Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File:                     N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier:          AG9VvMHzDq3KZ/qZiAJH2vrYM/u+t5VpZC24C5hF+QQ=
Subject key identifier:   FD:4F:90:34:66:66:68:5F:E7:DA:67:99:B2:DC:D1:EC:09:20:CB:95
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer:       /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial:       01962FAB4626E951CCAD8C41D75774804977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 15:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:15 +0000
Files and hashes:         1: MbrCU5EWrzqFZBAeUe4bUJd8wew.roa (hash: 5Pva3cv3+IYsnuZvSImhrKouYMj9MMRYEIbLj8Bzi98=)
                          2: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: k8LrMcyqWGBQekzJc3ZAfLBFw2GckbisYE+8jCyFLYo=)
                          3: zQEfbksVhhA2S7Y-4p6fScJooW4.roa (hash: wml6Lhyvjtk0nrkWUQQ2ofJbLrbKj1m4u8FJSWuGbD4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:46:26:e9:51:cc:ad:8c:41:d7:57:74:80:49:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
        Validity
            Not Before: Apr 13 15:01:15 2025 GMT
            Not After : Apr 14 15:01:15 2025 GMT
        Subject: CN=fd4f90346666685fe7da6799b2dcd1ec0920cb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:22:36:f0:ce:8b:3f:fc:f0:aa:60:70:76:
                    ae:e0:94:01:b6:34:3d:0d:36:f2:0f:e4:30:16:cc:
                    58:e0:9f:22:a6:72:2e:79:f8:07:7e:39:3a:13:0d:
                    d6:fe:e2:d6:e0:67:52:9f:b5:d3:65:83:ec:07:a3:
                    f3:09:1d:f3:2a:0a:ee:99:6d:ad:0b:db:11:13:42:
                    7d:f6:5d:64:78:72:8d:30:9c:f7:d5:54:58:9a:f1:
                    cd:8f:d6:0c:b4:95:0f:b8:f8:d3:f9:c8:0f:4d:f9:
                    e5:7f:30:57:85:bd:bc:68:f6:b9:5f:86:c2:9e:6c:
                    2c:e8:b1:95:bc:8a:30:51:b9:e6:64:d8:c2:3c:0e:
                    fa:14:c2:8f:ec:49:26:b7:b9:13:fc:73:57:70:ea:
                    a9:87:6e:a5:e2:f8:32:8a:f5:18:6f:ed:35:cd:31:
                    3b:37:ea:e4:dd:c9:4f:a3:a8:40:79:00:16:72:72:
                    61:70:26:aa:2b:e7:2f:17:b5:a9:9e:e6:db:1e:6e:
                    d8:45:5a:5c:0c:c3:99:a9:67:22:48:7b:93:99:15:
                    34:93:c8:78:d1:5c:a8:18:e7:3c:4c:7d:f3:3f:52:
                    2d:66:18:f3:29:f5:42:85:4e:da:5c:32:e1:06:1f:
                    8d:ff:1d:08:c2:6a:19:b9:52:7b:01:8d:c4:70:2a:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:90:34:66:66:68:5F:E7:DA:67:99:B2:DC:D1:EC:09:20:CB:95
            X509v3 Authority Key Identifier:
                keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:6e:4b:5f:8b:6d:e9:38:ae:67:97:39:5b:2c:34:64:ea:
         18:ca:9e:f3:7b:4f:6f:de:cb:e5:14:70:83:b4:b8:da:58:7c:
         05:0f:06:d9:e3:87:cb:fd:0f:de:3e:e1:57:06:a1:c4:33:a8:
         b0:dd:62:a0:12:37:23:c2:6b:41:38:44:5b:41:44:62:78:b1:
         47:68:ea:2c:ca:b4:cc:49:1d:d5:97:bd:ee:bf:05:2d:e0:d9:
         16:85:fa:58:92:86:8f:aa:a3:07:e3:68:57:a3:58:84:5e:23:
         de:e0:6e:49:5b:48:c5:33:53:78:72:d6:87:85:07:72:1e:91:
         43:d4:24:b9:dd:08:f2:61:be:30:c9:7f:c2:2c:ce:1a:f0:fa:
         68:3b:1e:ba:4f:c8:17:3a:7e:c3:f8:8b:c2:40:82:cb:05:1d:
         0c:60:c7:22:cb:31:2f:4e:25:c1:eb:28:ef:67:cb:31:02:69:
         05:95:e2:1c:49:38:3c:5a:7f:39:38:6b:3f:3c:00:e2:31:2f:
         ef:55:e5:56:36:26:76:a7:21:d9:c9:a7:0f:9b:c6:b5:be:2b:
         7b:2b:13:1e:af:d0:bf:0b:51:d7:8d:5e:3b:64:1c:cc:70:af:
         1e:f7:ba:89:38:a0:bb:35:35:44:99:79:e2:b7:44:04:2a:c3:
         d0:f0:2f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----