Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
File:                     NscJXgRZhgU7mz6HiQNnJoN90fU.mft (raw, json)
Hash identifier:          2FlEofLJHXPHaRE5sdoDgLDqk/34EzCywO9y0KJ+8qY=
Subject key identifier:   48:DD:45:9B:12:5D:A7:21:EC:B1:DE:0E:E8:ED:F0:A5:1A:C4:D9:0B
Authority key identifier: 36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5
Certificate issuer:       /CN=36c7095e045986053b9b3e8789036726837dd1f5
Certificate serial:       01962F3D77F227854CAE109E37FCE4EA7015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft
Manifest number:          0413
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: 13YuQXcDJbnIYp9Q74L-JDcuLVM.roa (hash: xxqrr3XwSKukvs1NGhAPXhNBgDJT5zDVkc5duMlGjfY=)
                          2: NscJXgRZhgU7mz6HiQNnJoN90fU.crl (hash: s5jmtioX5AE4NBQjEgok4N6jrhHtur2bhWdZhjTk0+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:77:f2:27:85:4c:ae:10:9e:37:fc:e4:ea:70:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c7095e045986053b9b3e8789036726837dd1f5
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=48dd459b125da721ecb1de0ee8edf0a51ac4d90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9b:2b:95:53:2d:a6:2c:1a:2f:22:ef:2f:76:
                    6a:07:7c:9d:cc:f2:ad:8e:5e:a3:9c:07:68:ba:b1:
                    ba:a0:fd:ef:d6:bb:74:b0:1f:12:e8:93:e8:83:de:
                    f6:7a:f6:0e:10:77:40:62:d6:86:c4:e8:63:01:b4:
                    f8:89:8a:4b:44:f6:5b:3c:45:02:29:f7:4c:b0:d0:
                    b5:5e:c8:93:8d:09:3b:fc:e0:4c:09:84:70:e9:26:
                    62:dd:d2:2c:95:cb:55:fb:1c:73:05:f3:85:7d:7d:
                    d7:9f:56:b1:9f:c8:19:61:b9:f6:c8:19:85:af:96:
                    08:4e:15:b0:3d:ad:d5:da:91:ad:8a:2f:17:58:dc:
                    07:3a:03:52:ab:f5:fc:2e:50:60:1d:56:a6:9b:61:
                    62:b7:0b:57:0c:1c:35:a7:f8:cd:52:07:e8:e8:b9:
                    84:3b:77:47:72:07:57:17:29:56:86:44:6d:98:e1:
                    aa:e1:dc:e4:12:82:54:57:26:74:60:91:aa:a0:2a:
                    c7:0b:5a:1f:6f:a6:ba:bc:f7:76:4e:cc:cd:fc:e5:
                    61:41:0f:b7:bc:9c:51:be:8d:9c:ac:d6:45:96:59:
                    24:db:70:d9:d0:6f:b1:05:c5:46:14:b0:f9:00:b5:
                    ce:f5:4a:1e:3c:66:6d:cc:d1:e3:e4:48:a8:6f:c5:
                    a9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DD:45:9B:12:5D:A7:21:EC:B1:DE:0E:E8:ED:F0:A5:1A:C4:D9:0B
            X509v3 Authority Key Identifier:
                keyid:36:C7:09:5E:04:59:86:05:3B:9B:3E:87:89:03:67:26:83:7D:D1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NscJXgRZhgU7mz6HiQNnJoN90fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4d58f5-5c3f-4aca-97b8-6d8a69a0ad43/1/NscJXgRZhgU7mz6HiQNnJoN90fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:78:17:8e:16:60:0e:aa:92:1f:fe:16:74:87:d8:bb:b4:ef:
         f1:ae:a0:5b:86:24:11:69:5a:a3:eb:ab:1b:1c:ad:c6:01:d4:
         18:04:39:16:4b:9f:11:5a:20:34:db:d3:40:97:71:61:e7:9a:
         9d:fa:c5:97:db:88:67:a1:b5:2f:e0:70:e6:6b:79:60:22:19:
         00:6f:62:c9:db:bc:df:f8:4c:ac:87:70:ca:0e:f6:61:04:1c:
         d6:1a:59:1a:5d:7c:19:6c:e7:40:16:09:02:1d:96:79:0b:b5:
         96:63:78:69:75:b0:a7:7a:9c:66:4a:5b:46:c3:27:c9:46:86:
         c0:97:e2:a3:20:26:a8:2d:78:ee:d2:1e:2f:f4:73:48:36:ba:
         c5:32:68:fd:15:4e:7a:fd:b4:d0:d0:71:ba:24:d9:9b:a2:d5:
         07:e5:2a:51:92:46:dd:55:95:12:f2:0e:c7:a2:37:f0:b4:c9:
         3f:01:c4:d7:04:fd:17:a8:76:f0:68:b2:18:d5:f8:9a:c0:8a:
         c3:ee:a9:61:78:a3:62:34:42:a7:ed:90:f3:4b:f9:f0:71:02:
         01:6e:9f:e0:6c:3a:7c:23:a8:21:e8:46:c5:bd:d7:63:de:cc:
         f2:9e:32:86:09:63:82:6e:47:05:48:fc:f7:21:cc:e0:62:27:
         00:c0:c3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----