Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
File:                     nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft (raw, json)
Hash identifier:          liBaWjF4BNOnhrmd0DmomZDsyY/VosR/vM90FxccNe0=
Subject key identifier:   C7:96:25:90:29:52:25:66:56:BE:37:83:FC:F7:F6:E1:75:34:C2:86
Authority key identifier: 9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5
Certificate issuer:       /CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
Certificate serial:       01962F06AB5BCFF41CAD911F066D2C45D243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft
Manifest number:          058B
Signing time:             Sun 13 Apr 2025 12:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:28 +0000
Files and hashes:         1: 3bmAz9vtv2JfaPatPhAR81BLdD4.roa (hash: pscVtMzNszIXtiYFoQgUwJA4nkNZDSRzSpGrx8TMuU8=)
                          2: nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl (hash: 4GEAYSZrW45KRwjdCRI7J87YleIU3bGd+MWIIW/jnmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ab:5b:cf:f4:1c:ad:91:1f:06:6d:2c:45:d2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ef27fae1530ea7167070cf12c486811d8e0bac5
        Validity
            Not Before: Apr 13 12:01:28 2025 GMT
            Not After : Apr 14 12:01:28 2025 GMT
        Subject: CN=c79625902952256656be3783fcf7f6e17534c286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:9c:8e:73:7b:1f:12:40:cf:82:e3:f5:04:
                    be:cd:90:da:ac:d3:72:19:67:d5:6b:28:28:b1:c2:
                    84:18:d5:6f:c4:d2:8a:9d:b2:27:01:d1:d7:a0:bf:
                    5a:a6:d0:62:3c:db:7f:53:c8:6e:db:5f:7a:5a:72:
                    50:f9:05:b3:d5:c8:22:d7:cc:28:61:2c:66:e9:83:
                    75:74:8e:48:a5:ab:4f:79:78:9c:a7:27:55:a7:28:
                    76:f1:2e:9c:8a:7c:98:f0:eb:77:a4:cb:4c:6a:1d:
                    71:1f:79:f5:58:23:df:36:fc:92:1e:42:01:07:56:
                    94:b6:63:20:eb:de:46:c6:3f:85:4f:0b:2f:07:ea:
                    b7:d4:3b:59:ed:20:16:ab:eb:10:35:a7:f6:ab:aa:
                    9d:f9:a3:f9:67:47:31:99:ce:1a:e3:bd:5f:39:42:
                    10:69:95:6e:c6:02:44:c8:b4:52:1e:bf:54:05:37:
                    c2:d7:32:19:f0:31:84:55:19:98:ae:4e:5b:66:69:
                    d7:56:07:3a:19:c8:05:44:1b:12:92:1e:33:40:c3:
                    20:47:2a:b0:1b:ec:d9:57:66:2d:2e:6a:7f:37:fe:
                    c9:7e:16:2c:e9:70:00:f7:86:01:11:8f:c6:9a:e4:
                    6f:90:f1:5b:9c:5c:f1:bf:36:f0:77:56:93:da:49:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:96:25:90:29:52:25:66:56:BE:37:83:FC:F7:F6:E1:75:34:C2:86
            X509v3 Authority Key Identifier:
                keyid:9E:F2:7F:AE:15:30:EA:71:67:07:0C:F1:2C:48:68:11:D8:E0:BA:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvJ_rhUw6nFnBwzxLEhoEdjgusU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/529e84-fea1-4429-83b2-df823e4db1ea/1/nvJ_rhUw6nFnBwzxLEhoEdjgusU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:97:fb:ca:e9:7f:ba:98:ef:e7:2c:fd:43:e7:9b:01:2e:
         a0:87:62:1c:f7:e6:01:27:82:35:1e:a6:f1:20:86:7f:40:40:
         23:97:55:af:0b:2f:da:c5:b5:8a:8d:67:f2:da:bd:69:8a:48:
         28:57:4d:5d:1a:d8:67:4f:cb:c5:7d:1a:6f:c6:45:c7:ba:e4:
         8b:fa:85:68:1b:72:ff:40:e8:98:fc:d3:fa:93:39:21:7a:bb:
         d9:fa:62:14:d4:61:96:e8:9a:7b:62:83:63:52:3a:d3:ab:2d:
         0f:b0:61:30:29:dc:ff:a7:4d:2b:92:de:55:8a:a9:e5:11:a5:
         bb:ad:8e:d1:6d:fd:a7:f7:36:e7:f1:c6:7e:f6:ab:34:6d:ee:
         75:c2:b5:cc:89:26:2a:ac:3f:43:12:cc:a8:da:ec:17:c4:67:
         87:b5:9b:ce:20:f5:c0:ca:02:a9:3f:c9:05:5c:90:a2:a6:6a:
         4e:c0:9b:e9:e9:ec:3e:15:9a:92:8f:00:97:f4:85:05:6f:51:
         29:4a:9a:1d:86:0a:5c:b7:c1:11:3f:08:5b:5a:16:0c:d1:01:
         da:2b:b0:fe:37:c7:18:06:5a:c8:34:a2:23:71:e8:47:3b:66:
         96:94:c0:2d:af:ed:7b:bb:c8:73:8b:43:78:a1:69:10:8b:aa:
         10:6b:fa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----