Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
File:                     ngV1AShe0hwz2zraRFXEykfdTpA.mft (raw, json)
Hash identifier:          gj2P7nR338PFYcUQpWviFey1eT3V4o3bwnfVDsrCWtk=
Subject key identifier:   3B:06:BF:02:5E:14:8C:44:26:89:E1:AC:24:7D:E6:76:C5:EB:7B:66
Authority key identifier: 9E:05:75:01:28:5E:D2:1C:33:DB:3A:DA:44:55:C4:CA:47:DD:4E:90
Certificate issuer:       /CN=9e057501285ed21c33db3ada4455c4ca47dd4e90
Certificate serial:       01962E99A4FDA07AB49D2F6797B01D24A82B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft
Manifest number:          0558
Signing time:             Sun 13 Apr 2025 10:02:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:22 +0000
Files and hashes:         1: ngV1AShe0hwz2zraRFXEykfdTpA.crl (hash: 6W0nw7SH0ZfuqXeFKYYKCNZDgC07xVd4irxDz8WOBRY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a4:fd:a0:7a:b4:9d:2f:67:97:b0:1d:24:a8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e057501285ed21c33db3ada4455c4ca47dd4e90
        Validity
            Not Before: Apr 13 10:02:22 2025 GMT
            Not After : Apr 14 10:02:22 2025 GMT
        Subject: CN=3b06bf025e148c442689e1ac247de676c5eb7b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:4d:1e:6f:f4:c8:3a:5f:5a:ff:03:70:60:
                    4b:8d:c5:1b:31:20:a7:1f:33:a7:43:67:49:9b:7c:
                    c4:84:b9:45:66:17:80:0a:f6:24:50:11:bc:f9:10:
                    17:c7:d8:a9:21:e3:0e:db:54:df:66:89:be:98:5c:
                    4f:77:16:fc:85:90:9f:85:f5:a6:a3:b2:00:d5:3a:
                    80:8b:c1:20:35:f9:82:6c:f0:07:1c:f4:12:81:4c:
                    1f:c7:6a:20:a5:b6:15:4c:cb:2c:0e:76:72:2a:4c:
                    16:47:2d:e2:c8:1c:19:ac:9a:ea:a2:33:a4:8b:27:
                    2a:ae:84:50:d7:7b:4b:8a:60:0c:0b:0d:53:6e:7a:
                    e7:3f:7a:61:85:c2:28:77:fc:73:6b:9f:be:1d:85:
                    2f:97:41:54:85:8d:bc:1c:38:15:70:ea:4d:8e:e7:
                    a5:10:ae:2b:83:f6:fb:1c:ce:1e:67:6a:8a:f0:a6:
                    52:15:02:8f:d1:7d:a3:2b:cf:b1:38:55:3f:44:59:
                    84:d2:46:8d:f8:4b:79:8a:4b:ba:ab:a9:e9:a0:6e:
                    62:8a:86:05:8d:a6:f0:31:4a:3d:8a:08:aa:a9:e8:
                    16:dd:78:97:45:f3:fa:6a:51:b2:a8:e8:1e:64:42:
                    26:16:e0:de:c5:c8:c1:bd:1c:7d:10:7d:db:c3:6e:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:06:BF:02:5E:14:8C:44:26:89:E1:AC:24:7D:E6:76:C5:EB:7B:66
            X509v3 Authority Key Identifier:
                keyid:9E:05:75:01:28:5E:D2:1C:33:DB:3A:DA:44:55:C4:CA:47:DD:4E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngV1AShe0hwz2zraRFXEykfdTpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4f7b66-2b7f-47de-a6c9-f4e9db478dd4/1/ngV1AShe0hwz2zraRFXEykfdTpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fa:92:1e:72:10:3e:b4:2c:d0:39:d1:75:12:65:95:7e:8b:
         37:dd:04:29:1b:81:f1:86:00:ee:b4:d3:d1:d2:fd:2d:df:76:
         ed:3a:8b:26:a7:ea:ca:26:dd:3c:62:5b:fb:ec:15:c1:ee:98:
         88:10:0b:20:d6:8a:a5:8c:24:ab:82:c6:e6:2e:12:96:76:8c:
         39:bc:70:53:6c:ba:f1:b8:2e:a6:0b:b7:54:d3:ce:e7:00:03:
         42:3d:58:65:a3:a7:b2:b1:83:88:f4:9e:43:76:d9:cc:1c:e1:
         64:ef:15:c2:2d:5e:0b:46:de:09:82:31:9c:a9:d9:ec:02:48:
         2e:67:42:fc:19:c3:0d:cf:c8:de:90:d2:49:c4:93:59:59:23:
         0e:37:dd:90:08:1b:96:48:20:c9:0a:9e:c6:80:30:8f:da:37:
         f8:a7:49:4a:24:12:f8:62:ea:9e:74:51:0f:c3:9a:ba:0c:0f:
         1e:0d:01:52:7c:65:35:d7:5d:37:5d:d3:b8:71:6c:4e:5e:53:
         b2:75:45:7f:8a:0c:ec:fe:86:26:7d:ce:33:87:6f:51:f1:79:
         e4:6b:89:94:15:d2:d0:f6:07:1c:13:3a:ed:9e:43:69:41:36:
         c9:e4:38:3b:97:af:bb:a4:cc:54:f8:2e:5a:83:83:df:b6:20:
         12:4b:c2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----