Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File:                     N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier:          V7bdeW07DrrTHyqq1ZA7Z8dLKrxSAYkL4WGfFyr3E9s=
Subject key identifier:   A0:29:72:ED:83:30:B5:C2:5D:5B:E5:D6:5B:2A:30:8C:8D:57:CC:C2
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer:       /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial:       01962E2ADF7F5961DE6BE8487CCC89D5CFAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: 4Jz1oir2077zD3Qy0o60X8X7rbB3WmpNmZpgZoDRu+c=)
                          2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=)
                          3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:df:7f:59:61:de:6b:e8:48:7c:cc:89:d5:cf:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=a02972ed8330b5c25d5be5d65b2a308c8d57ccc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:41:34:d9:ea:c0:14:d9:73:aa:64:09:60:
                    44:91:c9:cb:27:55:e9:3b:2f:4e:90:dc:50:32:6c:
                    a2:c1:f4:07:26:d6:32:cb:49:a1:bf:ec:93:1d:66:
                    74:f4:8d:e3:c4:80:4f:e1:27:62:92:69:47:3b:04:
                    bc:1f:4b:65:03:e2:fb:2f:88:df:03:bc:0f:fa:86:
                    7a:24:2e:1a:a0:8b:8f:8f:d0:47:d5:b0:30:26:13:
                    be:04:db:3b:7d:e3:ac:24:95:24:73:9f:35:34:dd:
                    9c:7b:d2:d8:ab:ef:70:09:ae:e0:b4:7e:ca:5c:48:
                    7b:20:be:b8:73:c9:6d:a8:5c:20:a3:ac:dd:28:83:
                    15:08:bf:c7:87:f6:be:51:42:05:2e:4a:e4:3d:a6:
                    a3:e3:37:49:e2:8a:d4:c1:48:c6:89:ee:23:95:a3:
                    a1:fa:00:db:8b:58:b1:7b:8d:c0:9f:eb:02:07:59:
                    cd:58:19:8d:b9:6a:f6:78:ee:54:56:90:6d:53:e4:
                    01:a5:7e:be:1a:23:a4:b7:19:c8:39:d5:eb:3e:41:
                    37:7d:ab:0b:2b:2a:db:32:90:2b:fe:fc:e9:a6:c5:
                    a6:76:21:b4:80:af:af:16:4f:58:42:1c:a9:20:3c:
                    5b:ac:8e:c8:60:42:9f:8c:4a:71:b2:ce:9f:ce:26:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:29:72:ED:83:30:B5:C2:5D:5B:E5:D6:5B:2A:30:8C:8D:57:CC:C2
            X509v3 Authority Key Identifier:
                keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:33:51:7f:7d:5a:0d:6c:3e:a0:20:f4:15:c7:6d:d7:b9:bd:
         ea:06:1d:08:b8:3f:d3:5a:1c:ac:86:06:9f:f5:d9:73:ef:8d:
         d8:dd:8e:c0:fa:bd:99:54:df:bf:d6:a3:30:9b:52:c8:bb:cc:
         b1:37:7c:b2:95:ed:f1:04:c2:05:34:98:aa:b7:c9:88:f5:73:
         d1:86:a1:ca:6b:91:74:fa:2b:91:c0:5e:77:9e:4b:66:1a:61:
         00:ac:22:d2:ef:0b:df:ec:7d:06:51:2e:5c:13:fc:da:d4:49:
         be:64:e2:44:d6:90:e8:b6:7a:d6:71:97:03:7d:28:01:ee:42:
         3a:6b:56:a4:68:a9:d9:1c:da:00:b4:fb:5f:57:46:64:9f:da:
         f7:5b:b0:d3:e6:6c:3a:2f:42:19:48:78:54:93:e3:9d:a0:b1:
         f7:1a:c6:cf:91:ab:41:48:7d:87:d5:bf:60:b9:dd:28:3a:a6:
         36:91:09:ff:00:55:3f:03:ce:f1:68:34:34:95:eb:cb:09:0f:
         52:bc:d0:c1:92:87:0a:5a:28:44:84:14:99:83:9b:74:0a:62:
         97:40:cf:be:26:81:3d:3d:4f:cc:8b:b2:96:d8:6c:28:5e:54:
         e1:8e:17:ae:00:b0:af:6c:77:84:f6:86:81:ad:98:3d:76:f3:
         a5:7e:d6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----