Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File:                     N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier:          MDvcJIp5SxzdqHBW8/kUQeqZskLYm/MJtI45OwCJDLg=
Subject key identifier:   3E:34:01:EF:75:2A:40:FB:8B:55:D9:A1:28:2F:85:24:3B:72:78:E4
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer:       /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial:       01962F0694D5D53461DC4642A6F08BC3E85E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number:          14CD
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 4I-6pUBuhpnNk_pbMH3X7d2ARgw.roa (hash: sibDBbjHGj/0cV6Q2SgY8FXb2d2DZJUAVvA8r4si5j0=)
                          2: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: 2Y+tYEpRK7pyu1WJUwtl+RRdbIfBJXjP3ew7Ka4Ii60=)
                          3: rWytEJ3FiAYVl_Gh2eAbgXCpgnc.roa (hash: N2Jpj3ow/5rvsnHjtA7tEJKRTrNoSnYmSjGqItrSpc0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:94:d5:d5:34:61:dc:46:42:a6:f0:8b:c3:e8:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=3e3401ef752a40fb8b55d9a1282f85243b7278e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1e:83:80:68:7f:b9:5c:9b:bd:80:01:2e:82:
                    e3:1d:53:ec:f1:f1:d7:59:6c:97:11:60:cb:85:a9:
                    91:55:19:32:5c:72:58:23:80:58:b2:35:ff:5c:c7:
                    5b:a5:c7:78:70:cf:38:d7:51:26:dd:3d:f4:53:da:
                    c7:cb:01:40:7f:e2:d7:49:0b:88:56:c5:0d:12:2f:
                    9c:be:a8:56:21:9b:d6:a4:d9:2f:c7:40:ca:05:03:
                    42:7d:a8:a4:81:3f:32:7b:c7:cd:14:63:a4:a6:46:
                    44:01:cb:52:c7:b0:a0:53:78:5e:e9:22:5a:a4:95:
                    0a:51:96:94:4d:d6:90:a5:a4:ee:2d:5f:a1:a7:73:
                    3c:43:93:e0:89:57:84:e9:11:84:04:82:dc:1b:c8:
                    22:ed:18:69:2b:cb:f2:25:62:d6:0a:4e:cd:e0:f5:
                    7c:6e:4e:a2:db:12:60:7e:7e:29:88:c5:cb:1b:7e:
                    fa:2f:aa:85:b1:3f:3a:97:08:d3:be:46:d6:fc:a3:
                    4e:fb:f3:bd:d4:ff:eb:76:9a:e5:c7:8d:1f:f0:5f:
                    cf:34:15:96:68:fa:cc:38:26:ff:9a:d5:7e:75:df:
                    61:f9:85:38:f6:88:50:ad:cd:a5:e0:56:79:cf:67:
                    8d:bd:36:07:95:fe:78:b2:a9:e9:37:f7:a1:e9:10:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:34:01:EF:75:2A:40:FB:8B:55:D9:A1:28:2F:85:24:3B:72:78:E4
            X509v3 Authority Key Identifier:
                keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:41:c0:04:6d:5f:20:cb:e5:d6:da:f9:5d:fe:db:ad:61:38:
         2d:4e:3a:41:0b:07:d3:d9:3c:4e:af:ba:fc:8d:fb:d5:43:5d:
         91:41:be:e2:2a:56:da:ec:d1:06:29:84:5a:04:71:a2:7a:9b:
         f0:39:14:56:ba:75:45:85:ee:b3:61:46:b7:df:50:88:73:80:
         55:7f:a1:34:95:cf:0d:3a:23:73:d8:f5:2e:fc:eb:0f:45:1d:
         e8:76:59:34:d2:7a:92:72:51:95:d4:ce:f4:73:57:34:9b:db:
         05:aa:2b:a9:f4:02:5f:a9:3e:85:3d:e8:b4:6b:bd:10:92:b8:
         53:ba:75:04:89:87:23:f4:ae:e3:20:b1:be:47:b8:f3:61:7a:
         9d:35:18:ce:cf:58:56:80:8c:a6:46:c0:2b:de:f0:e8:78:11:
         82:dc:4e:06:5c:9c:00:d8:aa:9a:2e:78:f9:d6:2c:44:97:8e:
         9f:f7:54:5f:13:6d:fa:74:ab:9d:be:61:e1:2b:a0:6c:76:45:
         f4:d5:bb:6f:8b:5c:0c:19:5a:ca:16:e9:b2:97:50:5c:12:d3:
         b7:68:78:26:35:b2:51:f1:b6:83:6a:6c:27:95:26:4e:7b:2e:
         20:a8:ba:82:a8:8d:aa:ca:e8:ef:ed:83:9b:0d:2c:f6:35:3f:
         36:f7:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----