Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
File:                     nxvZcy5s3W50lNeRh_yoVbUZmQk.mft (raw, json)
Hash identifier:          f5qMr+Syuqdgv7N/OIWxgyuKiOOT/clPZFD2TCFlrjw=
Subject key identifier:   B0:8B:91:DC:1B:87:4B:85:FF:A1:7F:8B:DE:13:FD:82:C8:72:A5:E1
Authority key identifier: 9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09
Certificate issuer:       /CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
Certificate serial:       01962F74955A3EB675D21B64BCB83484F95B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft
Manifest number:          126B
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: L2MFVzLu5kpVjnsb4Kb2Ip5hD4I.roa (hash: wDHsr026DvaBiTyi7BBF/QmvI/bBUdaI/D33HJF38Y8=)
                          2: _JE8lnLT-86sHVAHJKlkVaAyjr4.roa (hash: UompnxxivZ8Fg0ySIbxl1tWe4K+WK1YpWsyZpIJAPwU=)
                          3: nxvZcy5s3W50lNeRh_yoVbUZmQk.crl (hash: iEwwoOOjkcNSpvoY5uaBZJ4yYbfDQYfZ3aGFTfUsnp0=)
                          4: qdHDAHiWQsmCFoNetHDwXmdq01A.roa (hash: go8toSa0Pfxl9RGM5eMA7V4+YqEI5lyucr5i8lNbh0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:95:5a:3e:b6:75:d2:1b:64:bc:b8:34:84:f9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f1bd9732e6cdd6e7494d79187fca855b5199909
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=b08b91dc1b874b85ffa17f8bde13fd82c872a5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0c:35:65:90:83:69:9b:81:e8:3c:d4:7f:94:
                    89:34:65:8b:69:66:7b:73:ce:fd:92:60:fe:61:e0:
                    9d:cb:da:9a:4a:1b:6d:79:aa:d4:05:68:88:e7:11:
                    56:a3:60:15:c8:ba:28:73:8a:ca:de:28:52:64:8c:
                    47:9e:14:0d:72:7a:9f:3c:dd:ba:e8:ea:9b:0f:a6:
                    66:39:98:56:18:d9:c4:38:00:87:97:a2:95:1b:b3:
                    f3:79:28:e9:62:c8:01:7c:03:c5:e2:a3:59:35:a9:
                    14:45:df:8f:07:9d:d8:c3:f7:79:65:5d:12:53:f3:
                    39:73:34:2b:2c:e4:80:3c:a5:d0:05:9d:59:69:5b:
                    52:f8:1e:b2:c9:73:6b:b4:0e:7e:3e:f9:83:b0:7f:
                    57:5f:19:9d:b2:22:09:04:17:68:65:8a:d9:ed:6e:
                    f7:b5:ff:d2:eb:a1:a2:81:bf:2d:ef:dd:f0:9d:06:
                    16:78:9e:52:aa:e4:a3:d9:5e:d0:c7:7a:0c:27:f4:
                    4c:82:7b:97:37:1d:0b:bb:b0:18:c5:eb:48:72:55:
                    8c:7b:3e:86:67:5f:f9:bd:c1:30:53:d0:0d:ac:d4:
                    33:e2:0a:e2:57:bd:ad:0c:58:a0:d2:d4:03:c9:b2:
                    27:fd:70:b5:ff:5f:6e:2f:db:46:40:1a:3b:d2:92:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8B:91:DC:1B:87:4B:85:FF:A1:7F:8B:DE:13:FD:82:C8:72:A5:E1
            X509v3 Authority Key Identifier:
                keyid:9F:1B:D9:73:2E:6C:DD:6E:74:94:D7:91:87:FC:A8:55:B5:19:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxvZcy5s3W50lNeRh_yoVbUZmQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/14ead9-cbb1-4639-81a7-d8b8202d7786/1/nxvZcy5s3W50lNeRh_yoVbUZmQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:83:98:b1:c6:6d:f1:de:e3:9f:d9:a5:d7:0e:fb:ed:4d:df:
         82:85:ab:20:27:66:a6:e9:5a:e5:58:e7:61:8f:50:a2:bd:66:
         4e:33:87:ee:8c:f5:30:f9:15:21:9e:43:58:fc:31:86:c3:48:
         dc:34:d7:3b:c8:65:e3:b0:82:43:14:9b:c4:68:aa:82:60:27:
         64:24:81:19:40:b8:44:92:82:16:9a:b0:6b:c2:0b:2d:05:e8:
         90:54:52:56:38:5e:08:0b:2c:6b:f9:41:75:4d:70:a5:b3:b3:
         46:0f:bd:ca:e0:07:4a:87:a0:d9:1b:5f:cc:03:6d:34:54:c5:
         90:74:d4:b3:2d:5f:3a:5e:c4:9c:da:f4:a0:2d:95:9f:5e:d2:
         77:10:cb:4c:dc:94:01:01:97:d7:35:57:fa:4b:5a:e4:c7:39:
         0d:bd:11:ad:5c:c9:4f:db:2d:7e:05:51:d1:45:c1:12:6e:f8:
         66:9e:12:ac:dc:8f:87:cf:3a:67:8c:eb:d8:16:4e:89:d2:6a:
         ea:cc:3d:6b:54:d5:16:36:cd:32:4d:3b:e4:25:8f:a6:b6:d4:
         8c:d9:19:44:70:fd:0b:96:1e:96:3e:af:4f:41:50:ac:b3:a1:
         03:6e:df:9a:d9:d4:6e:3b:12:e9:86:df:8b:9f:ce:6c:8d:5e:
         89:f5:49:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----