Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
File:                     nkz1EkerV_Um84ByWaeNKwJZBgM.mft (raw, json)
Hash identifier:          PU4xqB5m5Jtsvq0kzMft4Z+l61609w8e66WJdVHji4w=
Subject key identifier:   41:D8:E5:34:28:B1:37:C2:07:23:94:FD:34:84:D1:98:94:C6:67:F8
Authority key identifier: 9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03
Certificate issuer:       /CN=9e4cf51247ab57f526f3807259a78d2b02590603
Certificate serial:       01962FABA115B866C36DEE8FC3D04DE03539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: bUexMEG5KZ30YS3AFv2LLIm5VUk.roa (hash: 73jcglvdcT9moQ9QgtlZoUeROl6dwy33TWezKXRJ6GM=)
                          2: nkz1EkerV_Um84ByWaeNKwJZBgM.crl (hash: E/Gh4b58q8KCz6/tdNDm0pQRcjH5OxvDsjBBFAD7jvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a1:15:b8:66:c3:6d:ee:8f:c3:d0:4d:e0:35:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e4cf51247ab57f526f3807259a78d2b02590603
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=41d8e53428b137c2072394fd3484d19894c667f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:d3:9b:0f:02:3d:e3:1c:88:23:7d:82:2c:
                    1d:7f:7e:46:0b:f0:dc:f6:ba:09:00:93:05:05:a4:
                    07:53:6a:75:20:06:1b:2d:0e:31:28:b8:ca:55:95:
                    b8:1a:4e:0c:4d:c4:8d:f5:12:3c:e2:72:3e:82:5e:
                    3a:76:88:08:08:b2:b7:11:9b:bc:a3:fe:a8:95:2e:
                    54:a3:f4:6f:cf:7d:c3:6b:ca:b1:00:97:82:c4:92:
                    d3:eb:a9:d4:6b:4a:1d:0c:e9:8c:77:67:85:a3:79:
                    1e:0c:76:c8:4a:16:ed:15:9a:f9:41:fb:8e:05:89:
                    77:c1:e3:24:d5:f3:bf:17:39:aa:9d:78:88:0b:d5:
                    83:8e:30:e9:b4:0a:3a:c3:05:9d:40:72:8f:a2:19:
                    f5:b6:b3:05:7f:3d:31:93:5d:0c:69:b0:c7:42:9d:
                    2d:c8:71:9c:eb:59:ea:d9:b1:bf:dc:3f:4f:71:f1:
                    ed:76:48:e9:6c:b3:8d:88:0a:de:cb:10:f8:b5:da:
                    f0:93:7f:44:0d:dc:1e:aa:bf:df:bc:7f:3d:4c:00:
                    e9:9a:67:08:cf:5a:55:f4:6f:c3:f0:0b:24:23:0e:
                    b6:23:63:32:0e:17:05:84:20:1f:82:1c:8d:11:57:
                    bc:e2:f9:d5:ca:b4:ae:8a:9f:13:ce:43:ee:4e:da:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D8:E5:34:28:B1:37:C2:07:23:94:FD:34:84:D1:98:94:C6:67:F8
            X509v3 Authority Key Identifier:
                keyid:9E:4C:F5:12:47:AB:57:F5:26:F3:80:72:59:A7:8D:2B:02:59:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkz1EkerV_Um84ByWaeNKwJZBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b6768f-d395-4681-a3f3-3cf306807a7e/1/nkz1EkerV_Um84ByWaeNKwJZBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:95:5d:e8:73:a9:73:73:9c:70:7b:99:00:74:58:31:4e:82:
         18:b0:a6:5b:a9:e4:57:a5:73:cf:b6:0e:69:85:8f:1e:f7:e9:
         76:a2:eb:3f:c8:c5:68:2b:c5:09:b1:8a:3a:00:89:00:3c:9a:
         bf:c1:e0:06:e9:cf:c2:94:a0:95:93:8c:04:76:f1:86:08:00:
         f2:f6:55:38:1f:3c:d7:90:f2:e2:92:97:1d:e8:32:fb:c1:1e:
         95:49:a0:69:4c:46:c8:fe:48:dd:6e:ee:8f:9d:d6:30:82:2d:
         2d:0c:53:3c:28:dc:20:3b:7d:12:8c:76:34:b7:70:01:a9:a0:
         94:61:77:5b:6d:26:df:b8:9c:a3:a5:08:b7:b5:00:ad:f9:18:
         d2:66:c4:58:29:27:65:ab:0a:20:33:4c:f6:af:6c:aa:bb:1f:
         45:29:7a:97:88:2a:d9:7d:7b:36:da:9f:dc:97:d2:d9:89:ee:
         a7:ef:7d:b2:04:a9:8a:2c:fe:d1:91:25:98:94:7b:64:f4:bd:
         f8:92:4d:f2:de:b1:b8:79:62:f2:54:e5:3b:57:05:e8:0b:ab:
         31:a8:73:dc:1e:21:b9:59:c4:a5:ee:28:df:4e:80:31:23:04:
         83:bf:c4:07:f0:92:e0:93:98:5c:19:36:d2:f9:53:e1:9b:f2:
         b2:65:4f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----