Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File:                     nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier:          IpQM2Nbx7FQwTwL7DvS80b1QXCNXQ9t2xKNuFIsJCi8=
Subject key identifier:   42:FA:6E:9D:B0:9A:69:1C:8C:B3:1E:CC:07:B9:95:BF:F9:BC:14:89
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer:       /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial:       01962DF3D9E6D328231D488653789BAB6DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number:          0BBA
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: MxLcAgXC0vRpPyT-3NXtB6NlTcM.roa (hash: glwD9i/+OFABXNduZaHp2v7di44Ewcx6kWVCmGzy8h8=)
                          2: g1QBI0oBpZMDfLnVbzlJh58dtno.roa (hash: DThH0UYff9JRlzHoLRkutIVBWjbtodZbQuiDh8h2xSo=)
                          3: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: QxYBbuLIqwiYyKum+0loN57p3kK0YXeVq6bT/seSyws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d9:e6:d3:28:23:1d:48:86:53:78:9b:ab:6d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=42fa6e9db09a691c8cb31ecc07b995bff9bc1489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:91:d8:17:ec:f2:4a:45:d8:7b:18:d7:bd:29:
                    43:c6:e9:8e:a1:03:14:8d:90:a2:3c:30:0f:78:64:
                    1d:2f:09:c1:53:9a:2e:70:d5:1b:a2:8a:64:ed:e8:
                    2c:33:6a:71:e4:d7:35:02:11:d6:9b:ee:3e:88:b3:
                    c9:91:d5:6f:24:5e:31:94:7e:ec:29:a8:e3:31:1d:
                    f4:c2:55:1e:c8:38:22:90:9c:2d:ce:cf:ae:fd:03:
                    48:f4:b4:57:22:d8:64:2d:3e:87:13:a4:fc:bf:6e:
                    7e:52:cc:d6:ce:ab:de:c4:e5:a3:96:84:6d:3a:2c:
                    62:6b:07:23:69:d7:22:04:3f:5d:05:22:1b:6c:36:
                    8b:c8:1e:22:f8:7d:ae:3c:a8:49:6a:63:d7:e6:52:
                    13:66:db:8a:a4:a4:aa:89:93:a0:61:0f:93:c2:ba:
                    a4:9c:09:27:e1:c1:6d:fc:39:13:8c:c7:5e:b8:06:
                    0c:2b:96:bd:9e:a4:c7:d6:9c:56:ea:5a:5e:22:ea:
                    8a:84:af:2b:b4:82:ba:04:1b:71:b4:14:d4:0d:42:
                    fc:cf:d9:6b:e5:5b:c7:e8:26:19:f5:53:0c:b0:a0:
                    9f:bc:95:a5:7b:4e:12:28:28:9d:97:71:07:f5:6d:
                    2c:f2:00:3e:3a:4f:8c:0e:8f:d5:0d:9c:dd:4e:2a:
                    92:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FA:6E:9D:B0:9A:69:1C:8C:B3:1E:CC:07:B9:95:BF:F9:BC:14:89
            X509v3 Authority Key Identifier:
                keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:07:98:0f:9a:4d:06:5a:cb:8f:a4:ec:a9:73:b7:98:2d:c2:
         47:3a:d5:0b:4c:43:54:12:a2:e4:09:e0:d7:09:f8:10:b9:20:
         eb:61:ff:78:da:77:23:34:e4:00:ef:d7:63:39:f2:32:89:23:
         29:86:79:78:3d:12:2f:96:4a:4b:9f:fd:8f:79:ee:42:65:ae:
         25:f6:8b:e3:fa:33:c1:83:20:4d:95:5b:aa:0d:81:2d:05:19:
         7a:b9:a2:8c:30:c3:81:d9:fe:75:ce:8e:67:d0:47:60:12:b0:
         04:9f:ea:38:55:d1:e7:a0:11:ee:d1:b8:95:bb:06:76:c4:0d:
         1b:0b:ab:64:20:21:9c:ba:5d:e6:06:8e:97:49:e1:3a:48:25:
         9c:b2:5c:61:e6:72:64:7b:0e:93:d9:a3:20:e6:4e:24:c9:bc:
         da:40:6f:cc:77:cd:63:7e:50:19:f8:fa:b4:ea:7b:59:56:58:
         08:75:e1:6b:08:b8:22:42:84:01:d9:60:6a:61:f4:11:5e:87:
         6d:c2:89:e5:ea:0d:1e:1b:25:11:48:6b:93:9e:73:ff:8d:04:
         1a:4b:63:b4:15:67:86:26:bf:0b:50:c6:e5:d3:0b:01:64:4d:
         3c:5c:39:8f:14:09:66:0f:22:9d:4d:56:cc:2a:d5:8f:13:19:
         b0:a3:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----