Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
File:                     nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft (raw, json)
Hash identifier:          SFDy4EmEPR7Ulblq1aEjbFRy6P04ZLQhrflJmu1/Izw=
Subject key identifier:   1A:6D:1C:48:3E:A4:96:66:89:23:C9:9F:FD:F3:8B:A4:06:EF:54:6F
Authority key identifier: 9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED
Certificate issuer:       /CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
Certificate serial:       01962E618DCF4D0A926CFD434CB4955A7C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft
Manifest number:          07B6
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: CAv9rzPv7Heix16M5AOoPXOPd4Q.roa (hash: LMRzKo9NjTluip/QqjWWZG7E9ryz+Y9CDOMAPiGo6ag=)
                          2: HvZFP08B7xYA2IQmujw7UzbkG0Q.roa (hash: 7DGwHO9AiazjzBsJl92PU2yw56tPjljLpvn/rYKQLdM=)
                          3: nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl (hash: 3QSiATaCbfiO+A6pzfR0fumqZ9IMrnx7BJ/Z+iKiQYI=)
                          4: oR-FUhbEvQx9rEQNZ_WugrEWdnk.roa (hash: BD8t2aBzJsutTWI6CA4SIZqGlJUGz2L2fZecOB/8228=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8d:cf:4d:0a:92:6c:fd:43:4c:b4:95:5a:7c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb96ce59c59557530f0eaa44c664503d9c401ed
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=1a6d1c483ea496668923c99ffdf38ba406ef546f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:87:c4:7c:77:6f:29:98:50:0e:3d:2d:a7:
                    2e:03:72:41:6b:a6:36:a9:d5:55:27:e1:73:03:85:
                    b9:00:6b:7d:ac:82:ae:6f:fb:c5:52:7d:f3:18:c1:
                    06:a1:7c:78:de:f5:80:55:17:ca:af:d1:e4:fc:97:
                    cb:f9:a4:d2:93:1a:96:73:8b:5b:0a:b1:0d:eb:83:
                    83:b8:92:67:e9:d9:fd:9e:11:2b:a5:39:f3:e8:81:
                    7a:4b:c4:18:3c:08:78:82:4d:83:d0:a4:97:cf:63:
                    f1:9c:6d:73:bc:b5:3b:8e:a5:83:b6:80:16:21:9b:
                    69:1d:7f:f9:9e:35:d4:b0:a0:36:cd:30:cf:06:ff:
                    b2:cb:1e:ce:3a:69:9f:b2:44:b2:ba:8c:5e:47:67:
                    c8:14:da:7f:ae:bd:6b:96:b4:d0:88:09:a7:92:2f:
                    d3:a4:76:bb:cd:39:b5:e3:7d:10:70:7b:18:21:06:
                    b1:64:e5:ee:51:2d:f9:08:7d:80:27:c1:39:25:9c:
                    e9:2b:e3:50:1a:5f:4f:47:e7:f5:73:25:40:62:35:
                    f6:96:59:37:95:49:47:a4:ec:97:ba:88:6f:81:5f:
                    56:8d:8b:35:d2:ac:de:0e:87:15:f4:89:23:39:53:
                    83:49:c8:0f:37:23:84:2a:d3:58:46:f7:f3:11:e7:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6D:1C:48:3E:A4:96:66:89:23:C9:9F:FD:F3:8B:A4:06:EF:54:6F
            X509v3 Authority Key Identifier:
                keyid:9C:B9:6C:E5:9C:59:55:75:30:F0:EA:A4:4C:66:45:03:D9:C4:01:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLls5ZxZVXUw8OqkTGZFA9nEAe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5dd7b1-e337-404d-b764-ddb0b148e46b/1/nLls5ZxZVXUw8OqkTGZFA9nEAe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:03:61:90:f2:dd:51:9b:15:46:61:4d:ef:32:e9:3f:46:6d:
         62:3b:af:17:5a:ed:3b:c2:0d:d1:c5:bb:c6:17:5f:b2:4d:f5:
         15:01:86:3b:02:77:51:77:70:a7:61:f1:26:db:d7:7f:51:32:
         14:11:d3:a8:e6:01:fa:ac:84:c2:28:44:4c:c0:6d:d0:67:7d:
         1e:ab:d3:e1:45:55:9d:ef:86:b3:5c:e1:16:b9:d4:08:7d:5e:
         68:6b:a5:e7:3a:39:13:e4:7e:e9:38:f2:d8:c0:62:d2:37:90:
         f4:c1:3c:f1:26:34:d5:ec:a2:86:78:89:ec:55:f7:90:72:ff:
         eb:a6:0a:d2:a1:c1:6c:2d:52:f7:fc:83:d8:09:a7:67:8e:0a:
         6e:6e:10:1f:45:fe:e9:60:91:c8:b1:c5:a2:ad:6f:11:be:45:
         3f:9a:25:48:34:45:dc:05:16:87:16:4a:00:42:38:8d:93:cc:
         1f:80:6b:36:84:8a:c4:85:d7:51:8e:02:c6:21:fa:cc:9c:fa:
         0f:cd:0a:38:15:12:f9:cb:43:ac:0d:9d:27:87:31:3e:08:20:
         47:30:e6:db:ab:2a:ab:4f:66:3a:2d:2a:53:fb:a4:b0:4b:5e:
         90:eb:a3:1f:de:52:8e:12:40:24:a0:25:5c:90:90:6a:2f:a7:
         7b:05:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----