Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File:                     nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier:          VU0jRGKuh3QB6O7hCMEO61Nrs+Hro++MNl8Mjv952Vc=
Subject key identifier:   1F:76:69:9F:AE:6A:5C:7B:52:0A:DE:1C:F0:D5:85:46:E8:81:C5:FE
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       01962DF43E778CB16929C2029292E05434A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number:          14C8
Signing time:             Sun 13 Apr 2025 07:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:43 +0000
Files and hashes:         1: 7OjUVrWvd7B0o85DaKLfYgEDYYg.roa (hash: ElsP3+WGZy5wELbMJiGSwWwzyGB160S3FayAOyAR3A0=)
                          2: miGTaFk5Cl8OYVzdHPitg-4uIW0.roa (hash: AGqT78lBpkV9yA91ZQMLyqGPYCLhxFGELYf24q65eEw=)
                          3: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: Iz92jIzFmoj9rVXK/m+Ug53siywfWTeoOXCYveH0N2E=)
                          4: q06qTUv5-JCRpItbJ_9COQqHH6A.roa (hash: elj4UEL+GeLcIcxtH4+ahp+BuvQR4jhMQkNkTFsz2eM=)
                          5: zn7RiYTFSuY_H6EW4hkd0ugXhg4.roa (hash: TjPxbEKTKC4G0EExaKEE++vAM3LyoGQfvbpHNfpM9R0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3e:77:8c:b1:69:29:c2:02:92:92:e0:54:34:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: Apr 13 07:01:43 2025 GMT
            Not After : Apr 14 07:01:43 2025 GMT
        Subject: CN=1f76699fae6a5c7b520ade1cf0d58546e881c5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8f:07:d0:c6:5f:dc:f0:41:ad:68:b3:fc:3e:
                    fb:55:56:1e:4c:64:6a:35:8e:c7:ea:4e:c1:d1:e5:
                    2f:30:50:bc:78:20:c4:02:30:72:60:f3:b0:0c:4f:
                    5c:d5:85:f7:ea:bf:c4:c4:d3:a2:40:68:37:64:99:
                    a6:45:19:63:64:4b:2a:da:4c:8d:d0:ac:87:47:1f:
                    9b:c0:25:e8:e1:4f:4a:cf:ac:a1:cf:85:ed:1c:fd:
                    ab:7f:df:3b:d0:54:d4:95:8a:fe:db:af:79:04:a4:
                    9b:67:a7:bf:96:92:55:e4:e5:12:81:b6:b5:c4:ac:
                    73:13:61:1d:38:87:bf:ba:75:e5:2b:22:e9:bb:bc:
                    a0:12:6d:e0:83:2b:04:09:6e:28:0e:78:82:6f:3a:
                    12:af:76:b1:92:a6:21:fb:8f:f4:86:a4:41:a4:b6:
                    fc:30:30:26:2d:be:13:ab:d6:ec:0d:7a:8d:46:bf:
                    87:c3:ef:cc:69:42:49:72:dd:74:46:22:74:41:66:
                    56:92:a9:5e:de:1b:61:a4:27:e9:f0:81:f1:e9:ea:
                    06:54:34:ce:a7:63:64:a1:01:4b:24:09:20:2d:79:
                    4a:53:ae:b0:88:cb:69:64:c7:06:c2:76:20:2e:cf:
                    77:61:2a:2c:73:38:f5:16:01:f4:ae:b7:02:fc:fc:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:76:69:9F:AE:6A:5C:7B:52:0A:DE:1C:F0:D5:85:46:E8:81:C5:FE
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:31:52:f2:26:75:98:cb:8f:69:10:aa:65:c1:3f:23:cf:
         65:43:44:21:ff:58:2a:c8:0e:02:67:8e:e4:a5:a4:23:16:f5:
         e6:29:35:22:94:4a:32:66:83:2b:63:54:16:73:21:19:24:24:
         28:d6:66:90:e0:72:86:f8:dd:f7:5d:ad:48:d8:f5:07:0d:b5:
         e0:9d:89:63:b1:2d:44:f3:27:01:89:70:43:8e:e4:c2:5c:7e:
         2f:b0:fa:21:58:ec:9d:03:fa:13:c9:fa:cb:da:b5:15:fa:6c:
         f0:da:e2:fe:66:3b:95:0d:c7:4e:d8:c4:71:27:6f:94:f8:56:
         2d:7a:e1:aa:39:4d:a2:4f:0d:4b:b1:0a:dc:5e:96:32:11:8d:
         26:05:1b:96:9f:e0:7a:42:13:2e:8d:e2:50:d4:05:f2:6e:34:
         d6:64:6b:cb:dd:6d:d6:7d:bd:ad:43:5d:9c:c0:df:15:ef:25:
         da:d9:e3:01:9c:dd:eb:f9:0f:f8:b4:78:bc:23:d8:7e:d9:73:
         aa:70:95:90:39:c3:89:f3:f5:72:a0:54:71:a1:ec:79:9a:d1:
         c6:e8:21:f9:5f:f9:4a:ff:cb:50:47:e5:52:db:6f:e2:96:72:
         da:45:3a:68:e8:67:8f:32:45:ea:b7:cc:18:92:b7:d1:ac:cd:
         7d:d8:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----