Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
File:                     N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft (raw, json)
Hash identifier:          ErFgd382lr/q4YtlmleKajpz5fc0o4csra73+ML2LcI=
Subject key identifier:   D2:7D:70:78:43:4F:D1:F5:EC:A8:59:1C:15:A6:BB:0F:16:DE:54:79
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Certificate issuer:       /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial:       01962F3DBEBD76A7C333AD383350F12E55E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl (hash: YLlxTVshbKKXHYPzS8s3eo8qxtlAbZnUUDq6aQo+viE=)
                          2: kDvrCZDJUN6ltTbVicwTRbgkORo.roa (hash: ZU7fz2rjwPLJnVqFmW3M/TsgnCWukDOaodixRDMDm4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:be:bd:76:a7:c3:33:ad:38:33:50:f1:2e:55:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=d27d7078434fd1f5eca8591c15a6bb0f16de5479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:99:b5:a9:64:d9:a6:4c:32:3d:ce:03:65:
                    1e:68:c3:ad:90:a9:f2:09:ed:f1:1d:db:9a:ec:47:
                    36:11:5e:a1:38:e3:47:20:5f:b3:aa:2b:d6:f3:ea:
                    c9:aa:72:ae:db:5e:83:6a:91:ce:e2:49:3a:53:c6:
                    1c:bd:b7:42:fa:33:0c:18:34:dc:91:88:93:f0:53:
                    0a:06:d6:5d:fe:d6:0f:4c:0b:a8:a0:b7:83:d3:81:
                    59:9b:d2:c8:9c:c0:20:25:c2:ef:44:0c:e3:e6:06:
                    2f:ae:bb:77:ea:db:1e:b4:20:ba:51:69:81:51:8c:
                    3a:f3:cc:4e:2a:62:4e:30:9d:f3:bf:22:af:d3:bb:
                    3a:ca:70:42:d7:fd:2c:81:6e:35:d9:85:13:ec:ec:
                    a9:c1:f8:ab:e2:86:5d:d2:66:cd:07:35:3b:61:8c:
                    3b:96:62:29:ec:4f:34:96:fd:26:0a:71:6e:ca:f8:
                    34:36:75:a8:3e:de:09:84:34:14:8e:79:70:99:95:
                    44:12:e0:1a:05:02:60:a4:a8:54:a8:16:a8:2b:ed:
                    e8:65:b6:d9:eb:55:8b:e6:60:bf:23:6e:a9:a0:90:
                    8e:d1:45:13:5d:70:9c:75:89:4f:e1:11:a0:a1:c7:
                    63:df:5e:ad:01:2c:a7:f9:0a:a6:f6:cd:b2:ec:c6:
                    c8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7D:70:78:43:4F:D1:F5:EC:A8:59:1C:15:A6:BB:0F:16:DE:54:79
            X509v3 Authority Key Identifier:
                keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f1:9d:01:8c:a7:1a:6b:49:d8:c3:90:06:ea:1f:ad:fc:e3:
         15:44:40:7c:b2:f0:79:e6:e2:9e:76:2f:ec:b1:6a:ee:0c:04:
         5e:66:ad:bd:be:27:99:16:5d:3c:85:85:ed:11:1b:89:6f:5e:
         c7:3f:90:34:c1:a7:52:52:7a:46:b4:14:6e:81:a0:95:5d:c4:
         1d:3b:0d:17:2a:b2:42:38:ee:c8:19:f9:87:3f:5c:ce:49:79:
         4e:a2:88:ae:52:17:f0:45:b9:ed:bc:ae:f8:e2:a8:3f:86:0a:
         64:95:08:a1:18:96:b2:22:8a:62:6b:01:43:25:aa:eb:ec:09:
         52:6d:fd:cb:b3:8e:26:7f:02:ff:ab:b5:cb:5a:74:84:05:f9:
         d3:9b:86:aa:c8:91:aa:03:d0:89:37:64:33:11:a8:40:ee:3c:
         68:ed:c1:19:4d:78:a9:61:3d:1e:46:60:43:a4:6f:fb:83:cc:
         2a:db:88:7c:c4:88:6a:be:30:23:5e:58:16:78:55:8f:84:fa:
         47:a6:1e:01:a2:13:05:c4:6f:a6:b5:dd:46:b3:0c:ab:b6:d2:
         25:a6:93:51:7e:b9:35:e3:c9:da:a2:20:e6:84:7f:a4:42:e3:
         fb:20:f9:2b:3b:60:00:61:3b:57:b7:56:fb:7d:1c:14:39:c2:
         f8:99:d3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----