Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
File:                     nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft (raw, json)
Hash identifier:          Ioy58l4NRI7sDu3Y0LdtPC2eKUxLRR+PQN6i89kvqb0=
Subject key identifier:   43:20:A1:0B:5F:0C:6D:F8:88:D5:14:24:32:99:DD:24:B0:5D:D9:1E
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Certificate issuer:       /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial:       01962E98C6589191C6D77D40BA4A9C52F36A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: GMzP4FK3BWd73BtB1rspDBtNJAI.roa (hash: RDWj3PKIvnG4Znaa0y/vyFyoiglGm7aIo1wXj8w5Ol8=)
                          2: TrApzRwO46U5cvWOoWRmtJkH50k.roa (hash: jn6OnmEsOzdilDL0UdqQEgfGfw7WKVGdZ+IBRjWfYTM=)
                          3: bkPZdYGaPrRP7ibLuByUsUTfmq8.roa (hash: mPM3jm7wNDKXQnm9t+BGq+2FqCZJMLYCeySMg/uwrT0=)
                          4: nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl (hash: /eqQd5PrQaHmntnxkIb8Y19xkgPiXBVrjLPGAhbr3wc=)
                          5: pMrmZ3KyK7unt5S4RyO1ymV1xyQ.roa (hash: huCovKVCwZRD1Jyuh4oDP9/7mz4WorFE/yOJ4oY3xMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c6:58:91:91:c6:d7:7d:40:ba:4a:9c:52:f3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=4320a10b5f0c6df888d514243299dd24b05dd91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9c:64:96:63:3c:22:37:f9:8d:14:da:52:68:
                    84:5f:55:62:76:50:c8:2b:37:bb:b4:b1:7b:55:cd:
                    4b:87:39:9e:46:fc:59:ef:f7:0d:49:d1:12:10:ca:
                    3d:c0:7c:02:36:2d:93:82:76:bc:c1:ed:03:04:fa:
                    0e:61:a7:4a:41:24:f1:3a:5f:63:d5:bb:d1:c6:98:
                    16:07:a0:38:56:20:52:5d:d8:a0:f0:6f:46:a4:02:
                    67:d7:dc:69:fd:51:ea:73:2b:2b:50:25:24:c0:3a:
                    18:c8:68:18:8d:11:9f:a8:10:30:62:94:45:b8:9e:
                    8a:32:a0:06:40:67:01:86:89:f5:c6:d7:31:dc:3d:
                    8c:a9:fc:4b:45:f3:37:3a:b9:55:ed:36:70:cf:5f:
                    fd:b0:ee:39:78:c6:64:7f:49:68:8f:0a:00:59:62:
                    7a:90:30:ff:74:c3:97:31:14:45:72:3d:4b:e9:91:
                    ff:06:fa:5c:8c:2e:5f:33:5a:4b:54:b5:ff:6c:3a:
                    4e:29:27:c1:71:e4:18:22:77:37:75:04:ed:57:3b:
                    7a:b0:03:1a:57:7d:8c:c3:94:72:0d:da:9a:8f:c1:
                    2d:d6:82:92:e6:fc:ee:fd:87:c6:d0:a8:ec:06:ff:
                    d0:2a:b8:c9:d0:b1:e7:df:34:bb:18:69:4d:27:00:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:20:A1:0B:5F:0C:6D:F8:88:D5:14:24:32:99:DD:24:B0:5D:D9:1E
            X509v3 Authority Key Identifier:
                keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2d:5f:32:a1:e9:7c:39:55:4d:ed:12:99:d1:46:c9:25:7b:
         b0:4d:a0:d4:d1:e0:6b:c3:a2:64:45:54:80:17:8a:30:a7:2e:
         9c:e0:c9:48:81:98:70:2b:78:0e:78:0a:3d:00:60:cb:ee:30:
         3d:ec:e7:ab:57:00:ed:6c:a6:ee:13:e7:00:d0:b2:d4:0a:53:
         9f:09:13:f6:d0:e0:e1:2f:7c:b5:45:04:13:71:26:fa:97:3c:
         46:36:0b:0c:8b:78:ff:1f:48:bd:91:62:c0:22:b8:60:ce:06:
         aa:4e:36:05:34:52:59:bc:8e:1c:05:6d:0c:b3:11:4f:99:44:
         4c:f8:ea:9e:7f:7b:ba:e7:a1:a0:9b:48:50:04:50:1f:cd:52:
         d6:c9:e2:78:6d:bd:05:44:23:2e:51:ac:51:f8:22:13:24:dd:
         0b:39:06:ea:9c:85:74:4a:ad:a0:82:a3:5d:11:0c:35:b5:44:
         7b:ae:0a:71:ec:39:fb:29:f3:f8:0d:b5:15:90:59:31:f5:fd:
         a4:cb:e6:92:25:07:ec:e3:8c:e2:2d:18:83:f4:bc:00:1f:62:
         11:63:63:14:50:49:66:f3:aa:3d:58:55:0a:e9:98:6b:2e:d3:
         fb:43:86:65:68:a2:3f:ff:01:cf:64:8d:3b:08:6d:3f:27:f7:
         8a:df:e2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----