Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File:                     N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier:          TaKFi5xIP+JmDWDEvHPlbarVjqDra47NNAMVmESp0U0=
Subject key identifier:   4B:34:13:88:7A:C6:19:AC:DF:BF:AC:4D:52:B8:7C:BC:36:EF:3D:43
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer:       /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial:       01962ECFD3713D7270CA4C35CB9B8E946869
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:33 +0000
Files and hashes:         1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: rLkTmjAAT48MOPRR7iF/h54Dy3Qg3/oE9w9e9PHFGfs=)
                          2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d3:71:3d:72:70:ca:4c:35:cb:9b:8e:94:68:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
        Validity
            Not Before: Apr 13 11:01:33 2025 GMT
            Not After : Apr 14 11:01:33 2025 GMT
        Subject: CN=4b3413887ac619acdfbfac4d52b87cbc36ef3d43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:19:57:d0:93:7c:0f:41:04:5c:b1:58:ea:
                    b0:9e:41:6d:bb:ff:3d:45:50:f6:69:fd:db:a8:f0:
                    46:55:17:2b:12:fd:b8:a3:a7:30:34:79:a8:74:35:
                    7f:43:3a:9a:3e:46:76:7b:3e:17:e0:aa:e0:56:bf:
                    20:37:55:0b:06:56:21:03:a6:0c:14:7d:1e:83:c1:
                    52:e8:1c:b9:80:ad:0b:26:39:22:83:b1:ad:d8:a5:
                    42:af:54:49:58:5d:99:f9:43:9b:a7:be:d7:a3:4b:
                    11:5e:62:c5:06:2c:86:15:e7:f0:1c:7b:5a:15:03:
                    e9:f0:df:6c:44:3c:e5:74:29:6c:f5:c4:26:0c:1c:
                    24:90:23:7c:09:20:b8:b2:78:68:96:21:0e:f9:fe:
                    a3:63:12:df:76:9d:db:b7:b9:18:e8:02:1e:5a:bf:
                    be:79:35:69:b2:40:d6:37:5e:a8:58:cf:0b:36:3d:
                    ed:46:a5:7c:6d:44:05:53:30:d6:e5:be:1b:d0:f3:
                    7c:17:78:b3:67:76:46:26:ba:29:e3:d0:0f:98:b4:
                    64:d6:bd:d2:a5:37:e1:4c:c2:ef:aa:b0:09:ec:49:
                    e8:20:af:87:30:77:74:6f:50:d3:34:38:d0:b9:99:
                    f5:f2:46:a4:f1:28:15:f1:ee:02:f3:1f:05:0b:5a:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:34:13:88:7A:C6:19:AC:DF:BF:AC:4D:52:B8:7C:BC:36:EF:3D:43
            X509v3 Authority Key Identifier:
                keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:13:bb:5a:7f:0e:21:ec:fd:e2:8c:33:42:10:97:1b:47:48:
         a8:6c:f8:a2:fb:63:75:14:11:7d:d5:bc:ac:54:a2:08:20:25:
         01:df:47:6c:8a:c8:59:b0:4d:62:cc:32:04:85:8a:fb:3f:5e:
         8b:68:70:f4:61:0f:2d:8a:05:31:94:25:76:57:65:d3:45:5f:
         17:23:6d:e5:85:1c:13:00:35:fc:79:09:96:05:9a:00:e8:35:
         be:9b:c1:be:5e:35:94:7d:ca:e8:44:8b:7b:6c:fd:38:21:cc:
         d5:db:62:3a:a2:f4:0b:d4:f9:9d:1c:e6:20:84:fa:ef:9e:af:
         93:54:f2:e1:c5:cc:1c:57:6e:a5:94:41:3c:e7:90:6c:fa:a3:
         12:2c:0b:56:22:7d:9f:53:63:95:73:87:36:a9:36:cb:c8:90:
         b9:06:c5:8a:1e:43:08:4b:6c:9e:ce:66:7c:ad:d9:00:e0:8d:
         e4:6a:2e:60:37:23:01:20:e2:e7:49:02:6a:6c:8b:26:19:82:
         3f:ba:76:79:5c:2a:f3:fc:74:29:7d:08:05:ef:4f:95:dc:a7:
         35:4e:64:02:e8:fb:15:44:f0:9d:48:c0:5a:43:ee:ca:dd:c5:
         a2:bc:69:6e:a3:66:81:ad:ca:bd:58:f5:9d:9d:3f:87:bb:97:
         39:f0:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----