e8:79:70:9c:ac:
                    43:f3:99:8a:f5:d5:ec:51:25:f7:61:21:b7:29:a0:
                    94:91:af:48:bd:7f:a4:17:0f:fc:a2:a3:4a:7e:62:
                    82:da:98:9d:a9:d4:5c:b1:b9:eb:0e:cf:e9:6a:7c:
                    9d:f2:c8:aa:3f:6f:c3:6a:97:f3:a5:2b:72:d0:71:
                    e2:11:4c:70:8a:be:71:bb:dc:60:23:32:fc:6b:43:
                    8e:88:d6:3b:c5:03:6e:b1:bf:f0:db:b4:f1:21:c2:
                    a6:71:d3:35:e1:32:ce:63:a3:5b:d7:91:0d:88:60:
                    5a:ef:c1:1d:20:20:a5:32:ff:f7:58:3b:a7:91:ac:
                    a5:08:aa:2a:59:45:52:10:d7:da:ef:de:ce:30:5d:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5C:FB:C1:73:BE:75:D5:45:78:27:9A:6F:24:F1:69:FF:B6:66:47
            X509v3 Authority Key Identifier:
                keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:20:01:d5:30:87:9e:f8:12:c2:21:81:a7:2a:c9:64:f5:54:
         03:2b:99:21:e2:46:9e:97:d5:15:35:42:98:c4:1e:6f:fb:5d:
         bf:f7:be:e6:a4:9e:46:ef:83:be:e5:b5:d0:6f:90:a1:44:d0:
         25:11:03:23:ef:79:50:6a:8c:2b:79:54:dd:ca:22:66:3a:23:
         60:9c:6f:18:2f:e9:d7:e0:49:8d:19:9f:ce:34:dd:52:38:d0:
         2a:a8:53:eb:85:c7:39:1b:14:ca:bb:b4:a9:31:e8:7d:75:f8:
         df:9c:4b:67:58:34:4d:b9:bb:19:e8:4a:08:e5:a9:61:ed:21:
         92:eb:13:07:f0:f8:23:73:0b:a1:e0:35:32:1a:f3:11:25:86:
         7d:93:75:1b:d4:b7:67:e6:c1:06:2a:43:38:d6:b0:74:89:32:
         05:0c:52:f1:3d:0d:9e:99:58:52:6a:a3:a9:e3:82:0d:ab:ad:
         31:d5:a2:56:81:da:3c:70:14:ad:95:aa:20:e6:f0:93:53:ed:
         13:c3:9d:16:c2:8a:89:2f:6f:86:77:14:aa:6b:f1:d3:b1:03:
         06:93:16:61:0b:4b:db:a4:cb:47:97:52:50:fb:9b:cc:f3:42:
         4d:bb:e5:1f:c2:05:a7:a9:17:4c:3a:6c:94:06:39:63:e6:3b:
         9e:ee:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----