Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
File:                     ngN01xvFfbltw5PpH-u56dWf75o.mft (raw, json)
Hash identifier:          qBQfIA3qe/F4wgNhvxKUB4QDBGV8i/e9ny1B8EKftCs=
Subject key identifier:   DB:42:3E:08:78:EC:8E:90:99:B4:A3:F8:B3:8E:E3:77:6D:0C:72:80
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Certificate issuer:       /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial:       0195E1900D6C28400808717F6DAF1E7214A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 11:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:08 +0000
Files and hashes:         1: 90vahj-_hJ5i1HoZpq9u0D0BXno.roa (hash: hNcbTROFVc3qb49hFAj0UmBrANu4X9fdOG7KqwGkrWI=)
                          2: aiayIUHfqJqjLTqVFWc4nu-4G4A.roa (hash: pzPbeMaNHz+Qf8EsosFYtAc0dvzeTKY+f3jQ8e+tojI=)
                          3: ngN01xvFfbltw5PpH-u56dWf75o.crl (hash: 9D583knBRccJYGHRKJjCVTLn/7wTDOoh4tvU9eU7Yo8=)
                          4: pchvFEtf54PSSiTi01p5PApQHUQ.roa (hash: LNaFLGgXExgOKyuOXBO2LPMxZGv4i1837UIKdLVtZOA=)
                          5: q3loLepsq8UUkjol44_uG7-Dp-g.roa (hash: HiKWGBwaGg7MLWq1sRr7H+Pilt+M4gjbpsaE+yrM590=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:0d:6c:28:40:08:08:71:7f:6d:af:1e:72:14:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
        Validity
            Not Before: Mar 29 11:01:08 2025 GMT
            Not After : Mar 30 11:01:08 2025 GMT
        Subject: CN=db423e0878ec8e9099b4a3f8b38ee3776d0c7280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:f6:31:94:1e:ba:a3:fb:cb:55:26:39:1c:
                    62:58:0a:71:76:b4:3e:ee:ee:74:30:2a:e3:37:cd:
                    d8:88:c4:89:17:ea:b1:0f:f9:4c:6d:7b:84:6d:a2:
                    4e:59:e0:8d:80:eb:a1:e8:ef:27:49:38:cd:8a:06:
                    05:78:54:8f:aa:3d:06:ec:d8:b9:aa:d6:63:d2:0a:
                    4f:46:d5:c3:db:eb:16:1c:4a:01:ec:24:16:92:85:
                    c5:06:69:3e:af:b5:b4:8e:36:c8:5a:4c:e3:94:58:
                    68:11:76:d4:c5:01:a9:f9:65:f9:4e:75:c2:a0:71:
                    39:3a:c6:95:5c:a9:3f:6e:ff:2f:57:f9:7d:c9:de:
                    ac:f6:92:ad:07:bd:21:9d:60:7e:93:7c:2f:67:e1:
                    15:a4:0c:d5:aa:68:8a:f4:1c:5e:10:9f:fc:cd:2d:
                    68:3b:1a:55:85:56:01:30:7e:9f:f8:02:64:48:ea:
                    16:f1:cf:3f:1d:5e:a6:7d:9b:ab:12:05:8f:2c:c4:
                    c6:d8:c5:d6:36:3c:5e:10:0d:84:ab:51:18:e2:7a:
                    df:fc:80:87:c9:31:3d:08:0f:59:29:33:68:6a:1c:
                    d3:ef:85:ee:d5:96:8d:0d:79:c8:72:9b:9f:41:ed:
                    bd:46:11:81:a1:75:82:d1:61:24:bb:f1:fa:11:9b:
                    44:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:42:3E:08:78:EC:8E:90:99:B4:A3:F8:B3:8E:E3:77:6D:0C:72:80
            X509v3 Authority Key Identifier:
                keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0a:ab:8c:47:ed:bf:b9:d0:ad:8d:13:c6:51:1e:6e:fd:70:
         9d:ed:e9:50:37:4b:3b:09:5b:9c:bd:fb:f3:8a:77:ed:1e:fa:
         d3:7a:43:38:ae:74:21:14:e8:99:b3:8f:75:03:5d:94:2a:ae:
         91:51:ab:f6:dd:2d:1e:5b:72:2a:d6:68:d8:15:34:eb:23:c0:
         13:da:c3:8a:78:7e:5e:2b:5a:b8:0a:f2:a1:a9:70:c8:64:13:
         c9:37:58:25:bc:1f:08:fa:d5:a4:1a:43:6f:4d:1a:22:58:c1:
         d5:09:ee:fb:d4:6d:a2:ab:c1:9f:6d:96:1c:68:b9:6d:0d:dc:
         81:fa:22:e0:54:5a:e5:1e:3d:a6:20:9b:21:6f:a1:9c:ac:74:
         c5:dd:49:b0:b7:b2:88:4d:79:39:d6:1d:68:8d:f7:6c:49:f0:
         09:d0:70:7d:4c:82:63:4e:d0:fd:11:ce:af:dd:5f:06:4e:12:
         8e:31:99:21:6f:61:ab:20:5c:77:54:56:7e:32:7d:97:33:c9:
         bb:e7:d3:e5:09:09:00:44:61:b3:47:c6:78:12:24:c8:af:71:
         46:be:10:ff:f4:6a:5f:90:d2:f6:e2:52:65:48:25:f2:61:e5:
         ce:f1:d1:68:2c:7a:9c:ed:fe:18:8e:2e:7f:db:f6:37:70:44:
         02:b4:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----