Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
File:                     nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft (raw, json)
Hash identifier:          cjjrUCkF3SpksqzQecsZ7WYwcU5e77N7m8HYWXuOTkk=
Subject key identifier:   66:75:C1:F6:0C:25:90:C2:08:A7:54:93:B9:A4:57:C3:EB:82:8F:D9
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Certificate issuer:       /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial:       01962E99075323F29EC35E9C99F6B78D0769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: fkzPxe4oSfJ7rsZHCJi7Ez_ga90.roa (hash: mg3GC3ABaXwmgAsHAk2LKt5EpoWqSB6jRcpbqBUg5ds=)
                          2: nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl (hash: kCgCVdQfk7RKCRcUyx48AdUUXsAmx/oq72/NovY4Kbc=)
                          3: xd_ulFUkeSmauZZHfygS0GuYPDk.roa (hash: 0UrnjaSCTnjc1IdqCWJgrHL+McaCLRgIVm4A1cu8hrY=)
                          4: zLSBa_Lpc4W3Wtwqr4jY0shqN84.roa (hash: U60yO0QiVT0TF3gZ30RzvO8zoPaRPZA/6UejA6WGNuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:07:53:23:f2:9e:c3:5e:9c:99:f6:b7:8d:07:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=6675c1f60c2590c208a75493b9a457c3eb828fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:7b:0f:41:61:29:0d:d2:ef:81:4d:1d:9f:
                    5c:fa:aa:1f:83:6c:52:54:20:1e:b3:4d:17:5d:bc:
                    15:79:d4:17:40:1a:93:e6:f0:ca:70:37:87:69:10:
                    9f:d9:d2:58:73:25:6e:20:27:bf:77:45:a4:ad:a0:
                    89:05:d2:a4:8a:c9:c4:00:f8:62:4f:c1:65:36:7f:
                    65:73:8d:4c:43:0d:9a:98:4f:a7:f6:e5:11:a9:34:
                    19:cd:5c:be:2c:ac:51:6a:c3:27:cc:37:82:28:f2:
                    96:e9:26:fe:01:49:98:d5:ac:49:b0:f1:52:6c:ee:
                    b6:2e:f7:89:3b:b5:15:4f:53:2c:30:66:ad:c6:e5:
                    0e:a7:40:04:18:52:50:d7:cc:9e:52:af:f1:1c:18:
                    72:6a:c1:47:43:46:2a:b2:28:4b:38:73:18:2d:2f:
                    e8:ba:1a:45:bc:c0:4d:18:6a:43:a5:fc:ee:93:ce:
                    53:c3:67:a1:5d:b0:d6:92:ee:0b:39:7b:a2:18:f3:
                    d5:6e:2c:24:ac:dc:b0:53:41:e3:9f:09:b1:58:f4:
                    ab:35:cf:02:3c:a3:a2:62:e2:8a:fa:16:af:5f:80:
                    b0:e4:a0:cb:b3:13:75:20:86:02:c1:0a:e8:54:e9:
                    9a:39:04:d5:f0:bc:1b:70:78:19:9a:1c:26:09:09:
                    43:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:75:C1:F6:0C:25:90:C2:08:A7:54:93:B9:A4:57:C3:EB:82:8F:D9
            X509v3 Authority Key Identifier:
                keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:08:14:1a:39:4c:a8:cf:43:04:69:02:9c:3a:4b:da:9b:81:
         7a:d8:5e:b6:fb:48:be:c9:8e:f8:95:e8:b5:a1:85:bd:da:9d:
         9d:22:1c:cd:6a:5c:82:59:8d:bf:5a:42:3b:5c:c3:a8:38:67:
         a7:e9:39:05:65:d9:88:fc:74:0c:3e:f5:a2:0b:83:86:85:ae:
         b1:f2:96:bf:65:4c:c4:f2:5b:75:b8:99:c9:1d:48:42:00:7a:
         4e:25:7c:1a:55:95:dc:4c:b3:b1:8a:67:fe:29:a1:24:50:a3:
         01:af:ea:91:73:a3:2c:6a:64:8d:28:ec:29:6d:6b:e2:ec:ec:
         ea:17:09:79:2b:15:67:e4:31:b6:d9:33:79:e7:3b:bb:40:0a:
         1b:a1:1a:c2:d8:f1:7a:e7:1e:71:42:ee:3f:89:b2:56:7a:c1:
         b1:cd:cb:e5:a4:b9:f5:8b:22:af:77:5f:c6:03:5b:71:c1:98:
         08:87:a0:b8:09:00:f3:ae:f4:41:b3:e0:a7:35:5b:e9:f2:44:
         c4:e7:44:6f:34:c7:eb:07:fd:fa:fe:6c:f2:7c:f8:a5:e5:3b:
         73:6d:53:03:2a:59:a8:18:2f:50:0e:8c:d0:3b:42:43:c5:1d:
         74:62:5d:12:c5:fe:ca:2d:87:a7:36:b6:8a:26:4e:38:e9:99:
         4d:f9:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----