Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
File:                     nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft (raw, json)
Hash identifier:          aaZhft+PGIruItP882/3sHiv8kc7gr/n1o6Htup0zL0=
Subject key identifier:   51:78:79:6E:30:D7:E5:2F:C7:A0:26:D0:75:D1:E0:DE:4E:EE:E1:E0
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Certificate issuer:       /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial:       01962E99944A55BB26451FBDE36A5F2E3EBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft
Manifest number:          076A
Signing time:             Sun 13 Apr 2025 10:02:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:18 +0000
Files and hashes:         1: 91cINY9woI_zH6e1r3Wkrenr7Yg.roa (hash: 3OQuboWAG+RQMvSWcHif8T7bhj5yD9lJGrTB5RXF988=)
                          2: nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl (hash: VTri9i5aB19lponb3Fw1EV0/W4+FgJLtWlXQVoIi+RA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:94:4a:55:bb:26:45:1f:bd:e3:6a:5f:2e:3e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
        Validity
            Not Before: Apr 13 10:02:18 2025 GMT
            Not After : Apr 14 10:02:18 2025 GMT
        Subject: CN=5178796e30d7e52fc7a026d075d1e0de4eeee1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:65:b6:5b:a1:af:7c:8c:1d:61:05:22:27:42:
                    4f:ea:02:5b:e7:37:84:cb:bc:34:01:3d:78:38:9b:
                    fd:04:f9:74:dc:9c:7e:61:9d:9a:c7:ce:55:43:45:
                    15:a5:40:e4:38:6b:04:bd:c5:de:9f:fc:81:60:f9:
                    90:2d:19:7d:21:a4:d1:94:37:c8:f5:aa:c5:c5:3c:
                    13:25:2a:18:3a:36:5d:4a:c0:ee:ea:b5:a7:63:5c:
                    1e:75:35:0c:44:b4:14:5f:9b:82:37:65:9f:2d:0a:
                    01:26:91:7f:45:07:99:42:c3:2d:c3:46:85:c5:86:
                    2a:0c:5f:8e:12:af:f9:aa:64:1d:c4:84:78:22:22:
                    ae:99:c9:01:76:1a:a5:ff:e0:e4:7c:41:92:c2:e7:
                    d5:94:40:cf:93:48:e5:59:4e:db:8a:72:1c:57:17:
                    a4:66:35:6c:cb:5e:e7:a6:26:fd:7e:d4:0b:97:41:
                    8f:15:b6:c4:f9:3b:b0:88:74:63:6a:c8:cc:66:4b:
                    16:eb:73:07:83:7a:5a:80:6c:c2:21:40:ff:2a:59:
                    89:ab:ba:d4:ed:4e:4b:c3:55:48:67:5f:5e:2e:68:
                    d0:4b:de:3b:f4:7e:49:9d:27:f7:1c:a9:ff:e3:0c:
                    4f:bd:d7:ab:84:d3:b7:5f:68:42:78:84:c9:f9:20:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:78:79:6E:30:D7:E5:2F:C7:A0:26:D0:75:D1:E0:DE:4E:EE:E1:E0
            X509v3 Authority Key Identifier:
                keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:dc:24:93:1f:ba:42:55:ba:22:c5:4f:ba:2f:9b:86:84:5c:
         be:8f:3e:cd:1d:ee:87:7a:10:8c:83:f4:bb:d2:81:1b:0a:ea:
         83:11:13:6a:75:d2:5d:fa:23:aa:cf:19:51:61:b0:3b:f1:af:
         7d:35:40:64:4e:8c:2b:eb:01:7f:41:36:de:35:0e:44:3c:30:
         53:85:c8:f3:ae:d1:5d:8c:c3:18:0f:6b:31:e6:31:4e:39:b3:
         f1:b9:bb:f8:54:03:ef:50:d8:34:e3:9e:9a:71:94:e1:04:7f:
         7a:38:aa:44:cb:0c:de:10:ca:35:1f:f5:bb:d8:e6:73:8b:70:
         96:57:dc:b7:2e:1b:16:58:90:4b:a7:05:85:30:aa:97:70:4b:
         7a:30:e9:5f:8d:ab:23:af:f7:fb:13:1f:12:a2:b2:74:c0:7f:
         b5:93:e9:7b:bc:61:9f:36:6d:62:63:0b:08:a6:ac:6f:9b:f5:
         06:54:de:30:1c:41:6f:f8:db:6b:fa:ed:92:9e:44:ab:ff:c3:
         bd:f2:6d:37:79:a7:34:9c:16:1c:f4:93:9c:b6:85:1e:c9:05:
         f0:5e:c6:f8:db:e7:11:24:1e:2e:ca:33:4a:4d:b3:17:5c:d9:
         d4:d8:75:59:26:48:41:14:18:59:2e:cf:c7:6e:f9:04:39:3b:
         c5:58:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----